Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          brRX9Y7KJmUR5yeJTmGQqz0AgfE0Qzi8vwtsHP/wlQE=
Subject key identifier:   B8:88:67:B8:09:CF:B7:33:2A:4A:0D:56:1C:C0:39:E1:14:70:E5:F0
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          011E
Signing time:             Mon 27 Jul 2026 07:52:27 +0000
Manifest this update:     Mon 27 Jul 2026 07:52:26 +0000
Manifest next update:     Mon 03 Aug 2026 07:52:26 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: dyM5ziLcgUhkMy2Z+mh/ho+Lb3N38uM2N4hl4XO3GIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Jul 27 07:52:26 2026 GMT
            Not After : Aug  3 07:52:26 2026 GMT
        Subject: CN=6a670e3a-86a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:0d:90:a4:ff:f0:76:18:aa:4e:0e:29:36:
                    db:49:1d:1e:a6:bd:8d:cd:e7:66:35:59:10:24:8d:
                    eb:1d:f3:40:ab:96:e0:cc:8b:7f:51:47:c1:5b:28:
                    5c:07:e6:04:d4:c2:21:f1:fd:e1:e0:7d:ff:08:f4:
                    b8:fa:07:9e:a8:9b:8b:c0:37:02:a6:67:92:a7:37:
                    c4:44:00:68:41:ff:a2:3d:d0:01:1b:68:03:8c:1b:
                    72:ae:f1:1f:a8:c8:1f:b6:d0:78:0e:42:87:c5:82:
                    bd:8b:d1:f5:34:9f:3f:14:48:cf:b4:ee:70:50:58:
                    55:d3:54:62:f0:be:10:39:15:2d:03:4d:5e:66:90:
                    49:e3:2c:5a:e1:0f:cc:04:3d:7b:4c:7c:98:96:9e:
                    07:1c:04:9c:60:ab:d4:e0:76:b5:c9:70:16:f5:ef:
                    ad:cd:82:78:49:f1:b7:e2:e8:62:8d:e1:2b:63:f9:
                    dc:07:2e:8b:c9:21:12:a7:2b:d7:ab:f4:78:05:1a:
                    33:c9:93:a7:29:e2:e4:9d:51:95:e2:80:c7:3f:a3:
                    26:ec:79:14:9e:04:f2:88:28:7d:f5:d6:a1:92:2a:
                    ad:55:56:5c:60:f4:41:62:c5:d8:a5:7c:82:f4:33:
                    fc:1b:74:78:7e:8a:73:60:33:51:cb:ba:30:51:33:
                    f1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:88:67:B8:09:CF:B7:33:2A:4A:0D:56:1C:C0:39:E1:14:70:E5:F0
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:38:3f:a9:84:61:05:fc:7a:2b:09:a8:96:94:f2:76:ed:
         e2:2f:39:b9:bb:97:40:f8:ad:73:78:83:42:bc:62:15:5e:23:
         19:ac:19:0b:a8:fd:70:1b:e7:c6:63:ef:8e:7c:09:b7:c5:c1:
         7b:05:e6:ec:25:46:45:38:3f:02:62:cc:b4:65:68:83:e1:be:
         d0:88:e0:6d:2a:4f:95:72:01:82:7f:70:4b:dc:3d:0a:0d:a1:
         91:56:9b:d4:d5:87:31:bf:1f:33:56:b8:fa:1e:f7:85:87:bf:
         36:ce:ad:f9:c0:7b:61:82:30:c7:f8:a2:db:2d:05:0a:84:f6:
         0a:17:6f:39:09:6c:d3:3c:70:de:90:fb:f2:f2:07:2a:48:bc:
         d8:60:5d:78:6b:fd:f7:b6:58:af:61:dd:e5:d9:c6:5f:0d:37:
         e3:bf:b0:c7:8e:20:a8:12:8b:ca:1a:fa:3e:20:df:af:6b:39:
         00:33:c4:da:ce:a0:6e:7e:4f:0a:57:37:e9:6d:6f:c1:df:1e:
         86:06:d9:5e:0f:a4:14:ce:04:a1:a3:8a:ed:0a:72:cc:0c:24:
         d3:6d:05:17:5f:44:e2:9e:00:30:cd:6d:c5:f8:bd:99:a2:1c:
         36:fd:bb:94:76:1a:24:1f:42:4e:2a:43:58:75:78:42:79:ce:
         ef:3d:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:19 2026 by rpki-client