Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File:                     SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier:          fmZNj2pdjEw5AYLTZkhQWm6QSZ9bvWkEjQx9RlgsSM8=
Subject key identifier:   A8:7B:36:B3:50:30:B5:05:C9:BB:CC:3E:2F:02:49:AC:2D:AE:28:82
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer:       /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial:       03B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number:          03AB
Signing time:             Wed 29 Jul 2026 01:24:37 +0000
Manifest this update:     Wed 29 Jul 2026 01:24:37 +0000
Manifest next update:     Wed 05 Aug 2026 01:24:37 +0000
Files and hashes:         1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: m78E3All+GJFISP7ZuDtOUSh/VU29xIwzirDmAWphcQ=)
                          2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: ky7BpvXCWWvVGX/3oyVJJwDRQTX3DEgXUQn+49Yrj9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
                          rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
        Validity
            Not Before: Jul 29 01:24:37 2026 GMT
            Not After : Aug  5 01:24:37 2026 GMT
        Subject: CN=6a695655-09cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:05:29:c9:df:b6:b8:61:3f:bc:6d:a3:ad:
                    54:a0:9a:1e:30:0b:f0:89:33:fc:f8:32:aa:53:59:
                    bb:f6:8e:93:ee:61:21:65:3e:2f:0e:b8:fe:22:cb:
                    ce:bc:f8:55:5e:78:ba:ba:5a:c4:7e:27:14:22:ec:
                    0d:64:58:ff:be:b4:a5:24:db:29:84:aa:1f:79:4b:
                    79:78:12:6f:1c:73:bc:f1:f7:e7:9c:84:c4:1c:2a:
                    12:65:51:7b:cc:0a:c0:5d:30:32:4e:c1:5f:fb:d4:
                    8f:23:8f:7e:2a:19:8f:01:a1:17:dd:bd:bb:9d:ed:
                    a5:1c:87:8b:00:d8:e9:97:1c:96:de:59:f1:f3:04:
                    9e:ef:be:f6:17:ad:95:2a:f2:1d:58:43:58:e7:03:
                    9b:dc:a8:2f:ea:41:d0:c6:a6:97:0a:8e:79:4f:0e:
                    33:5a:40:32:a9:89:0a:54:55:ee:27:8c:19:c5:e8:
                    02:22:83:90:14:de:46:6b:13:64:0f:4c:10:4a:5e:
                    38:54:55:44:3a:b5:bb:e2:a1:e3:cf:84:0e:04:ff:
                    a2:f9:77:5b:9a:70:37:da:35:e0:9b:1b:bf:96:4a:
                    45:b8:61:df:e1:21:a5:be:0f:ad:69:4b:43:d0:36:
                    52:d8:9c:16:96:87:2f:6f:68:45:51:0d:4d:23:e0:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7B:36:B3:50:30:B5:05:C9:BB:CC:3E:2F:02:49:AC:2D:AE:28:82
            X509v3 Authority Key Identifier:
                keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:82:e2:f1:20:9f:1e:49:a4:06:49:7a:18:13:cd:aa:24:
         b9:36:99:ef:cc:eb:95:bb:c4:f2:f1:e1:d1:8f:b5:b6:59:0f:
         af:dc:9e:61:c7:c6:82:03:c4:59:20:e9:c3:88:36:2b:e8:4d:
         d9:2c:ba:3e:b5:b3:b1:40:df:f8:5e:74:39:d1:c1:d9:85:e4:
         59:3d:4b:83:92:88:27:7b:08:32:8d:6f:76:30:68:9e:52:85:
         d3:2c:a1:18:30:6f:75:28:fa:2b:c4:fd:6a:25:c9:da:de:b7:
         52:8b:33:03:be:ed:60:16:dd:9f:90:22:83:51:5a:2c:5a:a4:
         e3:fd:60:50:6d:d0:f2:99:4c:44:69:82:47:f1:ac:ea:a7:94:
         83:86:6f:17:4c:a6:04:27:de:0c:bb:6e:bf:95:bf:ef:89:8f:
         2b:48:e4:4f:53:1b:de:dc:f4:3e:5b:c5:71:48:5e:6c:be:c9:
         7f:92:81:b2:2f:f3:3a:8b:3e:91:37:8a:61:76:64:c4:16:20:
         7d:d3:7e:c5:4d:0c:b0:3c:3e:cc:a8:10:3c:1e:a8:f9:06:2d:
         cf:51:76:7d:47:97:01:0d:e9:bf:a8:cf:ed:83:d5:41:87:bb:
         a9:42:30:8e:3e:79:c9:f8:8c:ee:9e:4b:7b:25:08:30:52:c2:
         c9:b2:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:50:59 2026 by rpki-client