Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
File:                     SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json)
Hash identifier:          zdQc1RbpW4XDupL1cC86ATwxdLfheKQ2HqArByxWB+M=
Subject key identifier:   74:35:F1:A2:5A:65:8F:42:42:18:1B:DE:AE:64:0B:33:6F:86:44:D3
Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA
Certificate issuer:       /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
Manifest number:          014B
Signing time:             Fri 23 Oct 2026 05:53:06 +0000
Manifest this update:     Fri 23 Oct 2026 05:53:06 +0000
Manifest next update:     Fri 30 Oct 2026 05:53:06 +0000
Files and hashes:         1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: MYPu/O0zWlJfIqmZPSwbIHW1oopkePbRmjyOxk/7LEA=)
                          2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl
                          rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 04:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA
        Validity
            Not Before: Oct 23 05:53:06 2026 GMT
            Not After : Oct 30 05:53:06 2026 GMT
        Subject: CN=6adaf642-280d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:52:d6:d3:db:60:40:87:fd:e4:20:3a:99:
                    76:64:22:be:15:3f:a0:85:6b:4f:1f:33:72:61:4c:
                    f4:15:b3:a4:9c:fd:63:07:c7:51:5a:55:61:e4:66:
                    1c:d2:05:26:2b:66:8a:2c:3e:c1:9e:90:27:3c:9d:
                    47:d9:da:aa:df:b6:c7:61:2d:5b:30:3b:ab:0a:1f:
                    ef:0c:2f:3f:17:88:3c:d3:21:67:c1:58:6a:f1:2d:
                    28:fe:d8:73:29:77:95:c2:10:fc:71:f6:41:7f:d4:
                    dc:53:61:d9:4e:44:06:b1:dc:75:54:9a:87:70:e7:
                    cb:d6:54:09:7f:5f:38:ed:e0:b4:8e:4e:6d:4b:96:
                    d2:f6:f6:2f:b9:9f:29:49:dd:b8:bd:4c:fe:07:9f:
                    45:70:d5:79:ca:33:2a:ac:c6:51:66:bf:5c:57:d4:
                    0f:a2:63:ba:5a:b4:a2:35:7f:86:a8:5d:4c:74:2e:
                    2e:ba:c8:28:58:d4:a7:30:f4:18:3d:48:2d:ba:fa:
                    a6:1a:42:a7:41:7f:bc:63:22:ba:7a:8b:9f:ea:38:
                    97:58:07:00:4f:99:33:66:98:e8:b0:8a:39:96:96:
                    a6:ca:77:59:34:a4:bc:07:c5:89:cb:75:dd:ee:46:
                    d8:21:30:e4:e0:ae:18:41:b3:f3:c6:ad:08:7d:6b:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:35:F1:A2:5A:65:8F:42:42:18:1B:DE:AE:64:0B:33:6F:86:44:D3
            X509v3 Authority Key Identifier:
                keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e0:93:42:d9:54:6f:40:51:2c:c4:66:2a:0f:8c:20:92:97:
         66:d6:c2:04:1c:eb:a4:5b:ef:8d:89:3b:62:50:f6:8e:04:89:
         3b:85:58:9e:52:71:20:fd:d5:3b:56:d2:ee:b2:14:18:41:43:
         4e:16:86:f8:d1:44:f6:47:18:f2:84:a5:d6:5a:6e:f6:6d:76:
         53:22:f3:a9:af:3a:b7:22:1e:1e:7c:b1:2e:31:58:e4:2b:93:
         dc:6f:5b:84:ba:88:6a:af:4c:e5:63:12:f8:f6:ad:5a:b3:f9:
         a1:94:85:e0:34:35:07:87:7a:c0:ad:6b:84:68:c8:79:b3:b2:
         91:37:f2:ae:0e:97:85:fa:93:b6:d2:83:26:e2:98:65:73:ea:
         24:51:9b:4c:88:1e:56:ed:28:e6:a5:3b:ca:cd:09:50:35:16:
         93:02:49:cc:34:e4:28:0a:9f:13:dd:5f:c4:09:b1:7a:a5:88:
         e4:ab:ad:4a:53:2b:37:7b:cb:0d:95:45:16:dd:b9:3b:cd:5d:
         6d:f5:7b:77:ed:0c:2d:c4:67:48:51:f7:d2:2b:31:88:2c:2d:
         70:cc:0e:8f:ae:00:98:e2:1a:73:e6:d8:5f:7c:08:c4:0f:82:
         8f:44:4e:84:25:e0:37:78:0d:1a:14:30:5a:15:39:3f:76:d0:
         eb:d6:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:34:56 2026 by rpki-client