Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File:                     pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier:          pd5uRVYi9gz6BKnOcePbme7Ja6FOFM19SGXDYcBFA88=
Subject key identifier:   E3:F8:0C:AC:3B:52:5A:15:C8:50:48:D2:5E:40:6A:AE:48:D2:9A:88
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer:       /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number:          05
Signing time:             Wed 25 Mar 2026 08:23:18 +0000
Manifest this update:     Wed 25 Mar 2026 08:23:18 +0000
Manifest next update:     Wed 01 Apr 2026 08:23:18 +0000
Files and hashes:         1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: igbwjG6My2pmq+VJIrM6rUKZl3tunWPCVRBIwxB3H6s=)
                          2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
                          rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
        Validity
            Not Before: Mar 25 08:23:18 2026 GMT
            Not After : Apr  1 08:23:18 2026 GMT
        Subject: CN=69c39b76-842c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:a8:4a:b4:66:86:6e:07:92:1a:aa:0b:28:
                    b7:8d:a1:dc:19:84:be:3a:20:8f:2d:c9:1a:b1:fb:
                    94:2f:5f:fb:2d:da:88:be:32:75:fd:0b:25:29:86:
                    f3:06:d0:71:fa:8e:bf:5c:a8:f0:48:dc:da:d2:cc:
                    a1:b2:c9:cc:5c:91:86:51:c2:ef:d9:9f:4b:de:6b:
                    74:cc:39:f8:0a:dc:a3:43:24:df:cf:df:a8:ee:f4:
                    46:7d:60:55:8f:41:4c:1e:db:77:43:3c:b5:70:70:
                    2f:13:08:b9:cd:a7:f2:bf:46:51:a3:2f:e0:c6:cc:
                    99:80:ba:db:6f:6e:e9:59:1f:7e:52:24:e9:ac:54:
                    fe:ab:55:ce:c0:d4:a9:60:e7:32:b1:16:76:fb:1a:
                    55:f4:1e:54:5c:f4:58:6a:5a:cd:3c:7e:72:a9:bb:
                    84:1e:e5:f9:96:5d:64:38:ba:9a:ba:33:85:e2:e1:
                    82:c1:fa:11:33:9d:44:56:3a:5c:2c:43:a5:8a:a8:
                    e8:29:c4:46:7c:7d:81:03:2d:42:b4:32:3a:27:15:
                    2b:35:21:ef:07:34:0b:d3:1c:22:7e:f8:0e:dc:82:
                    04:88:ff:ed:23:50:a4:d6:8b:ef:15:94:44:6b:4d:
                    2f:1a:d8:3d:21:74:b3:8e:fd:2d:09:2a:90:11:13:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F8:0C:AC:3B:52:5A:15:C8:50:48:D2:5E:40:6A:AE:48:D2:9A:88
            X509v3 Authority Key Identifier:
                keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:e6:a9:2d:8d:28:7d:f4:59:cf:0c:5d:62:ff:51:95:3c:
         87:02:d3:0e:12:ae:63:87:8d:cf:6a:e1:fa:9a:a5:f6:95:dc:
         c0:45:ac:e6:56:2b:52:c4:a9:5d:40:32:43:58:45:bb:ab:3b:
         20:09:62:ce:51:0a:1f:d3:aa:86:62:a1:c7:8c:4d:59:9d:a4:
         4d:4f:74:a9:e3:6d:0d:dc:68:ea:0e:d7:0d:52:38:8d:c7:62:
         60:9a:27:ca:f6:12:7f:e8:d4:6a:4f:20:30:ce:61:9e:5f:98:
         cd:a0:78:a0:e6:02:25:23:b4:48:96:9d:87:0c:77:6b:23:95:
         e8:67:ec:22:60:f9:d6:5a:9b:1b:9f:73:71:d7:cb:fd:cf:c1:
         77:02:ea:75:1f:a7:da:47:7d:00:ff:0e:cc:59:ff:d7:50:1a:
         a5:05:d1:4e:d1:a1:9d:e1:a6:79:fc:fe:27:8f:6a:92:9c:3b:
         82:74:61:54:29:72:29:74:bc:8b:e9:7d:7a:17:79:6a:2a:dc:
         7c:57:b4:15:5b:06:72:fc:a3:ee:49:50:b5:ca:75:95:b3:2e:
         72:c1:2b:d6:28:cf:7d:5d:e9:12:06:be:98:52:cd:e2:e6:84:
         e8:e5:2b:02:b1:2c:c1:59:d2:1a:07:c2:5e:32:87:b4:66:d2:
         8c:17:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:52 2026 by rpki-client