Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
File:                     SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft (raw, json)
Hash identifier:          2b1F3hEifG82x6MSmBvxa8NP25eFwzLeOJch1GuJ0Iw=
Subject key identifier:   9F:28:7A:00:A8:05:BA:AE:97:0A:62:15:B5:EE:21:54:F6:87:75:69
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
Manifest number:          39
Signing time:             Tue 19 May 2026 08:28:02 +0000
Manifest this update:     Tue 19 May 2026 08:28:01 +0000
Manifest next update:     Tue 26 May 2026 08:28:01 +0000
Files and hashes:         1: SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl (hash: YePrRPt89zGVz7W8mNh3Rm+aAQN7YaOuewHlCLc75HU=)
                          2: 2F9BA582021311F19CF662E3456F56BC.roa (hash: u0IV4WpfZVo/gGclcgn/9zhDLwmJapXxrIYkkYa+G0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: May 19 08:28:01 2026 GMT
            Not After : May 26 08:28:01 2026 GMT
        Subject: CN=6a0c1f11-fc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1f:e4:c7:ea:85:91:4f:53:d6:0f:3e:27:c7:
                    4a:6d:76:7a:c4:cb:f1:29:12:1c:b1:82:49:65:95:
                    ef:48:6d:ae:59:0c:fc:fa:5e:94:45:5d:ce:77:c1:
                    c2:ec:1c:c8:fd:3e:10:14:9d:02:db:b1:70:4c:3c:
                    37:31:0f:eb:68:28:b5:ab:84:6e:da:50:b5:34:8e:
                    af:f3:3e:61:09:34:d8:31:b1:97:cc:8d:38:a1:36:
                    fa:7c:20:b9:ec:6e:30:77:01:e7:30:35:66:21:74:
                    76:f4:7d:ac:40:45:4b:0e:07:95:4e:3a:5f:e6:d7:
                    8e:44:ec:4d:1e:c6:fc:63:c8:4f:a1:d0:78:5b:a8:
                    48:cf:d1:92:92:5f:df:a0:55:dc:1a:56:eb:8f:a5:
                    98:d0:6b:a8:e8:c7:a5:07:38:59:49:4b:fe:77:3b:
                    78:47:5c:88:dd:2f:97:e1:08:5d:e8:e8:a6:1b:39:
                    88:c4:fa:fb:3c:ac:15:8c:e5:4a:85:1f:34:59:6c:
                    84:32:a6:5c:41:9c:ce:b8:79:80:b7:ac:82:b8:91:
                    e9:41:e3:9f:40:6c:f8:74:83:49:c1:7e:dd:d5:f4:
                    2a:32:cb:43:f3:f0:cd:c9:6f:a6:6a:32:a6:7f:9b:
                    e9:84:c4:e4:00:a3:6a:34:73:1e:2b:7b:ec:3e:f4:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:28:7A:00:A8:05:BA:AE:97:0A:62:15:B5:EE:21:54:F6:87:75:69
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:c2:5a:19:c6:fd:68:e9:52:e5:e1:d9:25:a0:d4:58:06:
         3d:5d:fa:de:ae:a0:57:be:ce:e1:0b:6e:b0:91:c6:6e:ed:fb:
         d5:78:c8:42:ec:d2:91:31:e6:1e:6c:74:25:8a:c7:77:c0:47:
         32:97:15:33:4d:0c:3e:1f:8f:4d:99:ea:34:4c:44:d2:9b:78:
         5e:61:ce:a0:a7:5a:b6:6e:ca:b5:fe:d0:20:75:bc:5f:cc:7a:
         03:e9:d6:3e:b7:8b:d1:56:82:1f:55:68:10:4a:ee:bf:66:02:
         d7:c6:33:d5:23:39:af:04:f6:21:40:ae:8d:f3:27:68:8a:31:
         1b:c6:cd:a5:51:d2:16:77:62:ea:35:aa:c4:b8:04:fb:62:74:
         17:a8:54:0d:db:cf:c2:65:10:32:10:e9:c1:53:96:5d:4e:77:
         2f:f4:24:9c:4a:b6:0c:e4:4a:a6:87:70:dd:f8:9d:f5:02:62:
         0b:84:a6:3d:33:5a:52:ed:ff:35:57:eb:9c:9c:36:a5:99:39:
         35:4b:43:c0:a0:92:f8:42:24:be:4c:fa:f9:21:1d:72:00:ca:
         3f:e0:d7:bf:34:5a:20:1f:50:a8:8e:af:4c:58:23:0b:ec:93:
         08:77:80:83:1b:2e:16:5f:d5:b1:bf:5b:54:32:d4:1f:c8:80:
         b8:06:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:59 2026 by rpki-client