Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
File:                     SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json)
Hash identifier:          zSgwanSKWV/t8uPgNsNaeb4CxVXfSXHwrZakX1Y+3IQ=
Subject key identifier:   A2:43:D3:73:33:BA:92:CF:33:0B:19:7A:F4:2F:DF:2F:74:7B:EA:F5
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Certificate issuer:       /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
Manifest number:          56
Signing time:             Thu 03 Sep 2026 08:29:43 +0000
Manifest this update:     Thu 03 Sep 2026 08:29:43 +0000
Manifest next update:     Thu 10 Sep 2026 08:29:43 +0000
Files and hashes:         1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: H4jQ6bS5X17q0nwvA7whBZyYe9iGd1YsEyNtrsKMgQE=)
                          2: 870077D67E9A11F1ACB132C361A30FBC.roa (hash: j/Veg91WVOxBOE2x+CFx84+oTH0wTF8HWi+UAwsfAcw=)
                          3: E86962E47E9A11F1BA87E1CE61A30FBC.roa (hash: r053k+9BngwOs8liZ7NrLuZJcmmTygGFd/pGOUQXUUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
                          rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
        Validity
            Not Before: Sep  3 08:29:43 2026 GMT
            Not After : Sep 10 08:29:43 2026 GMT
        Subject: CN=6a992ff7-f319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:d2:2d:79:b2:d0:a9:8d:e0:31:a7:d1:ca:
                    0a:cb:4e:88:21:b3:91:a5:0b:71:96:32:32:ba:70:
                    5f:3b:ec:eb:7b:20:da:dd:dc:7b:e3:7a:73:f3:14:
                    aa:45:1d:23:fd:ef:77:f4:04:71:e3:b3:9e:78:de:
                    9b:13:5b:c1:e5:b5:a1:40:75:86:31:ef:da:7f:ef:
                    7f:c5:1b:b7:78:d0:0e:a6:32:ec:73:fb:dd:78:be:
                    1a:fe:f9:c2:43:44:cf:68:6a:22:83:66:df:33:1e:
                    01:d7:a4:ea:c2:0a:a4:82:2f:06:ec:32:11:0c:2b:
                    b5:df:36:c2:ff:35:6e:67:9f:c6:b8:3c:94:0c:49:
                    39:71:f7:00:88:92:9a:98:59:fd:51:e5:ce:b0:6f:
                    29:72:3f:c7:80:fa:1f:20:3d:57:18:45:76:7a:c2:
                    e9:4b:ad:7d:42:a1:64:03:90:26:ca:e9:18:ca:f9:
                    b5:cc:d0:c6:71:e7:b3:ce:f9:bc:9c:32:05:fb:32:
                    81:32:6d:d5:03:36:90:0c:75:0c:d5:8c:ab:92:48:
                    42:e2:cb:4b:21:f1:d9:f8:46:6c:fe:64:c3:50:dc:
                    5c:80:94:ba:cd:60:8e:19:90:cc:a6:a3:75:b5:32:
                    b6:98:26:05:b9:2d:db:ff:0a:e2:3b:40:95:5a:1c:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:D3:73:33:BA:92:CF:33:0B:19:7A:F4:2F:DF:2F:74:7B:EA:F5
            X509v3 Authority Key Identifier:
                keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:74:30:08:f9:06:2e:b3:22:8b:c4:f0:de:86:7a:27:3b:fb:
         d9:18:76:f8:92:4d:bb:63:2e:56:4e:70:e5:16:94:21:d1:b3:
         7e:58:c4:a9:28:04:b6:d3:f1:67:50:c5:62:bb:61:b4:cc:ac:
         bf:30:8b:72:90:a8:e7:15:fb:e4:72:83:7e:46:34:c6:a3:a0:
         38:ce:a8:2c:89:73:77:60:b5:04:70:0f:90:0b:76:c8:16:4d:
         ef:25:ff:d2:22:ce:d8:a2:09:0c:a1:0d:08:da:44:10:af:47:
         c1:95:e1:a1:fa:db:88:0f:30:cd:b6:9a:5a:25:03:40:d0:ca:
         a4:56:82:d5:ff:49:36:5c:de:f4:42:b4:75:90:f3:23:bc:de:
         96:33:51:b1:31:51:18:7d:e3:26:b8:c2:73:92:3f:c6:d5:c3:
         ed:04:a0:4e:cc:85:3f:43:76:80:88:57:97:97:af:cc:e2:7f:
         c6:bc:00:9e:04:3a:60:58:eb:51:cf:2e:f4:9f:82:3e:ef:d4:
         92:09:85:21:32:b8:20:52:2a:71:95:e6:cb:dc:5c:cb:35:73:
         7a:e3:11:27:df:6e:fd:63:c6:b8:9f:7c:d8:d0:a2:93:5a:8b:
         c7:ec:76:dc:6a:b9:36:22:2c:7d:e3:f4:c6:56:4a:e5:27:e5:
         c6:5f:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:09:15 2026 by rpki-client