Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File:                     SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier:          NDmen8bOSt0SmbjTg8eTwQdNM8sYkTaj46Ald6tYkEQ=
Subject key identifier:   E0:6E:B3:F0:F8:EC:97:48:A0:00:69:82:EE:AB:F7:81:5D:31:27:44
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer:       /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number:          01CA
Signing time:             Thu 21 May 2026 03:46:04 +0000
Manifest this update:     Thu 21 May 2026 03:46:03 +0000
Manifest next update:     Thu 28 May 2026 03:46:03 +0000
Files and hashes:         1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: 01youhN5k31twwK0/M7Q6oYnyEoo7ZszLr/Q8DfeOlU=)
                          2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: cPLdFGXiXR/WYDO7jUKAWbiNRii4uYKJ6ALY5+hpRWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
                          rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659
        Validity
            Not Before: May 21 03:46:03 2026 GMT
            Not After : May 28 03:46:03 2026 GMT
        Subject: CN=6a0e7ffc-83f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:ca:97:be:2c:0c:0f:6e:b5:b6:ca:de:ee:
                    4e:6a:55:4d:d3:30:4b:73:7b:a4:dc:88:6d:ec:34:
                    e7:21:44:ab:74:1f:e9:0e:c8:82:de:22:73:a3:c4:
                    e1:ad:a0:02:17:a0:08:99:fd:4a:b3:62:63:26:7e:
                    22:50:e2:5b:87:7b:a9:96:d2:e3:13:fd:41:99:55:
                    f2:aa:d2:a3:b6:1f:a4:9e:2d:50:98:bc:7c:9b:c9:
                    e7:a4:b2:f2:af:d6:0e:ba:51:fa:2e:7c:0e:3e:35:
                    17:8c:58:51:08:2a:a9:df:e4:2f:dc:49:2f:17:d7:
                    8f:db:63:f9:fa:8d:fe:6b:46:46:34:13:6e:41:7e:
                    c1:d4:ba:f7:c7:8f:3e:73:36:97:00:f9:e5:5e:12:
                    4d:ff:90:2b:d5:d1:8f:8a:4e:a0:aa:aa:ea:40:d6:
                    d7:7d:bc:8e:a9:47:7f:9e:1b:97:2c:67:c6:7b:91:
                    4b:c8:1c:2b:4e:08:03:3e:a2:f0:3b:23:d5:25:2a:
                    2d:e3:6e:72:6a:d1:88:ef:3c:6e:29:a9:0e:54:94:
                    12:ad:96:f2:70:c6:b7:01:81:90:35:dc:f1:70:b3:
                    88:82:5c:4f:93:76:97:83:9d:49:7b:14:3d:a0:bd:
                    78:8f:65:a4:8f:e7:5d:1f:7b:97:b7:d6:a7:1f:f4:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6E:B3:F0:F8:EC:97:48:A0:00:69:82:EE:AB:F7:81:5D:31:27:44
            X509v3 Authority Key Identifier:
                keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:69:ff:16:b5:a5:f1:4a:95:07:35:d0:b9:b0:26:e7:b1:08:
         45:c9:fb:c5:6e:d6:f3:eb:89:ea:69:8a:43:4e:e2:d5:7f:64:
         f4:7d:9b:9f:f1:06:a9:db:d7:4d:46:c9:d2:98:f1:46:1a:d2:
         51:37:d6:e7:7c:cf:2a:69:8f:35:4a:e7:f7:d2:31:df:48:a1:
         82:01:92:33:67:43:e5:4f:0f:86:73:15:6b:2c:99:5c:52:48:
         33:dc:3d:7c:f6:72:dd:98:32:dc:ea:38:35:88:34:ae:8f:a9:
         f1:f0:fe:7b:8c:4f:94:a1:9b:7d:e2:0c:06:46:b4:f7:33:b0:
         ea:77:ea:1c:f0:16:8c:46:fc:fe:5f:31:8a:43:7a:1e:f8:77:
         40:f0:1a:f7:ae:b9:57:ae:54:a8:0f:57:72:a5:44:e3:8a:20:
         38:53:27:88:6b:5b:48:35:21:77:9f:6e:af:02:18:8b:42:b3:
         d4:65:2d:e9:cc:21:5f:7b:b5:22:1d:a6:bf:30:5e:62:11:6a:
         d8:4f:03:07:3f:50:28:5d:48:86:95:8a:54:09:80:6e:7f:39:
         4d:6a:f2:0c:d4:5b:d7:3c:68:d1:ed:65:07:88:df:d6:12:60:
         3f:6d:60:45:be:79:8a:32:49:89:39:e6:a4:d8:88:ce:c4:d9:
         cc:78:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:44 2026 by rpki-client