Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          PqlVv0iHlxLnA6AVkPiBPrPSGp3fka/u7bBYNvEplic=
Subject key identifier:   DE:23:F5:74:4E:42:34:39:25:81:8A:24:D1:0D:37:31:6D:59:4C:7E
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          EC
Signing time:             Fri 17 Apr 2026 06:10:24 +0000
Manifest this update:     Fri 17 Apr 2026 06:10:24 +0000
Manifest next update:     Fri 24 Apr 2026 06:10:24 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: vLpjnYmYxsXNHjQVPeY7SYDvbL2aKWKsbNMzh+7hIQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Apr 17 06:10:24 2026 GMT
            Not After : Apr 24 06:10:24 2026 GMT
        Subject: CN=69e1ced0-d173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:04:77:d3:57:89:54:55:7e:2c:8a:27:d7:
                    4a:e1:a0:cd:d1:2d:2f:c1:8b:e2:13:3c:3d:9e:9e:
                    5b:c8:e4:7c:c0:e0:fe:86:18:9e:92:fa:dc:33:0e:
                    d7:be:60:a1:fc:64:82:9e:f1:c2:67:0f:17:8f:7a:
                    38:af:23:00:24:5c:69:1f:b5:82:3f:78:04:d3:b1:
                    70:85:e7:ee:5a:bf:87:c9:be:13:ce:3a:db:58:42:
                    a5:4d:69:e3:b8:04:40:f0:54:ce:2b:d3:b4:68:bc:
                    96:86:b2:08:2d:45:e2:73:cb:51:bd:25:ef:d9:c1:
                    a4:93:da:d3:ba:89:dd:d9:c7:ec:d6:94:95:2a:da:
                    8d:3e:71:a4:c8:9e:c0:e0:d8:71:12:5a:54:e2:51:
                    d1:12:d3:b7:f1:70:f6:07:fb:52:1d:d1:f1:e8:2c:
                    30:cf:9b:10:f5:ad:81:7d:3f:35:2c:07:3e:ad:7e:
                    ef:6c:8b:db:08:3a:74:f3:95:db:54:c5:b7:ff:81:
                    f4:cf:cc:a2:96:5c:82:91:c3:d8:43:6e:cc:86:a8:
                    9b:38:20:3e:76:d7:f5:69:2b:2d:55:d5:c9:b1:a3:
                    7f:ca:00:00:ed:42:91:29:6e:75:b1:b4:a8:9f:aa:
                    91:a3:c4:9e:1b:fc:57:e2:3f:df:05:ff:68:97:53:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:F5:74:4E:42:34:39:25:81:8A:24:D1:0D:37:31:6D:59:4C:7E
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:7d:b4:ae:5b:8a:ec:c2:b4:0b:fd:b4:cf:8c:cd:52:9b:
         85:a5:c9:b9:3d:82:12:8c:a1:c9:46:7c:a0:08:d0:73:14:bb:
         f5:dd:45:ce:51:dc:dc:3d:8f:09:8c:0a:e9:e0:7c:7a:49:7e:
         7f:e1:c3:f9:18:c0:a2:e6:5c:c6:82:ed:9a:ca:ff:2d:19:9a:
         ce:fc:69:72:18:4c:17:04:d4:71:5a:3e:f8:99:e4:35:3e:d7:
         f2:0d:f1:15:5b:a6:fc:d5:97:80:8e:2c:15:b9:14:97:95:c1:
         0d:5c:52:1f:f4:15:92:ef:9c:a6:57:06:5a:38:06:b9:e8:bc:
         a1:8c:3c:cc:62:f0:61:e9:c7:2c:2b:51:1a:d1:d1:59:26:77:
         2a:fd:ff:db:d5:c6:42:e3:42:33:16:e6:cd:49:c5:27:fc:56:
         98:f0:b0:cd:14:81:96:78:9b:a8:b3:c9:cf:79:79:5e:5f:1c:
         7a:34:78:0a:5f:73:eb:5c:e5:1b:79:f5:2b:f7:8d:cf:c0:cd:
         be:9b:db:26:15:b2:f4:4e:c8:de:0e:85:50:c0:57:8f:f0:2d:
         2f:0d:17:55:10:19:4f:f7:98:80:5a:5f:90:fd:e6:c3:7c:d4:
         b2:ac:e9:fe:ad:69:d0:bd:a4:be:c6:ef:5a:65:8f:ff:10:ee:
         f6:da:bd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:43 2026 by rpki-client