Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File:                     SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier:          t8lCMulHmpgFuq0BVXZU1wpUsd1xgJ7QlQx2blJSwgQ=
Subject key identifier:   8B:CA:33:52:2D:23:C1:0F:43:01:23:C4:A7:6F:69:3D:EF:DF:FF:D7
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer:       /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial:       0C09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number:          0BF0
Signing time:             Fri 02 Oct 2026 19:14:15 +0000
Manifest this update:     Fri 02 Oct 2026 19:14:15 +0000
Manifest next update:     Fri 09 Oct 2026 19:14:15 +0000
Files and hashes:         1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: VNwrDXjFXL9rWyiQ5KncDIiyJslUwBnZ66pZpe095Ag=)
                          2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
                          3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
                          rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3081 (0xc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
        Validity
            Not Before: Oct  2 19:14:15 2026 GMT
            Not After : Oct  9 19:14:15 2026 GMT
        Subject: CN=6ac00287-cbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:b6:8b:2a:df:3c:5a:c0:55:e3:d1:83:8d:
                    49:24:83:fe:e4:b1:35:73:e4:28:3c:6b:c8:62:a8:
                    3e:e5:41:7e:10:ae:01:95:4f:c6:b4:00:d4:92:96:
                    ae:da:82:e6:f6:3c:51:9e:a8:6b:d0:c0:a1:fc:1c:
                    7a:4b:62:4d:16:11:35:a5:bf:f2:fc:61:10:62:f5:
                    b0:ce:fc:7c:a2:01:41:51:23:82:79:dc:97:ff:75:
                    1b:73:ee:2a:77:35:2c:2e:35:a8:89:b9:01:c9:3a:
                    3b:34:36:e0:74:14:6f:c0:9e:17:a9:f3:5a:35:62:
                    23:d8:4f:62:9b:56:35:fd:42:c5:68:97:6f:5b:07:
                    5a:53:01:8b:7d:4a:58:ba:1a:19:8e:f6:4d:8c:f6:
                    81:dc:c4:49:e2:e9:e8:87:e8:81:96:25:c1:64:dc:
                    a3:34:5e:e1:ec:ef:ce:5c:d6:cb:56:63:35:c1:95:
                    9e:a5:c2:6a:0c:26:96:21:47:13:b5:98:2c:c9:2a:
                    f4:0b:74:21:8b:f1:12:99:18:cb:bb:c9:93:11:ab:
                    07:d7:6c:c1:22:68:d3:38:21:77:a8:66:db:cc:a3:
                    2b:02:31:c0:e1:3c:34:c9:da:44:5f:29:ee:f2:2d:
                    c1:31:bd:36:d3:d0:7e:27:63:c1:97:6b:82:f0:06:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:33:52:2D:23:C1:0F:43:01:23:C4:A7:6F:69:3D:EF:DF:FF:D7
            X509v3 Authority Key Identifier:
                keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:af:82:ef:a7:43:56:ab:97:45:6b:0f:77:5d:e7:3a:5d:
         3b:7c:2a:d8:1b:5a:e8:96:ad:63:e3:d4:3c:be:90:a8:98:43:
         5e:5c:c3:fd:30:10:6b:f9:38:16:d8:b0:4d:96:3d:52:a2:89:
         2c:3c:7e:2f:d6:ba:6f:b9:ec:a6:e7:e9:e3:f6:22:e6:c9:7d:
         eb:d3:43:34:a3:cd:eb:9f:03:d7:a0:fc:3f:89:83:88:01:41:
         df:90:81:1c:6a:21:87:02:99:4d:34:57:be:6a:5d:95:32:39:
         09:5b:81:2b:29:eb:c2:7f:72:5e:e6:f6:85:f0:08:fd:fe:f0:
         60:49:b0:86:d3:19:3d:b1:42:73:b5:04:9b:3e:47:a3:2c:c1:
         dc:7f:64:9c:14:06:84:07:86:d3:8b:c0:05:9b:11:82:a8:c9:
         49:54:cf:34:98:e2:36:3f:e2:94:cf:2c:5b:50:f6:0a:f2:7c:
         04:1b:48:9f:52:fc:75:ff:da:9b:1b:0f:31:42:92:ce:b8:19:
         33:49:57:d3:df:95:1e:72:ec:35:bd:1f:24:f7:b7:77:9a:39:
         72:5d:71:c8:4a:cc:a5:12:40:8a:e0:b6:83:45:b8:17:80:0c:
         30:a4:c0:02:fd:f4:8f:de:29:b8:ed:75:4d:5d:b2:6b:97:af:
         57:9f:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:23 2026 by rpki-client