Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
File:                     SiRb8P512qERSrxQ5rme1DbDLGk.mft (raw, json)
Hash identifier:          Y8V6ahPvNzmxwsYknIhFOXU5adG0gD9lBmQ0jKnTCfc=
Subject key identifier:   38:ED:7C:92:22:0C:1D:38:34:37:B4:32:8C:56:A1:5E:58:24:69:3F
Authority key identifier: 4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
Certificate issuer:       /CN=A914D3D0/serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
Manifest number:          67
Signing time:             Sat 03 Oct 2026 08:45:09 +0000
Manifest this update:     Sat 03 Oct 2026 08:45:08 +0000
Manifest next update:     Sat 10 Oct 2026 08:45:08 +0000
Files and hashes:         1: SiRb8P512qERSrxQ5rme1DbDLGk.crl (hash: 2vm544/dQ6IcFGWovlb6Vd+7fMesQk4+v4LqnuGXixE=)
                          2: D11E6E8224CB11F1A3AB4FF6A7833773.roa (hash: x6uhNShvVOgmcKuVqlrOttACB4glBVZA83SSQpSH+7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
                          rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3D0, serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
        Validity
            Not Before: Oct  3 08:45:08 2026 GMT
            Not After : Oct 10 08:45:08 2026 GMT
        Subject: CN=6ac0c094-36cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:4e:ff:dd:76:a0:d6:e7:fb:b2:40:7f:aa:
                    2d:f9:fa:1b:51:c5:b0:88:8d:a1:d3:4b:48:85:42:
                    71:11:d5:b2:88:2d:dd:b0:2f:d3:fa:a8:5e:75:3d:
                    0c:9e:8d:b7:ca:c2:9b:e6:98:b2:83:f0:de:cc:8c:
                    02:90:2b:8f:a7:77:c0:13:ca:f9:a2:38:34:d1:dc:
                    9b:21:4b:3a:a9:12:5b:5d:0b:6c:f6:bf:f5:c3:8f:
                    8a:60:aa:06:ae:24:29:29:7e:a7:8a:42:2a:05:ef:
                    ad:d3:81:c1:15:25:f5:4d:90:0f:77:14:0e:d6:0f:
                    40:be:0e:5c:ec:3b:45:7f:26:98:8e:35:6c:d3:df:
                    73:cc:9f:7c:db:cd:12:28:3a:3d:b2:ab:83:ef:3f:
                    99:4e:f7:f5:94:5d:d9:97:39:5f:07:f5:8a:b0:6a:
                    43:13:46:f0:4e:e8:f6:99:56:e6:03:00:bc:7c:6d:
                    0a:5e:f1:d0:e1:30:d0:fb:31:ae:2d:1a:5a:a1:6b:
                    b8:8b:8e:a5:87:c5:f7:ae:bc:fd:9f:82:f5:37:dd:
                    1f:e9:e6:73:e2:05:8b:8a:e2:82:47:de:b7:72:15:
                    04:4e:08:9a:80:a1:12:e3:7b:ef:99:ee:54:a4:7b:
                    87:76:30:d8:4f:fa:8e:10:2a:a0:34:4a:da:4b:7f:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:ED:7C:92:22:0C:1D:38:34:37:B4:32:8C:56:A1:5E:58:24:69:3F
            X509v3 Authority Key Identifier:
                keyid:4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:b0:5c:a4:91:03:0d:ba:e4:fe:cc:cd:0e:78:2f:b9:d1:
         5e:51:77:a4:e5:77:bc:31:05:9f:39:a6:e8:f1:15:c4:ae:9c:
         0a:bd:8d:1a:bb:c6:f6:86:d4:47:a1:81:64:22:3b:73:ba:16:
         e7:fe:78:e9:fc:64:65:eb:14:61:44:42:3f:34:03:5c:ad:36:
         a6:7f:a1:22:20:ca:9f:a2:fb:8a:53:46:15:e4:55:f5:0d:31:
         62:19:de:30:bc:b0:0f:7a:c7:96:4e:b4:cd:c2:a2:82:24:ef:
         c6:9e:b1:51:95:35:85:6a:66:0e:47:cb:a8:d3:eb:7b:80:58:
         40:2e:1e:3e:7d:4c:a0:b5:c7:52:7a:cb:43:b9:44:5c:f1:eb:
         1d:86:d6:e5:83:22:f5:f2:84:ed:e4:10:d5:9d:ed:32:75:fc:
         bc:b6:b1:d5:a2:0c:57:9b:7c:27:01:a2:db:f4:04:2d:17:88:
         4e:1c:c6:30:8d:1f:49:60:45:83:e7:7a:ee:18:2d:9e:2a:8f:
         07:85:a2:ec:bb:b6:42:48:4b:87:c7:0e:0e:24:97:60:35:87:
         90:2f:38:5f:24:4c:59:7a:3f:75:a1:ce:39:6b:3d:7b:5e:6d:
         0c:8e:ab:09:25:f3:43:8a:c4:de:35:50:bf:d1:25:85:10:2e:
         09:b3:b4:c0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RDNEMDExMC8GA1UEBRMoNEEyNDVCRjBGRTc1REFBMTExNEFCQzUwRTZCOTlFRDQz
NkMzMkM2OTAeFw0yNjEwMDMwODQ1MDhaFw0yNjEwMTAwODQ1MDhaMBgxFjAUBgNV
BAMTDTZhYzBjMDk0LTM2Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw+E7/3Xag1uf7skB/qi35+htRxbCIjaHTS0iFQnER1bKILd2wL9P6qF51PQye
jbfKwpvmmLKD8N7MjAKQK4+nd8ATyvmiODTR3JshSzqpEltdC2z2v/XDj4pgqgau
JCkpfqeKQioF763TgcEVJfVNkA93FA7WD0C+DlzsO0V/JpiONWzT33PMn3zbzRIo
Oj2yq4PvP5lO9/WUXdmXOV8H9YqwakMTRvBO6PaZVuYDALx8bQpe8dDhMND7Ma4t
Glqha7iLjqWHxfeuvP2fgvU33R/p5nPiBYuK4oJH3rdyFQROCJqAoRLje++Z7lSk
e4d2MNhP+o4QKqA0StpLfyXTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOO18kiIM
HTg0N7QyjFahXlgkaT8wHwYDVR0jBBgwFoAUSiRb8P512qERSrxQ5rme1DbDLGkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREM0QwL0I2NzJFRkEyMjRD
ODExRjFBMzdGQjdBN0E2ODMzNzczL1NpUmI4UDUxMnFFUlNyeFE1cm1lMURiRExH
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU2lSYjhQNTEycUVSU3J4UTVybWUxRGJETEdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE
M0QwL0I2NzJFRkEyMjRDODExRjFBMzdGQjdBN0E2ODMzNzczL1NpUmI4UDUxMnFF
UlNyeFE1cm1lMURiRExHay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBnxrBcpJEDDbrk/szNDngvudFeUXek5Xe8MQWfOabo8RXErpwKvY0au8b2htRH
oYFkIjtzuhbn/njp/GRl6xRhREI/NANcrTamf6EiIMqfovuKU0YV5FX1DTFiGd4w
vLAPeseWTrTNwqKCJO/GnrFRlTWFamYOR8uo0+t7gFhALh4+fUygtcdSestDuURc
8esdhtblgyL18oTt5BDVne0ydfy8trHVogxXm3wnAaLb9AQtF4hOHMYwjR9JYEWD
53ruGC2eKo8HhaLsu7ZCSEuHxw4OJJdgNYeQLzhfJExZej91oc45az17Xm0MjqsJ
JfNDisTeNVC/0SWFEC4Js7TA
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:14 2026 by rpki-client