Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File:                     SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier:          amSS5MNU1CvENMX4qrWrVFJjxV7MJt+B8PWioY4Pi+I=
Subject key identifier:   0C:B8:A7:04:ED:7B:3B:AC:C0:C6:D3:9F:DB:7A:82:79:D5:66:96:B6
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer:       /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial:       03AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number:          03A8
Signing time:             Thu 23 Jul 2026 01:33:46 +0000
Manifest this update:     Thu 23 Jul 2026 01:33:46 +0000
Manifest next update:     Thu 30 Jul 2026 01:33:46 +0000
Files and hashes:         1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: FAAv5+33LyJUqtyxwNSeVQg9++FRVrODjhg+meF3Apo=)
                          2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: ky7BpvXCWWvVGX/3oyVJJwDRQTX3DEgXUQn+49Yrj9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
                          rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942 (0x3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
        Validity
            Not Before: Jul 23 01:33:46 2026 GMT
            Not After : Jul 30 01:33:46 2026 GMT
        Subject: CN=6a616f7a-d834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:de:93:97:4c:98:d2:ea:51:4c:be:08:bb:
                    bc:46:50:41:92:77:cf:c4:ee:a6:4c:5a:27:f7:ec:
                    76:78:34:96:13:b8:14:d1:bc:d0:b1:07:32:69:17:
                    0b:c6:c0:b6:60:08:80:96:c1:22:15:ae:b6:3b:ad:
                    19:59:90:23:7f:cb:d5:4b:85:cd:03:35:39:f4:3f:
                    07:1b:08:e4:93:35:ae:22:51:01:db:dd:4f:64:78:
                    90:6f:ee:30:7d:b2:d7:e2:fe:7a:15:b5:c6:80:a3:
                    10:9b:e7:3c:0a:34:02:73:ba:0f:ba:9d:44:60:65:
                    d5:ad:c3:a1:16:20:b7:f4:b0:94:70:0f:28:b1:8f:
                    ce:ac:71:18:12:61:30:64:15:9c:38:b8:13:03:45:
                    db:6e:c6:5d:bf:6d:d0:fe:f7:41:35:b6:44:9a:bf:
                    ea:14:71:f0:c4:14:de:e0:d2:b2:c2:74:8a:7f:9a:
                    2a:17:90:e1:5f:7c:9a:04:85:b8:81:f0:52:a6:b9:
                    8d:b0:20:b8:d0:b2:de:f3:53:e7:34:92:3f:b3:36:
                    dc:ef:c4:27:35:22:fb:74:e1:22:25:86:eb:72:37:
                    ca:ce:50:94:da:5b:dc:d2:f4:07:f8:b0:7b:68:f1:
                    bf:15:29:ff:7e:bb:62:6a:fd:80:71:fd:96:91:32:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B8:A7:04:ED:7B:3B:AC:C0:C6:D3:9F:DB:7A:82:79:D5:66:96:B6
            X509v3 Authority Key Identifier:
                keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:18:2f:22:26:80:af:df:95:64:09:89:fb:08:f5:77:8a:a7:
         9a:d2:b5:ed:60:4c:28:33:4a:08:5c:ef:a0:0e:7b:ef:1f:9e:
         3c:ec:c1:49:31:c5:4a:8d:cd:c5:a9:aa:09:3a:2c:2f:34:9b:
         69:5b:c1:a9:9b:c2:c1:e5:12:5f:ba:59:d1:06:53:42:33:94:
         45:9c:2f:8b:e5:ec:2d:00:94:28:15:37:47:91:94:0f:a8:59:
         80:92:ac:79:71:cc:13:c6:29:82:bb:a9:cf:b6:ce:aa:de:87:
         db:72:16:a2:f8:48:bc:f8:e2:a1:31:eb:dd:47:cd:62:da:3b:
         6f:b7:c1:f9:06:4c:05:bf:22:0d:20:a4:f9:1a:92:83:7f:b4:
         ed:a6:89:62:3f:36:c1:6e:4c:e0:cc:3d:26:3a:c3:da:90:2c:
         29:51:54:bf:39:5f:f0:18:88:aa:df:c9:e3:b9:65:6f:ff:41:
         50:5a:7b:a1:4b:e5:a4:b5:2a:ac:86:a9:b3:00:0a:44:b0:d0:
         e6:48:7c:98:d4:02:93:df:b8:4f:0c:ca:c6:b3:a6:15:d3:98:
         5d:ec:c2:d3:ab:bf:14:2e:c2:3f:78:40:9e:9e:b8:03:e7:67:
         f7:e4:74:29:50:63:07:a5:fb:c8:2f:fd:39:d5:ac:e6:74:4c:
         37:f6:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:58 2026 by rpki-client