Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File:                     rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier:          Km/7tCVN1nzvHHfLGdPZPpgcdHHoqQSLixr+s7Hn0JA=
Subject key identifier:   C7:62:33:4B:D0:71:98:EB:21:FE:17:4D:13:0D:AF:8C:CC:C8:E1:A8
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer:       /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial:       35B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number:          359A
Signing time:             Sun 20 Sep 2026 14:38:30 +0000
Manifest this update:     Sun 20 Sep 2026 14:38:29 +0000
Manifest next update:     Sun 27 Sep 2026 14:38:29 +0000
Files and hashes:         1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: oJ68NqqfqQstkY9YSpwO+4nzioupKXxhFIDYlDQKZJA=)
                          2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
                          3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
                          rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13752 (0x35b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
        Validity
            Not Before: Sep 20 14:38:29 2026 GMT
            Not After : Sep 27 14:38:29 2026 GMT
        Subject: CN=6aafefe6-297b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:59:a3:6f:97:99:3a:d2:a3:d7:3b:2b:32:
                    6b:b9:5b:a7:23:9e:05:f2:30:2b:d8:7e:6d:8d:71:
                    67:e2:ec:d7:37:ac:80:d7:de:4f:87:dc:17:e6:4f:
                    98:cf:2c:29:75:22:7a:4a:4c:7c:19:47:3f:33:cb:
                    ef:ae:87:70:34:d9:32:c1:90:54:01:41:4f:d7:f8:
                    38:28:91:98:92:28:d0:04:d8:0e:f1:e1:75:e7:19:
                    1c:43:90:88:81:93:69:75:e6:80:6e:33:ca:b1:e0:
                    bc:65:e1:c9:d3:aa:bd:fb:5a:4f:58:f7:c2:3f:2f:
                    cd:51:87:ca:ed:f5:3b:54:52:5d:62:88:01:d4:c9:
                    f5:72:74:c6:3a:de:ce:42:54:e9:7a:98:b9:aa:1e:
                    21:8a:ac:e6:12:78:1e:e2:19:e6:b8:c1:1b:f2:75:
                    c3:c1:ee:7e:02:07:d0:36:10:01:1d:a4:43:a9:e0:
                    96:ee:b8:92:a2:14:a9:d2:f7:b1:b9:a6:51:a1:aa:
                    fc:83:87:07:60:a6:b6:18:58:2a:96:d7:19:4e:22:
                    67:54:c0:ce:9c:26:83:fb:c1:7b:9d:f5:42:38:82:
                    84:84:9b:e5:ac:21:09:73:cb:e6:3e:cc:d8:3d:58:
                    6d:be:c2:0a:98:06:ff:07:04:99:d3:ff:83:04:60:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:33:4B:D0:71:98:EB:21:FE:17:4D:13:0D:AF:8C:CC:C8:E1:A8
            X509v3 Authority Key Identifier:
                keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:2e:3d:9e:cc:f8:66:b2:ad:2b:4c:e4:83:48:be:8b:f8:
         06:1a:ce:80:f2:16:bc:44:75:f8:36:2b:47:0b:e5:bc:bf:38:
         47:4e:04:fd:6b:9e:a5:bc:87:3a:fc:3d:a7:7b:aa:ab:b2:9d:
         9d:44:e6:87:66:3c:22:02:33:f3:ee:0d:dd:f4:28:97:ee:34:
         9a:94:9b:25:40:c8:d5:68:ef:cd:94:da:20:ec:3c:ec:16:79:
         a1:32:39:42:f7:48:b6:29:81:ff:6e:15:5e:fa:fa:24:72:00:
         98:8e:95:f8:05:c3:5b:da:a3:71:4b:f1:4f:30:80:a0:e2:0d:
         dd:53:4e:73:8d:cf:b4:bd:db:28:8b:95:5d:f0:b8:f8:59:b8:
         29:30:59:65:cf:f1:61:33:b5:73:38:38:47:b5:0a:1c:25:1e:
         d1:bb:c9:97:78:e8:05:ca:3a:b8:76:85:06:dd:72:0e:32:52:
         83:6f:ac:68:5d:98:ad:41:75:f0:a8:ed:b6:d5:3f:cb:19:46:
         72:73:f1:47:dc:c8:53:77:3d:05:56:73:94:0d:4c:c3:ec:c6:
         ae:ac:b5:29:5b:2e:dc:66:73:62:f6:5b:b6:d3:9b:e2:24:8b:
         2d:d2:e1:2c:c9:c7:f1:26:1c:db:b2:c3:26:a0:40:a8:86:d8:
         4c:f6:f1:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD
MkFGMkM2RjAwHhcNMjYwOTIwMTQzODI5WhcNMjYwOTI3MTQzODI5WjAYMRYwFAYD
VQQDEw02YWFmZWZlNi0yOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUJZo2+XmTrSo9c7KzJruVunI54F8jAr2H5tjXFn4uzXN6yA195Ph9wX5k+Y
zywpdSJ6Skx8GUc/M8vvrodwNNkywZBUAUFP1/g4KJGYkijQBNgO8eF15xkcQ5CI
gZNpdeaAbjPKseC8ZeHJ06q9+1pPWPfCPy/NUYfK7fU7VFJdYogB1Mn1cnTGOt7O
QlTpepi5qh4hiqzmEnge4hnmuMEb8nXDwe5+AgfQNhABHaRDqeCW7riSohSp0vex
uaZRoar8g4cHYKa2GFgqltcZTiJnVMDOnCaD+8F7nfVCOIKEhJvlrCEJc8vmPszY
PVhtvsIKmAb/BwSZ0/+DBGC2TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdiM0vQ
cZjrIf4XTRMNr4zMyOGoMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE
OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR
YWRxNDczcFhhcUxDcnl4dkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqawuPZ7M+GayrStM5INIvov4BhrOgPIWvER1+DYrRwvlvL84R04E/WuepbyH
Ovw9p3uqq7KdnUTmh2Y8IgIz8+4N3fQol+40mpSbJUDI1WjvzZTaIOw87BZ5oTI5
QvdItimB/24VXvr6JHIAmI6V+AXDW9qjcUvxTzCAoOIN3VNOc43PtL3bKIuVXfC4
+Fm4KTBZZc/xYTO1czg4R7UKHCUe0bvJl3joBco6uHaFBt1yDjJSg2+saF2YrUF1
8KjtttU/yxlGcnPxR9zIU3c9BVZzlA1Mw+zGrqy1KVsu3GZzYvZbttOb4iSLLdLh
LMnH8SYc27LDJqBAqIbYTPbxnw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:26:17 2026 by rpki-client