Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          CDad706baNXbcy4iXDzUkNi28Xv/a3JZzJUXwzJKxBs=
Subject key identifier:   A1:D3:19:4A:87:93:3C:7C:21:58:FC:4A:B8:24:A2:A6:F7:3B:88:1A
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          3D
Signing time:             Mon 11 May 2026 08:42:23 +0000
Manifest this update:     Mon 11 May 2026 08:42:22 +0000
Manifest next update:     Mon 18 May 2026 08:42:22 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: g03DY36P6aebr2oZx+agU6wsD/BxJqfUG4BAf0qc3Bw=)
                          2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: May 11 08:42:22 2026 GMT
            Not After : May 18 08:42:22 2026 GMT
        Subject: CN=6a01966e-f377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:32:e1:a6:87:87:2c:2b:28:c7:ba:c4:de:
                    9c:56:16:c5:b5:eb:1d:50:67:29:57:46:87:00:5c:
                    38:02:6e:26:4d:02:e4:83:96:72:12:c4:47:e4:90:
                    0e:39:be:f8:83:89:12:e1:a4:82:1f:fc:17:cd:4a:
                    43:42:02:99:e6:9c:88:e6:63:b2:11:08:7a:38:ac:
                    db:ae:2d:20:b6:8a:5c:fe:10:ec:dd:2e:8e:04:ea:
                    44:65:ba:40:1f:36:7f:e3:ee:ed:f2:97:c8:1e:e5:
                    99:18:bc:d7:d3:83:38:8d:1d:c5:d6:7c:d8:e4:4d:
                    bd:1e:b9:93:58:0f:b2:59:2e:db:b4:62:7e:6f:aa:
                    81:c3:d4:3b:68:d3:1c:35:8f:cd:9f:94:3b:9b:76:
                    b7:5f:00:bf:67:b2:03:c5:49:d3:fe:8d:75:97:37:
                    4a:74:6a:3d:2c:2a:ba:00:16:56:34:2a:ee:2e:d6:
                    2d:f5:d8:ed:bb:12:2a:ee:3f:69:87:fc:40:ac:b0:
                    27:67:01:57:49:4b:b6:ca:71:b3:27:b1:f3:a7:07:
                    ee:52:c4:0f:7e:0f:17:ba:76:a5:1c:be:64:10:9f:
                    ee:67:c5:77:36:59:7a:9a:b1:88:36:81:72:45:c7:
                    0f:94:7d:17:8e:c3:b3:36:62:26:fa:39:14:40:a8:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D3:19:4A:87:93:3C:7C:21:58:FC:4A:B8:24:A2:A6:F7:3B:88:1A
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2e:b2:ea:08:d2:9e:64:c8:b4:fb:eb:43:ef:6f:d0:90:e0:
         e3:0e:19:c3:df:ac:d9:04:17:c5:d2:23:2f:98:d4:df:e6:00:
         15:ba:2b:e0:aa:ae:c5:40:2f:94:76:c2:54:1f:9e:e7:14:80:
         7d:dd:d1:b4:74:31:89:a1:35:69:dd:4c:8b:85:4f:65:15:d5:
         51:63:b8:01:04:42:df:16:45:be:d1:3a:62:c6:25:18:59:ec:
         3d:b0:4d:c5:a2:93:52:c1:98:b7:9e:1e:b9:6e:a4:0b:24:c8:
         23:e4:38:28:1b:82:b2:b3:f2:e6:a1:c7:67:53:35:91:36:5d:
         f6:2b:4d:30:ef:22:d1:25:3e:1b:c3:0b:af:d3:5f:d8:f9:6b:
         04:ac:26:03:44:94:f2:37:5f:40:15:65:de:e9:85:55:48:3c:
         bb:8c:1f:18:47:0a:a6:96:09:e0:44:1c:5d:6c:17:8d:f9:55:
         7d:90:8c:c3:9f:e5:cf:db:b3:d7:0c:82:e7:17:33:dd:ec:2d:
         11:a8:d9:b0:46:2d:40:2e:d1:69:e9:7c:20:d2:97:6d:c2:d7:
         55:18:1a:c8:d7:5e:e8:2f:d6:27:09:42:af:04:6d:b4:62:fa:
         8a:63:57:c7:60:e3:51:df:40:b3:17:d7:af:1f:a4:b0:6f:f0:
         99:7f:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:10 2026 by rpki-client