Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File:                     SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier:          a/e2LZVDFv9fK4FsKxukc04F4NjzMyzCAyZ1Ya775Aw=
Subject key identifier:   D7:18:9C:43:95:7B:F4:8D:56:D0:32:5B:55:85:78:FB:7D:0B:AE:D9
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer:       /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number:          DA
Signing time:             Sat 03 Oct 2026 07:21:41 +0000
Manifest this update:     Sat 03 Oct 2026 07:21:41 +0000
Manifest next update:     Sat 10 Oct 2026 07:21:41 +0000
Files and hashes:         1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: LzWpiMRJ4fac49bwfpYEnrkPglvZjmzAUSHLd7n+IcY=)
                          2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
                          rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
        Validity
            Not Before: Oct  3 07:21:41 2026 GMT
            Not After : Oct 10 07:21:41 2026 GMT
        Subject: CN=6ac0ad05-3895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:7d:d8:44:c4:cc:7c:69:fd:fa:3d:84:64:
                    16:94:78:70:c6:6b:ea:30:5d:28:56:cc:23:21:26:
                    ef:8a:8a:53:37:1a:c1:f6:16:6c:6d:e2:6a:e3:75:
                    67:2b:63:7a:9c:10:9e:c8:23:74:b5:b8:a0:81:15:
                    52:8e:e3:67:46:77:0f:31:99:27:0e:c1:b7:70:55:
                    ac:83:d4:c0:1b:cb:90:a0:b5:1d:ea:9b:86:13:bd:
                    ff:56:ec:75:18:2b:5c:f8:a6:ef:d7:c9:9b:c3:56:
                    13:5c:5d:a8:2d:49:a7:14:70:f4:72:d4:bc:03:31:
                    88:ec:c5:08:cb:20:27:98:7e:ec:60:24:51:98:5f:
                    5c:79:fa:53:d9:67:dc:5b:71:05:1b:2a:c5:85:05:
                    e0:ca:1b:dd:82:2f:31:2f:a6:18:06:f8:35:dd:c0:
                    3c:9d:a8:29:8b:12:8b:f7:b8:f7:f5:91:dc:33:e1:
                    3f:f5:b7:f3:e6:18:1f:c6:ea:8b:aa:30:32:92:f8:
                    a1:94:2a:4e:f8:f2:d5:87:5d:ee:18:77:b1:87:b4:
                    88:e7:b8:b5:98:20:e4:a0:9b:20:4e:94:28:d1:e5:
                    05:91:06:0d:d4:c0:c7:50:4f:50:ee:7b:08:f4:ab:
                    b7:d6:98:ad:1d:be:c1:a7:39:91:83:cb:19:ff:ad:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:18:9C:43:95:7B:F4:8D:56:D0:32:5B:55:85:78:FB:7D:0B:AE:D9
            X509v3 Authority Key Identifier:
                keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:88:41:69:35:04:2b:02:6e:d0:d2:d9:c7:05:34:e2:37:
         d4:8f:30:91:09:ca:8b:49:e8:0a:c5:48:21:2f:b3:7e:8d:56:
         69:f3:3d:f9:a2:79:bf:ed:d4:e6:93:de:7a:c9:dc:45:49:a2:
         e6:fd:51:11:3a:86:ae:b8:22:ae:0e:00:53:9b:90:aa:c0:4e:
         a5:2c:4f:99:5f:b1:e4:aa:49:b7:05:02:30:09:1a:3b:1d:65:
         94:f1:3e:6d:40:0c:1d:8b:92:f0:77:77:20:9f:3e:dc:f4:cc:
         90:52:a1:26:d7:08:a7:3c:aa:10:57:90:6e:cf:5c:28:76:b8:
         c5:27:2b:04:71:5b:14:fd:ad:7f:35:67:a4:66:0a:e5:4c:16:
         7c:cc:aa:48:f3:9e:5b:9e:f9:cb:a5:88:2e:5a:73:4d:0c:56:
         36:71:4f:50:99:45:7d:2c:43:5b:2e:45:79:d2:67:7d:ef:34:
         65:38:e2:f4:5f:00:be:cc:fa:1a:cf:cf:cd:5d:31:ae:81:8e:
         d5:df:8a:49:eb:60:0e:5d:4a:4b:8b:a6:17:f0:04:d2:a2:5e:
         fd:58:75:3b:e7:f2:a8:48:48:6a:fa:c5:65:0e:30:d8:31:aa:
         69:79:c1:39:ad:67:d3:37:a8:31:be:96:33:03:14:90:a8:1b:
         cf:64:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:24:26 2026 by rpki-client