Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          vRLf2cpMOnTW3OvqJsuIc7wyPF1rLrINW9gFkgOFQMw=
Subject key identifier:   52:AD:84:3C:05:17:DA:6D:6A:87:D0:47:A6:1C:90:4C:28:F4:71:C9
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       335A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          3209
Signing time:             Mon 20 Apr 2026 15:25:17 +0000
Manifest this update:     Mon 20 Apr 2026 15:25:16 +0000
Manifest next update:     Mon 27 Apr 2026 15:25:16 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: 14XEuZ4Y8Fl4oasAIbHr4TsCgnCa7luhEePWfh38KlY=)
                          2: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: sNdT6MxrCuaojFi/BDrMhSBDkMs2xAxh6yY0O2/s+BE=)
                          3: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: ZGTkEaop0Njy1O1CMAVof6Q9yXcRtZbEuTTl/ZxOWKs=)
                          4: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: VwR7ciSw9K0cAPZ0/q0g7mvGXQVhOuUIe5YkFLUBvNM=)
                          5: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: iIncNlkzDLncSdr4CvW4y2W5fyCiIPivB8IWCNWoJP0=)
                          6: BE430FFA699011EE96387F19C4F9AE02.roa (hash: nwAVGj9pFy222zqjuMW5VtHya2o6VVMIrsOdD04utTg=)
                          7: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: 6DiADTjHWOW4PhIupgiZTCqOgHxAcBfnE/zFUrFC5Uw=)
                          8: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: GkFlzgc/nIyiS1LN/Cef4dU4OvlK6843acK12BI773w=)
                          9: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: DNpKV16jRaDVCMLZofIBpwfB3coox1f1YBts1IyzQeQ=)
                          10: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: S8DC6sajQu2v4AHH91DNQHiJ5wKp3+cyj/HTStHK1mI=)
                          11: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: aLEfT4bz2lONE3Z6tiYFlCUQQ7W4a5Jjb6n/TTXscv8=)
                          12: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: NqUuMy9p0TMFnr1hdFcOl63uXOxUFf6DtVkGnXJ//oQ=)
                          13: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: sDukY+4vNyFTdEUh0TFnFVqsNmB2SFOIOqE9443URz8=)
                          14: 827529FE283811F185E40F22CC833773.roa (hash: 3SFrAFUK1HrkltbcG3Odys4KYSWvaaQdOZhMhBM1EuU=)
                          15: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 7rpBX3OAFbXzSQsSCfiWv0jLzZ4CuFbqEu38r2Hi6ik=)
                          16: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: b1PlRjXuvw+bPWKNzR8yhRB1i2vQr1i31nAKPCd+jB4=)
                          17: 6A721236977E11EBB7908378C4F9AE02.roa (hash: hlItmVrTld/H6VupX4GDTIZfW62BGqHzeXgz7JKRhHg=)
                          18: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: u0qwTK26crlyMuoa9QfDuqp5CWzIdI2WQad6/Sn3dko=)
                          19: 3E745A08803611ECB2187650C4F9AE02.roa (hash: Z0vH4g67LYRMUkDn33Xr1DacFCEO5gl+Mwlp4YCfqyI=)
                          20: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: 7Xv3UNFBW2HkYrH5v469s2ZDKluseYjRtdTXNI4F9CA=)
                          21: 6DCD9050DCB011F09F01EF94466F56BC.roa (hash: CSTSsRORHJGkJ2OxQbDpWa4wIhPnwdisgm8MwAHVU6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 15:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13146 (0x335a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 20 15:25:16 2026 GMT
            Not After : Apr 27 15:25:16 2026 GMT
        Subject: CN=69e6455d-73dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:34:51:2d:93:ca:58:f0:d8:ed:a1:9c:a4:
                    a1:99:9c:c2:ec:7c:f2:8f:a4:da:21:98:a2:e4:06:
                    22:2e:41:82:c0:7a:20:e2:45:c4:b5:45:57:ec:87:
                    8d:7c:24:8d:15:34:1f:28:60:39:d0:0c:5a:82:2f:
                    63:68:10:75:19:c7:f8:fc:df:3c:f0:47:80:d5:e8:
                    22:be:e0:60:fa:05:17:7a:63:9a:5f:6e:b3:a0:5d:
                    ea:4f:68:0f:3e:57:ac:86:28:aa:e4:1c:84:ea:04:
                    81:e3:7d:33:4f:f7:8a:e6:de:1c:bc:f3:a1:1a:75:
                    c4:f5:06:1f:df:a8:2b:54:00:4e:79:26:2b:f3:d7:
                    29:03:f4:17:03:84:26:31:9d:67:09:7a:5b:ee:de:
                    31:83:51:e4:6a:53:30:d2:81:3a:4a:76:f3:eb:13:
                    18:16:1e:f9:88:a0:50:ba:56:85:c7:e6:3d:09:b2:
                    2b:66:4c:01:4c:7a:0c:24:f0:6f:aa:3d:02:4b:c8:
                    6e:5e:85:17:77:89:10:24:4d:ac:15:19:79:16:e5:
                    37:95:e9:77:84:37:49:85:45:6d:53:8d:fe:6c:cd:
                    6f:6f:cf:0a:8b:50:44:ff:59:43:0c:da:16:b2:5b:
                    0d:ff:2c:60:8b:af:c3:09:24:76:3e:78:13:40:ac:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AD:84:3C:05:17:DA:6D:6A:87:D0:47:A6:1C:90:4C:28:F4:71:C9
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:72:b7:17:bd:b7:5b:25:12:cc:e7:a8:18:53:05:a9:ef:ce:
         c6:dc:37:78:95:94:d9:1b:3d:8b:e3:0b:11:b5:33:31:fe:86:
         83:f8:e5:18:d8:51:08:58:e1:42:4c:49:ee:7b:22:06:d7:79:
         d8:ff:54:3e:9d:96:68:b2:56:a4:2e:d0:97:38:db:84:ed:d6:
         7c:b3:94:85:f8:8a:13:01:c7:9c:22:69:bc:e0:09:b3:47:fc:
         11:27:e8:5d:b4:79:23:6e:5d:ba:29:e7:74:b8:e0:f1:2f:aa:
         10:26:fd:b5:99:f2:ba:70:fa:a9:3e:18:06:03:84:93:2d:9d:
         40:77:9a:94:74:36:99:13:96:be:db:a0:0a:11:91:17:82:7b:
         a4:e7:19:bb:61:d4:e9:8a:90:13:8e:d1:f9:21:73:2a:e8:6e:
         26:fe:83:96:1e:64:e9:2d:5b:da:e5:22:b3:9a:6a:b4:24:cf:
         c7:61:2d:11:3d:96:a1:05:47:9e:bc:05:1d:2a:0c:05:4b:d1:
         0f:b7:5f:e7:61:61:89:eb:a6:76:e7:49:57:b8:c7:72:3b:fb:
         72:65:00:5b:47:c4:10:ac:86:6a:58:82:12:6c:5b:0f:21:95:
         7f:1c:f3:39:75:03:02:3d:94:89:9a:ad:70:da:a6:8c:b9:bf:
         1e:3b:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:25:31 2026 by rpki-client