Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
File:                     SXhNVZU957jzy_LUUeMSM8xzPUE.mft (raw, json)
Hash identifier:          S9P/wbLO/kGrBh+N62b/dWpIRKfoO94HEh+46CLb5kU=
Subject key identifier:   DD:6C:B9:BE:A0:A5:F5:B5:FF:52:2F:07:2F:91:35:7A:1D:C2:2D:B3
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
Manifest number:          93
Signing time:             Thu 29 Oct 2026 08:14:47 +0000
Manifest this update:     Thu 29 Oct 2026 08:14:46 +0000
Manifest next update:     Thu 05 Nov 2026 08:14:46 +0000
Files and hashes:         1: SXhNVZU957jzy_LUUeMSM8xzPUE.crl (hash: 380xfvAVEBMTKPBGsC8OIjPl2zSpNvZ6yVEuYSoIU48=)
                          2: 651FCE60FAAA11F098D3B5455A6F56BC.roa (hash: iAy8i/+IUXvALHt+lbXZ4grdkeaIoac6VrJzukFo08s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 08:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Oct 29 08:14:46 2026 GMT
            Not After : Nov  5 08:14:46 2026 GMT
        Subject: CN=6ae30077-e3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:4a:df:8b:41:57:53:06:31:4d:51:6b:32:
                    7a:65:ca:3e:6a:9a:dd:9d:4c:97:53:87:d4:95:8a:
                    bd:e7:83:2b:4a:61:60:3a:b8:70:18:8a:48:4b:cf:
                    09:84:07:3a:d2:53:2a:ab:4f:1b:31:b3:81:fd:cb:
                    29:42:fd:de:0e:5e:59:a1:0d:77:ea:19:bc:6f:cd:
                    29:b9:93:e1:27:a7:32:bb:10:4b:ae:2c:31:47:fb:
                    08:a1:eb:a5:27:0a:45:90:75:74:e3:09:ee:88:55:
                    10:ed:79:b4:90:ee:96:39:da:1d:98:7a:62:25:77:
                    59:28:4b:c3:35:b2:53:42:d0:c7:9d:92:3b:4e:c8:
                    fa:be:98:c1:1d:c2:a4:14:48:20:dc:0d:a9:0a:71:
                    5b:c4:bd:8f:7d:23:8f:c6:0d:07:d9:4b:af:09:f4:
                    f5:a4:91:52:0b:53:25:0e:3a:21:24:05:8e:97:b7:
                    b1:92:f0:47:98:5f:3f:fa:ef:ab:87:fa:1b:c2:a3:
                    5f:b0:c5:a7:d6:96:a0:66:70:0b:47:dd:3a:0c:4f:
                    13:e9:f0:0f:88:18:b3:50:28:60:aa:9c:2a:0b:9f:
                    5c:53:3c:f4:d3:14:ad:a4:fd:59:70:15:71:87:2b:
                    71:6e:29:76:af:89:2b:84:62:71:6e:19:e8:f9:fe:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6C:B9:BE:A0:A5:F5:B5:FF:52:2F:07:2F:91:35:7A:1D:C2:2D:B3
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:80:ba:02:e8:fa:75:e3:e9:ea:79:5b:41:76:fc:fb:1e:5f:
         88:3d:ba:ed:36:8c:4d:b5:b8:51:89:9c:50:6e:32:66:56:da:
         7c:ee:fd:b6:cc:07:32:0f:4c:b5:ce:fa:c8:1e:62:12:18:91:
         5e:f4:1e:2f:90:15:32:e4:b4:c4:89:f7:5b:9a:85:94:5a:69:
         02:30:d9:15:f6:ec:31:0e:1a:89:b6:cd:95:11:35:35:d0:b5:
         ea:bb:d4:a8:db:10:ae:0e:7d:ae:41:4d:61:38:3f:4d:ba:43:
         96:1c:1e:a6:55:c0:c2:9a:11:59:09:64:9b:0a:31:6b:c7:30:
         ee:55:80:17:80:57:9b:e4:fa:30:2c:3a:bb:b6:48:ba:d4:4d:
         39:cf:67:21:74:c5:5a:c4:99:22:fd:ab:23:06:90:7f:20:9a:
         0a:df:96:bd:c1:8a:ca:34:81:57:6b:27:fd:1d:b0:0c:7b:9c:
         73:0b:69:b2:e6:45:b2:da:c9:5c:0e:fb:0b:37:bd:1c:b5:f6:
         6d:d5:0d:6c:4b:7c:30:f7:f7:10:9e:5a:9b:6f:b3:40:34:01:
         d3:98:1d:91:73:f9:84:5a:87:45:a9:1b:9e:3f:72:1b:93:39:
         02:ab:87:4d:00:fa:4e:5b:55:f7:d1:21:01:7c:36:54:9f:91:
         d9:6d:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:51 2026 by rpki-client