Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          zLs+i4eP6ZIjnWvAgB8eNGiKo52P+QL6Mv6dzSajEuQ=
Subject key identifier:   24:0B:4B:F1:3C:57:97:AD:96:F4:D4:87:CF:2E:10:7B:B3:EF:DA:40
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          19
Signing time:             Sun 01 Mar 2026 10:28:25 +0000
Manifest this update:     Sun 01 Mar 2026 10:28:25 +0000
Manifest next update:     Sun 08 Mar 2026 10:28:25 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: ltuq7C4mRUNKAnIfRT/6jW71sZlDzR9fSMZSMKmKV7Y=)
                          2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Mar  1 10:28:25 2026 GMT
            Not After : Mar  8 10:28:25 2026 GMT
        Subject: CN=69a414c9-5fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:3b:30:3e:4c:e6:26:04:66:1c:9c:8f:f1:
                    98:3d:c0:83:2c:1d:25:16:a2:df:4c:b7:44:ab:d0:
                    dd:74:7d:a2:80:61:cb:53:a4:ff:bc:b7:c5:11:0e:
                    78:69:77:a1:5c:15:b9:1c:b0:a9:bd:af:a0:b7:54:
                    5f:50:59:8e:2a:d1:84:69:36:ef:27:50:51:46:9f:
                    1e:3f:37:25:c7:43:ae:c0:55:42:cb:04:be:25:b6:
                    14:29:65:98:1c:7f:6b:ff:5a:9e:82:ee:a6:4f:d3:
                    68:ce:c1:25:e3:56:90:cb:2a:6f:64:de:00:e2:48:
                    52:dd:20:1e:5b:0d:42:cb:b3:19:dd:fb:ba:03:48:
                    24:c8:57:3c:95:5a:e5:ef:26:52:eb:23:68:77:a4:
                    2f:23:06:13:69:64:64:ae:5b:e4:30:1f:50:16:c2:
                    23:50:bf:e3:6d:fb:cd:cb:34:56:a8:3c:3c:de:fc:
                    c6:0e:02:55:3d:96:74:ee:00:32:39:f2:2c:73:94:
                    2e:8f:c0:3f:6d:0a:08:70:41:76:cd:05:a7:5e:66:
                    30:c4:a9:79:4b:90:52:97:12:f7:c9:eb:cb:d5:12:
                    07:9a:df:46:54:9d:80:fe:c0:b6:29:e8:95:b1:b8:
                    bb:b5:2f:81:00:fe:bf:9c:da:1d:c6:45:b0:42:95:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0B:4B:F1:3C:57:97:AD:96:F4:D4:87:CF:2E:10:7B:B3:EF:DA:40
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:76:f0:f4:34:c1:a6:82:75:99:76:73:c8:32:3d:f8:9c:c6:
         da:e7:9d:01:09:42:06:07:c7:50:dd:6a:bf:cc:bd:47:d3:b7:
         ff:33:59:bd:6f:fa:87:9e:64:ea:8b:0c:24:09:31:4a:85:e5:
         4b:2f:ec:35:f0:86:d1:5c:8e:6c:d3:b0:5a:3d:ae:f8:5b:c2:
         e9:e0:38:4b:87:f2:4a:3a:08:e5:32:a0:15:97:b4:89:09:01:
         2d:f4:f7:04:40:aa:83:5c:98:29:34:65:11:9f:71:95:a2:8d:
         4a:d6:7f:8d:cf:af:b0:08:b7:ad:80:c7:6b:1d:a3:58:5d:cb:
         f8:17:4b:d8:c9:5d:2a:c4:8a:30:68:ef:fc:3e:62:e2:4e:99:
         8c:b9:7d:a9:a5:9c:69:91:33:35:c0:9e:c2:2a:33:69:c8:9a:
         dc:17:11:6c:63:61:20:17:99:47:20:a5:a2:1a:1a:aa:ea:e2:
         5f:8d:d0:8d:1f:b8:b6:05:b1:3c:0a:02:43:7a:44:a6:35:6d:
         80:7d:b0:7a:e7:70:b6:44:f8:c4:5c:bd:34:47:e5:80:7b:a6:
         b0:1b:ec:04:7d:f1:af:c3:05:2f:7a:9b:29:e9:e2:6c:6a:9b:
         9b:49:74:5e:c3:c4:91:9a:d3:a7:51:92:61:a7:13:48:e5:35:
         29:31:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:31 2026 by rpki-client