Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          7ZbMHWJZa2WPC7BmIsnAM8ZEEoWEw/wNKFRN8VNUKEM=
Subject key identifier:   2C:54:B8:8B:E9:EE:C1:0A:BA:E5:F2:76:2D:64:11:68:BA:93:5A:B7
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          2B
Signing time:             Sun 05 Apr 2026 08:05:37 +0000
Manifest this update:     Sun 05 Apr 2026 08:05:36 +0000
Manifest next update:     Sun 12 Apr 2026 08:05:36 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: TMK6/qWVj8LPnty1rYCGaVdBnLJ2EZy/esnCiT4CJ50=)
                          2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Apr  5 08:05:36 2026 GMT
            Not After : Apr 12 08:05:36 2026 GMT
        Subject: CN=69d217d1-7eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:5c:62:ce:a4:00:63:ad:0a:c6:9c:4b:4f:
                    9d:8e:cb:18:b1:fe:a6:70:b0:1e:9e:59:4d:05:de:
                    d7:af:c7:b9:0e:86:f1:5f:7e:64:45:f1:2a:63:25:
                    01:31:52:b1:53:e6:ce:68:18:b8:0e:d8:a2:63:76:
                    2d:f1:1d:fd:11:52:ad:36:6e:e1:43:78:3a:7c:b9:
                    31:5f:2b:94:41:0f:cb:0b:c2:71:24:10:b8:80:44:
                    6f:fb:55:56:a8:ab:20:5a:f7:58:71:e0:3d:f8:1a:
                    1d:7f:dd:ee:4e:84:3a:a1:8b:0b:0c:07:f5:5d:31:
                    a0:53:db:f9:3a:68:27:71:5c:5a:c1:15:e5:53:93:
                    bf:38:85:13:c8:00:6f:fc:dc:f1:73:05:4c:f6:0c:
                    79:0c:e8:bf:69:cb:5f:48:33:4d:6d:00:5c:27:32:
                    dd:f9:a4:60:80:42:ec:a1:d9:bd:4b:e3:54:62:2a:
                    ed:68:0e:fc:fc:f1:13:64:96:ae:1f:9e:64:ae:7c:
                    d1:57:4d:76:f2:be:dc:63:61:ce:ee:96:27:76:c1:
                    ae:02:00:a9:2c:a4:07:3c:ae:81:45:01:57:35:8f:
                    ff:be:54:b8:7d:3e:aa:dc:ab:ef:c6:12:9a:b1:b5:
                    c6:a7:71:00:f7:0a:47:49:f2:17:a2:17:16:1e:2b:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:B8:8B:E9:EE:C1:0A:BA:E5:F2:76:2D:64:11:68:BA:93:5A:B7
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0f:2d:ba:dc:3b:0c:57:7b:8c:eb:09:79:b6:99:87:d2:15:
         2f:8a:78:4c:8e:48:a3:08:ab:b2:13:cf:22:ed:e5:b6:fa:95:
         bb:60:03:27:b8:ab:19:43:4c:96:af:e3:b3:34:72:80:6a:e6:
         30:4b:ab:0b:f0:d7:80:91:6c:6f:58:f8:ec:8a:ff:33:2e:23:
         33:73:41:52:81:1d:2f:19:80:cc:a1:4c:6f:29:6c:c9:42:e2:
         56:d9:aa:e2:4e:e6:77:5c:df:2f:e3:1f:85:dc:71:c4:19:27:
         01:30:4f:27:a4:f2:42:0e:63:d1:66:12:9a:b8:b4:dc:80:41:
         6e:75:a8:17:55:5f:08:38:0e:fa:94:67:ff:3f:e2:67:f2:1f:
         f3:b0:ff:8f:6f:ef:98:6f:ad:6a:10:5a:36:70:8e:4b:0a:76:
         e6:37:1a:4b:c1:3f:62:da:0e:f7:6b:97:d2:f4:2e:03:ee:ae:
         57:fa:2d:95:ce:29:8e:c5:4b:d0:10:1c:cd:b6:9f:b7:9d:f5:
         86:90:99:a9:3f:1d:80:c3:5e:5d:20:b3:70:90:4a:70:df:f1:
         4b:68:17:3d:ae:86:83:a2:3d:a0:ce:cd:0f:bb:c8:29:c2:66:
         86:b1:c2:60:70:1c:8d:86:ac:a8:e3:ef:b3:67:f4:01:12:8a:
         2a:c8:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:42 2026 by rpki-client