Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File:                     rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier:          B6SyiWENLGYxQHADf+/vTuxf/Uhh0KegX2srzw3fRVs=
Subject key identifier:   E7:EC:98:62:B7:76:F0:9E:4D:98:91:7A:F4:5F:65:61:5E:4B:F3:23
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer:       /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number:          3567
Signing time:             Fri 12 Jun 2026 14:39:17 +0000
Manifest this update:     Fri 12 Jun 2026 14:39:17 +0000
Manifest next update:     Fri 19 Jun 2026 14:39:17 +0000
Files and hashes:         1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: sQu2lQ1dWKXgFRpwSdU4hlR3Y5Uucm4IlYd0MBNW8+4=)
                          2: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
                          3: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
                          rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
        Validity
            Not Before: Jun 12 14:39:17 2026 GMT
            Not After : Jun 19 14:39:17 2026 GMT
        Subject: CN=6a2c1a15-6f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:3d:e5:a1:46:c8:74:0e:37:05:96:7c:0f:
                    eb:ee:4e:ea:bf:1f:30:a0:fa:04:fa:52:df:f5:7f:
                    7f:4d:ff:33:3b:94:27:49:48:9f:9a:83:82:33:fd:
                    32:3e:b8:fa:db:2f:81:58:d2:c3:8a:ad:ea:0b:44:
                    98:1c:9a:4b:9e:6f:f1:24:e7:c7:90:4b:e7:75:7c:
                    0b:94:d5:fb:f8:b7:6b:5e:13:29:ad:6a:50:80:cf:
                    cf:a4:c7:b9:6c:b9:a0:f2:2a:a3:9e:f6:82:bf:82:
                    54:e3:2f:f4:a0:d8:01:f7:dc:ac:3f:19:80:35:d4:
                    6d:ea:3b:41:86:c9:20:65:7b:92:e5:4d:96:fe:7e:
                    79:bf:d3:35:81:fa:88:48:ec:dd:d3:73:73:48:ee:
                    7d:b3:bf:4a:47:0e:8e:08:99:4f:bd:b7:05:a8:f8:
                    a1:5b:08:c1:1b:69:f2:17:20:3e:a6:e6:0a:c1:b0:
                    4f:bb:e5:c5:da:2b:b4:30:cc:04:f2:8f:58:de:74:
                    fd:52:12:ce:80:f4:f9:9c:6b:e1:5b:be:32:ef:1d:
                    54:2d:fc:1e:8a:1b:05:44:32:0f:0f:47:0d:76:96:
                    c2:be:df:bf:6d:62:27:03:c9:a1:a3:6d:0a:10:75:
                    d3:c1:c3:8c:7a:b2:50:f9:d0:07:68:95:a5:b8:f2:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:98:62:B7:76:F0:9E:4D:98:91:7A:F4:5F:65:61:5E:4B:F3:23
            X509v3 Authority Key Identifier:
                keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:26:ac:74:4b:62:6a:3b:de:7f:22:7d:a7:4c:77:a8:f8:89:
         a4:ac:52:21:d9:73:7e:e5:ce:e6:1b:03:32:68:90:5e:dd:51:
         16:97:cd:cb:45:1a:b5:30:1a:0c:3a:37:fd:37:cf:10:8b:a0:
         d9:43:a3:67:76:3b:07:5a:42:20:0c:4c:fa:8d:25:44:f0:1c:
         fc:ca:c6:7c:bb:78:d0:e3:a5:0f:c4:d2:64:58:88:6d:15:d3:
         fe:f8:b9:b8:74:ab:5b:fe:03:d9:a0:f0:d5:3b:66:26:a7:a6:
         4f:f3:15:3f:2d:7b:94:45:4a:75:f4:4e:3c:34:7b:27:ba:6a:
         e4:0a:ad:0b:bd:a9:6e:66:be:bf:df:2b:0b:dc:2c:82:28:e4:
         d6:38:6b:3e:ff:d9:12:35:2e:70:19:e6:c0:7b:70:57:ea:e2:
         42:0e:eb:8b:65:1b:73:b7:d9:80:84:c2:7d:ae:1a:c0:bf:a7:
         b0:02:05:f1:59:44:44:de:4a:73:c5:fa:a6:7d:22:ab:99:cc:
         23:cd:fb:ef:c3:ff:dd:e9:0f:62:23:f5:85:c7:ae:a1:18:95:
         8e:bd:51:55:50:e7:a8:5a:50:9a:4e:4b:7e:78:97:c1:95:a2:
         3e:23:ca:f2:64:87:f4:c6:94:44:f7:39:7f:56:71:45:35:07:
         69:f9:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:14 2026 by rpki-client