Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
File:                     pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json)
Hash identifier:          OxTfKFqftd5JT4Jqkt1Da0P7/mHKQsIa3wbbExJfAFw=
Subject key identifier:   1B:84:8B:A7:17:39:23:3D:AA:9B:A3:CC:98:CF:41:51:51:B6:1D:41
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Certificate issuer:       /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial:       358F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
Manifest number:          3569
Signing time:             Wed 22 Jul 2026 15:15:58 +0000
Manifest this update:     Wed 22 Jul 2026 15:15:57 +0000
Manifest next update:     Wed 29 Jul 2026 15:15:57 +0000
Files and hashes:         1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: hGdfuP0kIUk/TnkPdpeD9lS/e9A1jDHSXn0q1krYzeA=)
                          2: 81CE23A6794C11F1BC374DFC78A30FBC.roa (hash: hd0r2prWlA4+0LF9b/xFRJOUyttYhz792UHJpUj+rF4=)
                          3: 18DC10026A6911F18287CF148C47A888.roa (hash: OCkrDay8zjth0V1lG/kZd/C6BIueT/ReUwbtLOpeoAg=)
                          4: 1A1E4A7A6A6911F18287CF148C47A888.roa (hash: PFvhmpVV6scs/whQYid+4y3ffoZY6BXEcRXZF/STKOc=)
                          5: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=)
                          6: 1998442A6A6911F18287CF148C47A888.roa (hash: M/p8XcwCACjksBG0lPH9EKkwR4b9TAusIscrzIwTeTY=)
                          7: ADC4AF7A794C11F183C8766D79A30FBC.roa (hash: REZG1hbCbWcLjdEWLIy80wtl+wdmwwM8/vxZUIlggVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
                          rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13711 (0x358f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
        Validity
            Not Before: Jul 22 15:15:57 2026 GMT
            Not After : Jul 29 15:15:57 2026 GMT
        Subject: CN=6a60dead-18b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:05:c9:36:18:94:70:1d:f9:f1:da:6a:5f:
                    2b:92:a6:a6:94:c8:69:77:4e:f9:23:7b:70:6a:db:
                    bc:57:e2:23:66:4a:f0:0a:fa:25:b6:bd:5f:b9:fa:
                    c2:f8:71:4b:6b:cb:db:75:d1:e7:55:be:90:a8:b8:
                    3d:8b:c9:a3:c0:50:77:b9:b0:88:ee:7c:18:6e:df:
                    9a:38:99:c5:3a:b0:32:ed:ee:91:ec:dc:29:85:6d:
                    67:a5:8c:7c:ef:fb:7f:b1:14:53:bd:af:f7:7a:3a:
                    d2:12:51:e9:b8:46:d9:cd:e9:28:f2:c3:9a:70:47:
                    bb:4c:a1:54:e0:d8:93:ae:dd:b0:10:c2:b5:3b:2e:
                    95:f9:89:a8:e0:fc:11:6e:b0:35:f9:b6:91:b1:9c:
                    44:6a:25:58:1b:f2:e2:9c:30:51:59:45:4a:a7:e2:
                    ed:55:19:ae:96:8d:52:42:d0:4e:10:aa:4a:98:56:
                    c2:20:13:d1:1d:21:72:39:fd:5d:96:ca:dc:0d:59:
                    93:c1:95:c5:45:48:98:55:4c:f9:2c:9c:cd:6f:2d:
                    08:5e:90:c2:dc:b5:75:e5:93:23:b0:46:25:ed:ee:
                    43:43:90:aa:a1:0f:ad:2c:2c:0e:3e:31:93:cb:03:
                    34:99:6f:b5:bc:5f:f5:fc:f2:e7:24:96:bb:51:3a:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:8B:A7:17:39:23:3D:AA:9B:A3:CC:98:CF:41:51:51:B6:1D:41
            X509v3 Authority Key Identifier:
                keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c3:59:73:d8:c3:b2:9e:e0:51:73:19:0b:ba:54:20:54:73:
         de:9e:ec:93:f5:0a:28:8a:71:85:09:f5:2b:9f:2d:9b:06:bf:
         64:8e:75:f6:6e:f1:63:38:f1:bd:7d:5b:78:22:35:74:ac:46:
         e7:d7:d4:03:79:4c:bf:3a:e5:92:4a:9c:45:74:fd:cd:3d:8d:
         16:88:9c:8e:3c:ae:41:4b:30:86:94:24:3d:e7:fa:52:d4:9b:
         5d:84:22:df:65:f1:34:b5:7e:2e:6c:f3:7f:f7:c7:9b:5d:70:
         da:64:e0:e1:f3:9b:b8:6a:4e:89:a6:dd:49:d4:7b:91:44:89:
         cb:06:64:8a:fc:96:10:37:bc:23:1d:0b:ac:90:66:0f:9a:df:
         3e:ea:af:97:60:c9:5a:b9:83:2a:45:98:eb:0a:14:71:0f:af:
         90:5a:a5:b9:ab:bd:45:21:ec:07:13:e1:07:47:bb:22:d6:a5:
         6a:57:b2:de:4a:b2:e2:b2:d2:32:57:26:79:41:88:50:17:87:
         c8:54:da:98:64:86:2d:0c:f1:c5:76:24:ec:ad:0d:98:66:9c:
         f7:ed:3d:9f:90:c3:78:71:a5:50:1c:fa:55:6b:8d:97:a1:cb:
         6c:3b:eb:31:9e:c5:fb:99:79:38:e9:9d:43:8d:79:36:a3:85:
         a1:5f:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:15 2026 by rpki-client