Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
File:                     SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json)
Hash identifier:          CUC6EmJfx3riW/n7zLd2n8LIEusC2SldYGplypwvXn4=
Subject key identifier:   1E:AC:62:30:EA:D2:6C:51:17:17:A0:0C:E7:DA:55:46:F9:B3:4D:E4
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Certificate issuer:       /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
Manifest number:          352B
Signing time:             Sat 04 Apr 2026 15:13:30 +0000
Manifest this update:     Sat 04 Apr 2026 15:13:29 +0000
Manifest next update:     Sat 11 Apr 2026 15:13:29 +0000
Files and hashes:         1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: gmx8ZUHd1Jwq4LvfZKEzMvw366FMrAeDcSAcijk3JxA=)
                          2: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: Iu3fSi12Z2U9AUNUC1OMiFixkCYrUHtslkvgsswiyxY=)
                          3: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: TuixmrjJztg/mXQeKBMMqGDhlis8qrixyvnyo1RBaA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
                          rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
        Validity
            Not Before: Apr  4 15:13:29 2026 GMT
            Not After : Apr 11 15:13:29 2026 GMT
        Subject: CN=69d12a99-ca2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:c0:ec:b3:6d:5c:56:71:d7:f4:48:32:75:
                    54:06:51:0d:9f:71:f5:ea:08:78:91:12:82:dc:e8:
                    fe:15:d1:cd:de:b0:09:01:9f:c6:05:c3:90:5c:52:
                    6f:54:c6:44:9c:0b:74:25:cc:55:c0:81:09:3c:bb:
                    df:aa:f9:4f:00:cd:69:de:cf:64:30:7c:13:f4:e4:
                    6e:33:d5:ba:15:66:b0:c9:1a:64:9e:6e:32:a0:8a:
                    56:f0:71:14:45:3d:84:50:03:6b:59:b5:d4:83:c7:
                    f8:bb:a5:10:1a:eb:b6:5c:e0:26:31:90:c1:ef:40:
                    26:4f:b6:13:66:83:75:94:40:ad:9b:72:32:c7:8f:
                    f8:82:6f:59:1d:79:de:6d:f9:81:eb:14:a5:81:9d:
                    a1:16:2c:6d:60:dc:2a:00:92:7d:9f:81:70:48:b9:
                    f6:f8:26:59:00:fb:3f:5a:5a:84:c3:e9:39:88:31:
                    02:a7:39:93:d6:78:d6:c8:25:8d:ae:50:2a:00:d5:
                    82:a1:fb:5b:95:d5:e7:08:c2:84:b2:3c:a9:67:10:
                    41:55:ce:9d:63:ec:17:5f:28:2d:b0:5e:71:90:f3:
                    ca:03:fb:69:30:ca:fa:bf:70:10:bf:1e:d7:5b:8f:
                    64:2f:37:02:4f:d4:15:8c:48:f9:76:87:f9:aa:ed:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AC:62:30:EA:D2:6C:51:17:17:A0:0C:E7:DA:55:46:F9:B3:4D:E4
            X509v3 Authority Key Identifier:
                keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:59:16:67:46:80:af:a1:ff:11:8b:a3:af:dc:bf:6f:c4:f4:
         e3:e3:80:98:31:df:7e:88:02:31:c1:3a:c5:a2:ff:9a:0b:e9:
         76:20:56:93:68:5c:4c:ed:fc:7d:50:8e:69:eb:ab:24:c7:b8:
         d7:27:e9:3d:8c:fb:ff:de:e5:4e:f5:8f:c3:66:48:7b:11:d9:
         b6:a9:68:bf:36:b7:e0:65:fe:71:05:a3:12:8d:f3:76:c3:be:
         39:0f:60:90:63:40:19:1f:1c:5e:e3:51:8a:4d:46:6d:d4:fc:
         86:d1:98:9e:3f:8d:19:6d:73:a7:a4:f1:dd:04:0d:bc:75:c1:
         27:c0:40:4b:60:13:2f:a6:e2:fa:c4:a2:0f:a9:2d:5d:b2:15:
         c0:b0:71:71:be:b9:d5:f6:09:5e:2d:b9:f3:8e:96:dd:d9:9c:
         7d:e0:9d:4d:bb:96:38:c8:b3:c1:e6:03:6c:c7:f8:b3:ed:e8:
         11:be:28:f1:6e:43:6a:7e:12:5a:c6:21:1e:ae:cd:09:aa:40:
         69:4f:82:20:5c:99:5f:97:15:ae:b4:d1:af:47:e3:27:55:32:
         b9:c6:8e:ad:a2:e2:74:6f:06:37:40:91:30:2e:00:ed:3a:b6:
         9b:11:6d:31:9a:10:c3:29:8a:ab:3b:7e:dd:76:a9:ea:dc:0d:
         04:cd:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:33:58 2026 by rpki-client