Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File:                     SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier:          juvxOLbaxS1AzBqI864znp/Qg+kIGNB9EwKquOmA99M=
Subject key identifier:   CB:C0:E5:3A:A6:39:45:71:9F:FF:FF:44:12:A0:BD:9F:76:59:A0:30
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer:       /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial:       0BF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number:          0BD9
Signing time:             Tue 18 Aug 2026 19:18:20 +0000
Manifest this update:     Tue 18 Aug 2026 19:18:19 +0000
Manifest next update:     Tue 25 Aug 2026 19:18:19 +0000
Files and hashes:         1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: Kne/VXRjfF71uFvLK4qwYZoX4LNy+WhaAfbz/B+FAFs=)
                          2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
                          3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
                          rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3058 (0xbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
        Validity
            Not Before: Aug 18 19:18:19 2026 GMT
            Not After : Aug 25 19:18:19 2026 GMT
        Subject: CN=6a84affb-6afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:74:13:c0:d9:fa:aa:90:e2:d3:d7:99:36:
                    4a:52:35:06:b5:98:cd:f5:92:2a:a0:08:9b:a9:ec:
                    f6:3e:48:5c:9a:6b:e3:64:2d:36:7c:4e:6e:0d:45:
                    87:62:ec:96:b8:4c:e6:b8:77:3f:d5:41:eb:40:07:
                    d4:0f:b8:98:ab:12:ec:94:db:8c:e5:b2:ba:e0:f1:
                    80:67:73:9c:82:cc:ee:44:fc:e9:67:a1:98:17:cb:
                    8c:97:44:39:36:d5:84:6d:25:eb:54:73:b2:4e:3c:
                    ab:ed:2e:b0:6c:d3:a4:49:f2:56:93:27:19:2a:e1:
                    09:33:b5:86:0d:b7:aa:d7:fb:59:ef:0e:90:5c:f3:
                    2c:8b:4b:4b:bf:18:48:06:8a:e6:10:bb:91:2b:92:
                    65:ed:03:1e:55:01:41:36:3a:09:77:97:be:70:08:
                    b9:f5:0f:b5:c3:74:27:69:d0:ee:76:64:a5:e6:40:
                    25:87:2d:23:b3:26:ff:20:25:c2:ed:b9:4c:ae:84:
                    f5:53:d2:61:ae:ab:c6:ca:21:fc:47:f6:56:67:0c:
                    db:8b:9d:3b:d5:c7:d8:c9:d3:31:16:05:1b:2a:1f:
                    a3:e3:f7:24:3e:36:08:0b:f4:c8:85:70:34:5b:49:
                    ee:95:65:a4:29:f6:a2:58:33:bc:6f:fc:93:3c:f8:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C0:E5:3A:A6:39:45:71:9F:FF:FF:44:12:A0:BD:9F:76:59:A0:30
            X509v3 Authority Key Identifier:
                keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:2e:06:a0:35:50:b2:47:7b:a5:42:ba:91:d2:77:e9:e7:
         09:ec:20:0e:59:72:62:38:fb:b7:4e:5e:5b:5a:14:e5:a5:3e:
         a7:78:50:f6:8a:2a:d4:cd:9a:e5:60:0d:44:8b:ca:b2:ae:d6:
         83:86:cd:c0:64:ea:ae:82:ae:18:23:cc:ab:fc:09:d9:76:12:
         18:28:e3:19:32:ef:c3:bb:1b:82:4b:62:e0:6c:3b:4c:fe:fc:
         44:59:25:70:87:01:84:d7:56:9a:d0:06:4c:34:52:10:35:68:
         7d:d9:23:ca:b4:e6:01:35:39:4b:fe:78:27:85:6a:89:6f:9b:
         bb:2b:8d:14:34:f1:12:f9:f1:04:63:95:db:65:36:74:f3:53:
         b1:5f:f3:f4:0f:f6:41:1a:60:0f:b2:e3:bf:e4:ea:49:94:7e:
         1e:25:62:e1:84:58:35:82:a4:33:04:7b:e3:bd:27:3f:5e:f9:
         05:c6:15:75:6c:e9:9b:e9:d0:e0:3d:bc:76:cd:96:4e:81:02:
         e4:a8:ff:c2:71:4a:ac:f2:92:a1:f8:af:ed:45:ff:de:6f:3b:
         78:7a:f7:61:cf:3b:4b:0c:fd:cc:8c:3d:27:ed:79:48:4b:c6:
         46:d4:b2:4a:17:e4:af:6b:0f:88:03:38:02:04:5f:97:d2:d9:
         4c:9c:c7:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw
RTRFODk0NzgwHhcNMjYwODE4MTkxODE5WhcNMjYwODI1MTkxODE5WjAYMRYwFAYD
VQQDEw02YTg0YWZmYi02YWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2Z0E8DZ+qqQ4tPXmTZKUjUGtZjN9ZIqoAibqez2PkhcmmvjZC02fE5uDUWH
YuyWuEzmuHc/1UHrQAfUD7iYqxLslNuM5bK64PGAZ3OcgszuRPzpZ6GYF8uMl0Q5
NtWEbSXrVHOyTjyr7S6wbNOkSfJWkycZKuEJM7WGDbeq1/tZ7w6QXPMsi0tLvxhI
BormELuRK5Jl7QMeVQFBNjoJd5e+cAi59Q+1w3QnadDudmSl5kAlhy0jsyb/ICXC
7blMroT1U9JhrqvGyiH8R/ZWZwzbi5071cfYydMxFgUbKh+j4/ckPjYIC/TIhXA0
W0nulWWkKfaiWDO8b/yTPPgL2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvA5Tqm
OUVxn///RBKgvZ92WaAwMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5
MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s
SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i
WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjz8uBqA1ULJHe6VCupHSd+nnCewgDllyYjj7t05eW1oU5aU+p3hQ9ooq1M2a
5WANRIvKsq7Wg4bNwGTqroKuGCPMq/wJ2XYSGCjjGTLvw7sbgkti4Gw7TP78RFkl
cIcBhNdWmtAGTDRSEDVofdkjyrTmATU5S/54J4VqiW+buyuNFDTxEvnxBGOV22U2
dPNTsV/z9A/2QRpgD7Ljv+TqSZR+HiVi4YRYNYKkMwR7470nP175BcYVdWzpm+nQ
4D28ds2WToEC5Kj/wnFKrPKSofiv7UX/3m87eHr3Yc87Swz9zIw9J+15SEvGRtSy
Shfkr2sPiAM4AgRfl9LZTJzHiw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:17 2026 by rpki-client