Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          Mhf+Fb4P0VotYRAuI6/ZwiLEoVrc+6JSnFQgQldlldw=
Subject key identifier:   1B:2E:9D:E3:0B:00:7A:5E:38:F4:D9:30:63:B8:FB:4E:96:20:79:B1
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          78
Signing time:             Sat 05 Sep 2026 07:31:03 +0000
Manifest this update:     Sat 05 Sep 2026 07:31:02 +0000
Manifest next update:     Sat 12 Sep 2026 07:31:02 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: 27wnvEP8AoBAU0lxdlOQHBII6zXnYITVsEQhvCczUM8=)
                          2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 07:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Sep  5 07:31:02 2026 GMT
            Not After : Sep 12 07:31:02 2026 GMT
        Subject: CN=6a9bc537-678d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:f1:26:26:9a:70:97:e8:4b:f8:fe:69:ea:
                    63:ab:23:81:4e:e3:06:a3:ea:d1:ed:82:12:98:5d:
                    32:e9:d0:1d:83:6c:47:d7:42:17:53:ea:74:7e:ac:
                    9b:38:1c:f1:c9:22:2d:1a:6f:fb:f1:88:63:d6:4e:
                    21:6e:0c:9d:fd:65:09:56:c7:72:92:1b:a8:37:b0:
                    95:93:42:9b:33:18:4e:0c:69:ae:ce:2d:d5:ca:50:
                    9e:8a:82:f1:cd:e2:62:cc:05:30:ca:83:ee:10:79:
                    fa:cc:e8:a5:5d:3c:65:41:1c:cc:bb:00:6d:4c:b2:
                    1b:a1:35:cb:b6:60:c8:0e:16:5a:a9:3d:2b:78:d6:
                    0f:4c:cc:c7:14:e7:a1:8f:f0:f7:ed:90:b4:1a:1d:
                    0c:2f:82:01:7c:c4:fb:07:03:0c:76:1d:1b:98:c6:
                    b7:62:08:84:bf:3f:49:2c:e0:06:73:d9:80:f1:0e:
                    11:cf:e4:03:13:63:cb:f1:3b:e9:06:46:93:c6:14:
                    3b:4e:08:4a:f5:e8:21:4f:94:06:d4:d5:df:c7:68:
                    5f:e0:64:38:38:71:a7:b0:3a:79:3f:8a:3d:7b:e0:
                    e8:26:18:91:d0:83:f1:bd:dc:b5:ec:ea:15:5f:65:
                    7d:aa:ce:c7:19:78:32:87:5a:2f:d4:14:48:e3:71:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2E:9D:E3:0B:00:7A:5E:38:F4:D9:30:63:B8:FB:4E:96:20:79:B1
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:03:18:49:e7:5b:03:7b:7a:60:94:99:82:7f:6b:82:d7:
         54:ff:89:16:b6:74:6c:ed:01:bf:f5:68:c1:f9:59:f6:5d:fa:
         41:79:5d:6a:96:b6:f3:ed:25:72:f1:9f:3e:f5:86:f7:c3:db:
         58:72:30:2f:b0:d5:bb:e0:da:67:06:b7:7a:51:ed:64:c5:16:
         9e:08:8c:8e:48:93:87:7d:8c:60:18:87:23:dd:2c:20:99:7b:
         87:10:3d:cd:d6:c4:97:69:1d:cf:f1:4a:4c:10:78:90:d9:15:
         b2:49:ce:75:21:4f:a2:ee:8f:8a:8a:80:f3:7c:bb:63:ba:b6:
         ca:e8:c0:34:db:f8:2b:64:75:15:a9:db:c5:85:bc:3b:3a:04:
         67:ba:28:cb:8e:58:ba:dc:fe:45:19:59:60:2e:b2:fa:ad:a4:
         82:b1:45:42:49:83:88:17:60:a4:e7:2e:95:3f:fe:35:43:d8:
         6a:d6:03:2d:d3:5f:0e:61:05:47:2e:2a:14:6a:81:7a:7d:4e:
         4f:02:6d:5a:f0:7f:d7:79:e7:b7:67:a3:b8:09:f7:85:2e:3f:
         4c:56:26:ff:37:9b:38:0f:51:da:5a:6f:55:fd:62:e5:95:1f:
         58:6e:ce:fe:e2:1a:7f:4d:82:32:73:07:e1:0a:8e:db:e9:a5:
         2a:c1:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:05:43 2026 by rpki-client