Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          qsIb2jOTUmye2H+rtOJUtcWjYEpR9OwkYdv0/wWO3GQ=
Subject key identifier:   2A:C4:F4:50:10:F8:87:14:9F:6E:E6:45:7E:A3:58:62:F6:86:FB:61
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          63
Signing time:             Mon 27 Jul 2026 10:21:37 +0000
Manifest this update:     Mon 27 Jul 2026 10:21:37 +0000
Manifest next update:     Mon 03 Aug 2026 10:21:37 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: ye7s3iXtf6SMUmQz/m/mQ5POR3jcT/36jrMd3GpfX8c=)
                          2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Jul 27 10:21:37 2026 GMT
            Not After : Aug  3 10:21:37 2026 GMT
        Subject: CN=6a673131-6f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:10:bb:cf:d8:ce:76:8d:d8:ec:83:c6:68:
                    11:c6:42:97:be:5f:13:ce:0a:37:19:64:d4:03:2c:
                    92:38:6b:cb:12:72:be:a5:31:31:43:4e:a6:eb:8c:
                    04:f4:aa:2d:aa:f3:bd:3e:27:4c:ed:72:40:ac:95:
                    17:8b:2a:0d:c3:3a:36:78:a6:c3:6f:ce:f0:74:c3:
                    83:3a:16:66:98:ba:be:16:37:37:2f:77:64:fd:9f:
                    66:8c:0e:75:3f:48:fe:fe:fb:f7:5a:c7:15:69:79:
                    1a:20:59:a9:32:0c:60:02:3c:90:1e:cc:99:23:05:
                    32:1a:ae:26:b1:74:04:23:b1:f2:35:14:b8:13:54:
                    bb:c6:a2:80:37:ea:5e:1d:3f:f1:5a:01:33:ef:36:
                    17:db:f9:1b:ac:b4:b7:6b:22:2a:4e:d2:bf:34:99:
                    59:5a:ce:a9:be:da:de:85:20:71:ff:0e:5a:41:2f:
                    9d:48:a5:11:77:35:81:95:d4:c4:e3:d1:50:bd:c7:
                    39:63:cd:12:f4:fd:b6:b8:5c:be:08:d4:e3:be:6c:
                    60:f6:b7:a5:46:bb:f4:6c:07:79:ac:eb:42:4a:e5:
                    58:6e:12:2a:bb:14:2d:bb:80:ee:f2:ec:7c:8b:1b:
                    5a:73:ed:2c:77:5e:17:4c:9f:34:f1:ee:27:c8:49:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:F4:50:10:F8:87:14:9F:6E:E6:45:7E:A3:58:62:F6:86:FB:61
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:69:22:b0:6f:c1:9b:3d:fc:27:4c:d5:e0:f8:bd:02:c4:6e:
         d7:f7:3c:1d:63:99:30:4f:07:ff:b4:6f:cb:54:84:5e:a3:c8:
         17:23:af:57:ff:83:99:3f:a0:e1:04:c8:a0:f2:fb:e8:8c:54:
         2c:d0:5d:6d:cf:1c:06:ab:71:5d:d8:f9:7a:13:45:5d:28:d2:
         b4:f3:e1:43:83:76:a8:5b:01:5a:70:27:55:af:01:25:64:df:
         3b:0c:d4:05:3f:45:e0:d6:f1:8a:b4:5e:7b:c1:55:a6:9f:87:
         bd:31:e6:53:1e:94:47:79:50:5d:12:8d:4c:b1:83:de:2f:2e:
         d0:e5:9e:27:12:2f:4e:01:cb:72:13:80:e3:49:a5:d7:ac:04:
         6e:d6:58:c7:4b:3b:03:55:8c:62:01:93:07:c9:1e:ac:54:7f:
         3c:31:52:8d:b5:87:e5:75:e8:1d:6c:2a:48:07:cb:26:86:8b:
         17:95:47:91:f6:89:8f:f9:8f:82:a3:ec:54:24:bc:d5:e0:d4:
         b1:ce:b8:ef:7d:e2:43:72:35:5b:8b:37:30:ee:58:8f:93:82:
         a2:1a:44:34:6d:e7:5c:3b:9b:69:4d:cc:dc:cd:56:48:51:de:
         99:17:b5:56:2b:12:69:ff:d0:f2:47:31:ff:3e:8c:50:ee:c0:
         3d:94:ac:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:49 2026 by rpki-client