Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File:                     pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier:          jH+JtipVEdB2zIQfr4bcpkApe7bpOyDwVksGBzTC3r4=
Subject key identifier:   DB:50:00:1E:24:24:AD:DB:3F:57:EE:A5:23:DE:FC:69:DE:57:75:0F
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer:       /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number:          43
Signing time:             Mon 27 Jul 2026 10:46:12 +0000
Manifest this update:     Mon 27 Jul 2026 10:46:12 +0000
Manifest next update:     Mon 03 Aug 2026 10:46:12 +0000
Files and hashes:         1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: z5Y2k7/rUkV5eGEs7CTt5q/6hCPQL4tmRceWZOyNB14=)
                          2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
                          rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
        Validity
            Not Before: Jul 27 10:46:12 2026 GMT
            Not After : Aug  3 10:46:12 2026 GMT
        Subject: CN=6a6736f4-0369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:06:8c:a8:5f:7a:e3:df:33:c2:b3:d1:fb:
                    fb:74:09:66:7a:3b:df:1c:2f:57:58:70:df:55:bb:
                    41:94:2e:ba:85:51:bb:1d:ad:50:dd:ec:7e:02:03:
                    0c:f3:7a:fa:e1:9c:52:1e:65:29:09:87:64:43:de:
                    85:b9:f1:4f:cc:ca:89:90:15:4e:07:cd:53:33:a9:
                    af:c3:8a:0e:0c:ba:0c:e1:37:9a:38:96:94:8b:13:
                    c0:f7:de:b5:5f:0f:19:c1:1b:17:84:5a:c4:fc:fa:
                    f9:c6:75:75:89:9d:f8:8b:56:9e:ad:86:f3:52:ee:
                    a8:40:02:82:82:cb:27:99:99:03:ad:64:16:11:1e:
                    48:f3:77:c0:5b:48:09:db:03:ed:61:5e:7a:a0:2b:
                    75:0a:ff:89:39:32:30:0b:28:d3:d8:93:8a:30:86:
                    e9:82:fb:ee:da:e5:04:6e:05:9e:49:8d:2d:23:f5:
                    5b:c4:0c:45:e0:93:a2:55:82:8c:33:d7:5a:42:e5:
                    e3:9d:79:4e:1d:cb:ff:5e:1d:ae:2e:9c:3e:ce:f9:
                    8d:e8:e0:41:b4:95:c9:09:2c:a5:7d:27:0f:5c:69:
                    78:cc:de:9a:3c:05:63:f9:12:d1:44:71:a5:95:ba:
                    74:60:5c:0c:45:a3:bd:a5:4c:bc:61:5e:88:29:64:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:50:00:1E:24:24:AD:DB:3F:57:EE:A5:23:DE:FC:69:DE:57:75:0F
            X509v3 Authority Key Identifier:
                keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:83:cb:ac:61:5a:41:07:20:36:2c:c2:33:29:64:09:88:e0:
         f1:e4:ff:f3:47:19:5d:f9:26:d8:2c:65:75:b2:07:7f:10:03:
         8e:f0:98:b1:1a:a0:c0:1f:21:92:52:ba:af:ed:30:fc:f4:84:
         3b:01:57:ff:81:3b:41:35:3e:2a:ae:8a:7c:64:7c:fa:17:a7:
         06:3b:fd:3e:71:14:24:f7:bb:34:ee:9a:f0:34:dc:39:53:b1:
         62:66:77:94:82:fd:fb:4f:68:a8:18:ae:d9:91:f7:04:a6:6d:
         fd:1f:29:5c:98:f5:16:95:de:23:5c:9a:fb:44:89:b6:16:cf:
         c3:93:3a:da:16:1c:ba:c6:5b:80:95:09:de:af:08:b7:78:5f:
         ec:27:c1:18:1b:19:da:53:2b:4d:2b:67:49:7b:39:cc:de:d9:
         61:23:e4:dc:2a:03:08:51:67:6b:02:15:89:4b:51:94:ab:a8:
         07:9e:42:50:65:c2:4b:46:8f:a8:16:9a:ea:a9:a7:f3:60:a0:
         d5:94:d7:eb:51:d4:a4:ed:16:4e:c7:3e:c8:7e:ee:8a:ba:ef:
         e3:75:fb:84:95:cc:b2:c8:36:51:d5:1d:fe:76:6b:cc:57:36:
         68:c4:84:53:34:2e:05:e9:a1:d6:f0:f5:ec:04:85:e2:df:d1:
         e1:3c:90:f9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NENCRTExMC8GA1UEBRMoQTYzMzNFODUxNjE5OTdCNzMwQjQ2ODdGMDVFOTY2MTkz
RjZCQTFBRjAeFw0yNjA3MjcxMDQ2MTJaFw0yNjA4MDMxMDQ2MTJaMBgxFjAUBgNV
BAMTDTZhNjczNmY0LTAzNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnawaMqF96498zwrPR+/t0CWZ6O98cL1dYcN9Vu0GULrqFUbsdrVDd7H4CAwzz
evrhnFIeZSkJh2RD3oW58U/MyomQFU4HzVMzqa/Dig4MugzhN5o4lpSLE8D33rVf
DxnBGxeEWsT8+vnGdXWJnfiLVp6thvNS7qhAAoKCyyeZmQOtZBYRHkjzd8BbSAnb
A+1hXnqgK3UK/4k5MjALKNPYk4owhumC++7a5QRuBZ5JjS0j9VvEDEXgk6JVgowz
11pC5eOdeU4dy/9eHa4unD7O+Y3o4EG0lckJLKV9Jw9caXjM3po8BWP5EtFEcaWV
unRgXAxFo72lTLxhXogpZO3HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU21AAHiQk
rds/V+6lI978ad5XdQ8wHwYDVR0jBBgwFoAUpjM+hRYZl7cwtGh/BelmGT9roa8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0Q0JFL0IzQkYzNTQyMjQ1
RDExRjFBQjEyNUY5QUM0ODMzNzczL3BqTS1oUllabDdjd3RHaF9CZWxtR1Q5cm9h
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcGpNLWhSWVpsN2N3dEdoX0JlbG1HVDlyb2E4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0
Q0JFL0IzQkYzNTQyMjQ1RDExRjFBQjEyNUY5QUM0ODMzNzczL3BqTS1oUllabDdj
d3RHaF9CZWxtR1Q5cm9hOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCg8usYVpBByA2LMIzKWQJiODx5P/zRxld+SbYLGV1sgd/EAOO8JixGqDAHyGS
Urqv7TD89IQ7AVf/gTtBNT4qrop8ZHz6F6cGO/0+cRQk97s07prwNNw5U7FiZneU
gv37T2ioGK7ZkfcEpm39HylcmPUWld4jXJr7RIm2Fs/DkzraFhy6xluAlQnerwi3
eF/sJ8EYGxnaUytNK2dJeznM3tlhI+TcKgMIUWdrAhWJS1GUq6gHnkJQZcJLRo+o
FprqqafzYKDVlNfrUdSk7RZOxz7Ifu6Kuu/jdfuElcyyyDZR1R3+dmvMVzZoxIRT
NC4F6aHW8PXsBIXi39HhPJD5
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:38 2026 by rpki-client