Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
File:                     SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json)
Hash identifier:          mnSaJfU7dtIBSsXE4D22Fm5r/alloBiWYi6kDo2pdsg=
Subject key identifier:   2D:8A:40:04:36:00:4E:CD:77:F6:CA:6D:3F:3B:93:3C:A2:00:0C:61
Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0
Certificate issuer:       /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
Manifest number:          8E
Signing time:             Thu 21 May 2026 07:36:29 +0000
Manifest this update:     Thu 21 May 2026 07:36:29 +0000
Manifest next update:     Thu 28 May 2026 07:36:29 +0000
Files and hashes:         1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: 8882OTnTKJ1pjno3gHWsvbF/Lxif5T3UcpFZFicDvvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0
        Validity
            Not Before: May 21 07:36:29 2026 GMT
            Not After : May 28 07:36:29 2026 GMT
        Subject: CN=6a0eb5fd-114f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:29:4d:b0:0f:15:a8:02:0a:c1:39:61:92:
                    e2:76:e4:3e:34:d0:a8:ca:7f:a4:13:dc:55:c6:43:
                    3e:7d:74:1a:75:a5:83:56:0b:0b:ce:76:b3:2d:5b:
                    f8:e8:e2:e8:d1:ff:15:a7:77:e0:68:b2:6d:79:e8:
                    8b:4f:37:f8:6c:27:7c:04:52:4b:b3:39:2e:ba:29:
                    37:2c:50:20:8c:0e:0e:d1:2d:3d:12:57:1b:31:45:
                    dd:2e:41:1e:b2:2f:0f:c4:30:1b:67:45:16:0f:db:
                    bd:2c:82:4e:7c:ab:f3:46:57:59:f5:28:6b:e3:91:
                    a8:e0:28:09:6b:45:f3:c6:2e:3b:d2:06:a5:10:ef:
                    fb:c8:28:56:e6:65:d2:2f:ad:1c:dd:1c:14:b3:a9:
                    8e:f6:3a:05:a7:54:2e:ca:17:7d:ac:6b:20:c3:20:
                    8d:be:aa:4e:92:95:db:1c:75:7e:40:b8:04:60:70:
                    85:1e:b4:19:9d:67:4f:f0:97:96:1b:c1:cf:29:b7:
                    3d:aa:ea:43:17:b6:ae:26:92:c4:74:fe:ad:5d:76:
                    05:fd:4a:f3:3f:ca:d5:13:de:8e:6c:be:3d:63:2b:
                    3e:7d:24:67:09:58:39:ab:f0:53:9b:f4:1d:65:2e:
                    9d:b8:de:1f:fd:72:ab:26:c9:51:06:4a:3d:99:40:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8A:40:04:36:00:4E:CD:77:F6:CA:6D:3F:3B:93:3C:A2:00:0C:61
            X509v3 Authority Key Identifier:
                keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:84:57:00:7a:c8:90:71:8a:8f:d2:39:7b:42:e0:bd:62:d9:
         b2:57:0b:13:57:8f:bf:8c:11:a0:0f:cd:6e:95:e9:d8:d7:61:
         e1:04:96:9b:ec:e9:98:48:c5:6a:9f:3d:2d:55:6b:d3:dc:18:
         eb:01:00:cc:dc:de:df:0f:54:89:cb:7c:4d:99:c8:9b:5e:6e:
         b1:b7:5d:73:f9:63:5c:2f:a3:1d:9d:c3:60:f1:21:9f:6f:78:
         fa:f0:e5:ee:1c:ef:c1:31:23:97:52:45:74:fc:76:1f:22:02:
         a6:c1:d6:a9:52:4d:89:76:ee:0e:e0:02:3c:b9:fe:c4:59:0b:
         dd:2b:11:5c:81:ff:67:72:95:56:62:c2:7d:53:05:9b:4f:6d:
         ad:2d:fc:bd:a5:3e:b1:37:a8:7e:9d:cc:08:92:05:61:8e:b7:
         14:0a:65:d1:d0:dd:b9:27:b1:cf:e9:96:22:10:b6:4b:52:dd:
         81:54:42:87:9b:cb:be:c4:7e:b5:38:14:5b:ec:71:de:73:a0:
         e6:45:1e:18:27:5c:2d:b9:3b:3a:81:b7:ad:8a:17:a0:e1:5e:
         2f:ff:02:22:11:1e:8f:a0:35:b1:4e:db:0e:8c:ce:98:3e:69:
         0d:26:b4:c5:5e:ce:f9:73:f6:d7:44:23:0b:ea:9e:ac:3d:19:
         41:46:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:53 2026 by rpki-client