Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File:                     SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier:          B8yd3yNLKmWRMvkDWB9MXmpytZ7uwk4fQNmdhC3ODdM=
Subject key identifier:   64:A7:E2:80:EE:A9:B8:66:8B:3B:60:AB:95:32:EB:E0:40:72:AE:5F
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       355E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number:          3553
Signing time:             Mon 22 Jun 2026 15:14:56 +0000
Manifest this update:     Mon 22 Jun 2026 15:14:56 +0000
Manifest next update:     Mon 29 Jun 2026 15:14:56 +0000
Files and hashes:         1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: sIRYqaMF0HzCRmKNY1LFRXiGcCdod70LcwsilEGq/u8=)
                          2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=)
                          3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
                          rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13662 (0x355e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
        Validity
            Not Before: Jun 22 15:14:56 2026 GMT
            Not After : Jun 29 15:14:56 2026 GMT
        Subject: CN=6a395170-3f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:b2:f7:7f:05:2f:f4:7e:eb:13:15:a1:ea:
                    5b:9d:3b:a3:63:a9:57:ba:92:8e:ff:75:c7:ef:72:
                    8b:46:4a:82:5e:e7:f8:c7:d9:6c:7c:18:2e:fb:c2:
                    1a:11:30:a9:22:66:f4:94:af:55:c9:fe:90:9c:e5:
                    57:10:41:e3:fe:df:e2:be:d3:3f:38:d3:c6:ee:f3:
                    b5:87:1c:26:6f:57:ae:9c:dd:ec:cd:aa:78:84:78:
                    3d:21:05:51:15:23:af:e9:16:62:0c:69:2c:95:21:
                    61:4f:74:27:40:91:4c:c7:78:7d:78:5a:42:39:4d:
                    78:f5:af:30:92:a7:97:7f:a2:a5:3f:39:a5:98:2d:
                    93:e2:53:78:ad:4a:e4:4f:ea:57:4b:fe:14:0d:b7:
                    dd:7f:8f:f6:24:77:01:04:a1:37:91:93:e6:ce:41:
                    fa:fc:fd:a1:72:5b:24:3b:f0:d7:56:8b:d2:f3:1b:
                    b6:e5:f4:ab:07:4c:ea:f7:81:ba:47:6b:f2:09:48:
                    99:36:65:e3:4a:f9:d7:9a:c0:17:76:82:8b:6b:02:
                    0b:6f:e1:e6:2b:20:ed:86:55:44:a8:5c:2b:c1:21:
                    e6:39:c2:a1:18:45:1a:99:88:5f:d0:07:8a:a3:cf:
                    ad:20:60:e0:40:8b:0d:a1:b7:f1:80:ad:eb:11:31:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A7:E2:80:EE:A9:B8:66:8B:3B:60:AB:95:32:EB:E0:40:72:AE:5F
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:69:18:0c:8a:7e:8b:4f:a8:a7:35:2a:d4:38:2e:0a:8b:
         c9:a2:45:e6:cc:e3:4c:38:f8:8e:69:22:96:c9:65:3b:6e:2e:
         98:cc:39:0e:d3:0b:24:f6:83:20:03:f6:8e:b2:f1:2e:de:56:
         0b:c0:8f:b2:ab:d2:40:d4:21:fc:6f:58:31:69:28:35:06:55:
         68:27:53:b1:46:db:a8:06:5d:66:a2:6e:e9:18:d0:58:76:21:
         c7:fe:e9:bb:e6:33:92:a1:45:71:2a:00:e8:94:61:11:58:33:
         a7:7e:24:89:38:be:7c:70:f1:51:d6:17:78:f6:ba:14:1f:20:
         49:b2:3f:24:ce:1b:94:05:be:95:6d:ba:73:ef:08:66:cb:29:
         30:ee:56:9b:61:f4:8a:be:7a:b5:d4:2f:2e:6c:17:4a:9e:80:
         c2:34:52:0a:1d:55:26:17:32:15:af:41:86:96:9f:d9:e1:f4:
         4c:6e:cf:0f:f5:c3:32:b9:cb:30:6d:a1:b6:aa:d6:a0:67:72:
         e3:63:e1:0c:0e:63:57:a4:bb:a5:22:5d:54:9a:0b:21:26:77:
         fe:f0:93:9d:47:d7:1a:60:51:38:bd:07:02:bf:2a:23:2c:eb:
         53:49:a3:de:18:59:f3:0d:c7:3e:6d:9a:2f:35:44:4e:cb:a0:
         cc:ab:97:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3
NDUwQ0YzNDEwHhcNMjYwNjIyMTUxNDU2WhcNMjYwNjI5MTUxNDU2WjAYMRYwFAYD
VQQDEw02YTM5NTE3MC0zZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwa2y938FL/R+6xMVoepbnTujY6lXupKO/3XH73KLRkqCXuf4x9lsfBgu+8Ia
ETCpImb0lK9Vyf6QnOVXEEHj/t/ivtM/ONPG7vO1hxwmb1eunN3szap4hHg9IQVR
FSOv6RZiDGkslSFhT3QnQJFMx3h9eFpCOU149a8wkqeXf6KlPzmlmC2T4lN4rUrk
T+pXS/4UDbfdf4/2JHcBBKE3kZPmzkH6/P2hclskO/DXVovS8xu25fSrB0zq94G6
R2vyCUiZNmXjSvnXmsAXdoKLawILb+HmKyDthlVEqFwrwSHmOcKhGEUamYhf0AeK
o8+tIGDgQIsNobfxgK3rETEzFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSn4oDu
qbhmiztgq5Uy6+BAcq5fMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE
QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh
Z3gtOEZ5S2k5alIwVU04MEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuLNpGAyKfotPqKc1KtQ4LgqLyaJF5szjTDj4jmkilsllO24umMw5DtMLJPaD
IAP2jrLxLt5WC8CPsqvSQNQh/G9YMWkoNQZVaCdTsUbbqAZdZqJu6RjQWHYhx/7p
u+YzkqFFcSoA6JRhEVgzp34kiTi+fHDxUdYXePa6FB8gSbI/JM4blAW+lW26c+8I
ZsspMO5Wm2H0ir56tdQvLmwXSp6AwjRSCh1VJhcyFa9Bhpaf2eH0TG7PD/XDMrnL
MG2htqrWoGdy42PhDA5jV6S7pSJdVJoLISZ3/vCTnUfXGmBROL0HAr8qIyzrU0mj
3hhZ8w3HPm2aLzVETsugzKuXmQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:13:17 2026 by rpki-client