Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File:                     SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier:          jdG8GIBUxps87WXkP8j6FdRqnFml7teQsR+4n5QvNCI=
Subject key identifier:   0D:80:47:9F:63:37:91:4F:19:06:9B:FF:FC:BE:50:2A:ED:B4:DD:CB
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer:       /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number:          B2
Signing time:             Fri 17 Jul 2026 08:21:51 +0000
Manifest this update:     Fri 17 Jul 2026 08:21:50 +0000
Manifest next update:     Fri 24 Jul 2026 08:21:50 +0000
Files and hashes:         1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: PGRLERWwoRXBPnq2yMD5b3aIUUx5H+sk3x9OR2zU3e0=)
                          2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: 642qMptlwjFSXeZbijvnePZpTrHi9JK48jfMXFMB+wk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
                          rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
        Validity
            Not Before: Jul 17 08:21:50 2026 GMT
            Not After : Jul 24 08:21:50 2026 GMT
        Subject: CN=6a59e61f-c6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:f6:e5:19:f5:84:58:90:3c:fe:2c:69:f7:
                    9b:91:bd:91:f0:f8:2d:cf:42:c2:94:29:25:73:0e:
                    83:d2:8c:1a:23:87:1b:14:99:07:6d:40:12:af:ab:
                    b1:28:f8:c8:11:2b:f6:0b:5f:7f:a5:16:26:9b:8b:
                    e9:38:60:33:f0:2f:15:39:37:71:ae:f9:d8:5f:43:
                    67:65:44:22:19:6b:36:f2:23:ad:49:9b:92:da:09:
                    38:20:c8:a2:78:1b:60:04:30:01:03:78:81:b0:3e:
                    22:75:39:a7:8e:f9:b3:be:bf:b7:7e:be:15:0e:12:
                    28:53:d0:17:3c:32:7c:d7:dc:9e:b4:3a:29:19:e7:
                    78:6c:d4:f1:27:ac:e4:cf:0d:e9:71:6d:5a:e1:ab:
                    7c:ff:f4:ad:d2:1b:4c:aa:9b:50:fc:1e:f2:19:4e:
                    1c:41:08:96:2c:68:4d:61:81:eb:d7:29:e8:5c:0c:
                    63:85:3d:81:21:6b:4e:87:04:59:91:6d:33:54:19:
                    1d:36:cf:93:a0:eb:da:30:6e:ec:6c:5f:c2:db:7f:
                    df:74:d9:a6:15:ab:5f:43:57:5e:4c:ac:be:e3:4a:
                    d9:25:43:47:88:38:7c:7b:24:11:96:39:52:d2:b7:
                    1f:a2:3b:63:7b:24:41:a2:60:65:f7:13:3e:f3:27:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:80:47:9F:63:37:91:4F:19:06:9B:FF:FC:BE:50:2A:ED:B4:DD:CB
            X509v3 Authority Key Identifier:
                keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c8:e3:6a:91:44:e3:dc:70:ac:bc:e5:dd:41:d4:d6:3b:7d:
         cc:6e:63:9e:9c:96:5e:87:91:ac:d9:23:69:85:4a:32:2e:31:
         79:8b:a4:06:60:7c:9c:2c:98:6d:05:63:1f:bb:96:c5:1b:8a:
         1c:37:48:d5:26:15:68:b0:8b:41:38:10:79:65:60:2d:10:2d:
         6f:ff:f2:d7:97:d9:80:e6:17:99:31:c6:c9:01:c2:b9:d8:2e:
         3e:ca:e2:f0:13:8a:a7:a5:26:aa:40:c4:06:2e:2f:1f:18:40:
         98:88:54:9f:c2:b3:1c:e7:c3:19:ea:aa:a6:fe:91:d7:41:21:
         b7:c7:8d:b6:a0:b7:fe:d4:e1:f7:49:5b:c1:f1:4e:49:4f:a5:
         6c:15:ba:1f:c5:c8:be:29:12:5b:23:ee:93:aa:cc:9a:63:7f:
         40:ae:db:4a:b3:f8:0c:35:0e:85:0d:4c:f0:99:cc:13:4e:3d:
         e2:f2:4a:8e:7f:ff:37:e6:d7:8f:58:e0:ce:ab:9b:5c:2a:d0:
         4a:48:66:4f:b6:f8:d9:56:9c:bc:07:57:c0:22:e8:dc:cf:10:
         8f:d0:34:fc:75:02:2a:a6:42:ce:97:b3:93:f5:3a:7f:52:f0:
         b1:33:3b:7b:05:6b:5a:e2:3b:98:b6:d6:2a:58:3e:af:d8:d3:
         34:08:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:02 2026 by rpki-client