Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File:                     SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier:          UfdQ6ghT8s79eOldJxC8cogOPpWSB+RNZNu7EClvR88=
Subject key identifier:   B6:F8:47:8A:78:A3:5F:0B:17:DF:2B:18:E3:F0:38:A3:99:9C:E1:5E
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer:       /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number:          0375
Signing time:             Fri 17 Apr 2026 00:43:42 +0000
Manifest this update:     Fri 17 Apr 2026 00:43:41 +0000
Manifest next update:     Fri 24 Apr 2026 00:43:41 +0000
Files and hashes:         1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: znA2fXr4Bm4FDuyXo3cyeLMtFWlmZcCLXA8uMNdqO58=)
                          2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: 2tH0iHpk0080/Pw9Odz5B4aeCdeThce6H2quPYs0FXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
                          rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
        Validity
            Not Before: Apr 17 00:43:41 2026 GMT
            Not After : Apr 24 00:43:41 2026 GMT
        Subject: CN=69e1823e-cedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:55:fd:9b:5a:70:a8:25:1d:f0:e6:04:41:
                    3f:a6:dc:f4:cf:4f:42:1c:e3:a4:49:1a:8a:7f:b4:
                    c1:e3:de:32:77:f3:58:30:a7:66:23:db:6d:8f:2e:
                    8c:ca:2a:eb:f8:11:04:fd:1a:ad:f6:cc:15:c4:b3:
                    1b:ec:32:bf:d9:05:a8:83:b1:8a:74:77:26:2b:13:
                    0e:11:81:f6:9b:3b:5d:63:9f:1b:ac:e9:cd:95:f2:
                    31:a3:ab:12:89:ed:40:a4:c8:6d:eb:b4:0b:09:49:
                    c6:41:d8:8e:4b:3d:04:c2:ee:d8:c0:22:b8:67:05:
                    04:04:e9:20:e6:b6:77:84:fe:df:db:45:d4:9a:d9:
                    c6:a0:84:88:77:c7:fb:6c:ee:80:65:92:17:4c:d0:
                    8e:ae:ee:a4:85:35:56:3c:a5:46:a3:cc:db:6f:15:
                    5c:e5:1c:35:06:78:85:54:62:cc:da:ac:6f:ec:31:
                    ae:2e:e5:b0:7a:97:07:05:06:2f:7b:05:27:37:83:
                    de:44:8b:05:aa:d5:49:80:cd:14:74:b8:0c:56:93:
                    96:ad:b4:b8:1e:55:b9:2a:8b:af:45:29:f6:0f:33:
                    93:2d:0f:86:6b:c4:91:57:4d:32:1c:33:c4:68:45:
                    02:ee:2e:52:1f:03:9d:5d:ec:7a:5d:33:bb:1b:09:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F8:47:8A:78:A3:5F:0B:17:DF:2B:18:E3:F0:38:A3:99:9C:E1:5E
            X509v3 Authority Key Identifier:
                keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:70:e5:36:bf:95:c3:2f:a6:dc:19:31:47:20:cf:d4:3b:
         fe:e0:19:bc:f9:ea:64:b4:f8:ba:f0:a5:51:bd:bd:22:67:8a:
         e1:df:c3:78:84:6c:32:12:34:ee:0a:8e:15:b3:88:1b:71:bf:
         5c:40:7a:b4:c8:24:0f:75:40:c4:c0:1c:fb:0c:57:24:53:46:
         96:64:6a:9c:43:31:e6:cd:aa:d3:4b:3f:39:9f:af:1c:c2:f7:
         e0:1e:ef:ef:bb:16:e7:cf:8d:1e:a3:a4:42:81:33:93:8e:79:
         64:a8:15:39:b7:d7:28:85:41:a2:32:d5:c2:84:8d:bd:c6:50:
         1a:9c:9f:49:0e:63:8d:66:54:ff:55:cc:46:0c:e7:c7:5c:37:
         a4:6e:35:d8:b7:b8:fa:a3:4f:98:7b:7d:d7:a5:1b:7b:00:60:
         a0:5b:bf:16:08:05:0d:ee:9f:92:0e:d0:54:0f:a5:e0:0d:be:
         0e:49:e2:76:89:29:de:7f:50:2d:48:55:35:03:09:fc:89:4d:
         1e:ba:2a:4c:6e:df:7f:27:7d:97:35:bf:46:a1:ad:c9:39:1a:
         8c:55:d0:3f:1f:58:f3:68:55:a5:89:29:88:b1:b9:10:3b:72:
         89:7b:19:c5:dd:16:d4:08:bd:c1:59:ce:be:d9:2b:3e:a9:9c:
         d0:31:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:38 2026 by rpki-client