Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File:                     pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier:          7xIBsb/gyr1UCe/TtkwN86Bk06vvf9mOeIpQIJoSVAM=
Subject key identifier:   3C:9F:44:44:B8:1F:57:74:6B:EC:37:27:1D:F0:31:87:97:6A:97:10
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer:       /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number:          41
Signing time:             Thu 23 Jul 2026 10:28:46 +0000
Manifest this update:     Thu 23 Jul 2026 10:28:45 +0000
Manifest next update:     Thu 30 Jul 2026 10:28:45 +0000
Files and hashes:         1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: rWwfHImza4+CVeHVsW3pBBxYupZDkGaH+vVy/PRMLgQ=)
                          2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
                          rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
        Validity
            Not Before: Jul 23 10:28:45 2026 GMT
            Not After : Jul 30 10:28:45 2026 GMT
        Subject: CN=6a61ecdd-5979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:5a:9d:2a:17:d5:09:72:48:19:d2:18:a6:
                    90:2a:c6:f5:c4:37:7e:4f:bb:cf:b6:27:2e:75:ff:
                    ad:4f:ec:12:72:60:7e:0c:da:84:ac:2a:27:60:75:
                    90:bc:23:48:ea:75:87:76:fa:84:8c:e3:b7:40:d0:
                    3b:2c:55:0c:86:6c:ab:67:e6:53:2b:42:ee:6c:3a:
                    2f:a0:73:78:6d:fb:ea:2d:9b:90:a8:e9:eb:45:de:
                    87:a9:cd:b0:c5:00:c1:7e:68:44:a3:68:d9:10:58:
                    a9:c0:31:c6:63:db:20:84:aa:c9:34:31:b0:46:17:
                    9e:95:9c:2b:00:b2:39:f7:d3:5f:e6:c6:ef:dd:9f:
                    20:08:ab:e3:fd:8e:15:79:4c:27:e1:af:5d:a6:de:
                    9e:d6:8f:a6:80:cf:3a:8d:02:c3:0f:43:6d:f9:db:
                    8f:96:8e:9d:da:13:d0:28:5f:e0:f8:6d:02:f4:15:
                    7b:16:ea:e1:3d:43:c8:07:af:06:1b:7e:32:48:07:
                    d5:70:15:58:ea:27:b9:0d:10:05:03:7e:d7:4c:01:
                    6d:2e:84:d4:f6:ae:1d:5f:15:de:91:63:f9:8b:60:
                    a8:27:69:ad:88:48:ee:cd:bb:7f:74:8e:c1:c8:76:
                    c6:d4:02:1e:e2:e5:12:69:04:19:01:e0:08:67:72:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:44:44:B8:1F:57:74:6B:EC:37:27:1D:F0:31:87:97:6A:97:10
            X509v3 Authority Key Identifier:
                keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:3a:c6:2d:45:dd:a7:44:65:8b:db:93:ce:c0:07:8f:86:ac:
         e5:90:c4:24:0d:a2:59:c5:e2:4f:05:bc:6c:c8:26:1b:95:7b:
         96:13:f9:7a:52:82:bb:02:f3:d8:16:2f:e6:bc:f5:09:51:a0:
         07:e2:45:f0:f8:ca:f8:13:27:a7:c0:78:9a:4c:de:a2:22:57:
         4e:07:af:e4:34:4f:6b:53:1e:dc:f5:88:36:ba:0f:1e:9b:59:
         b4:46:a9:5e:73:00:21:73:07:a7:b9:b1:0c:47:bf:c4:57:5e:
         c8:aa:0b:b9:1b:0e:be:08:8b:5f:cc:c7:75:51:96:50:e0:41:
         a4:40:8f:8a:72:29:ac:f1:a5:14:53:c6:7f:a7:a7:6b:73:97:
         0f:c8:b6:d0:82:03:1e:f5:a3:bc:c3:6a:8a:c1:58:c2:8f:4d:
         7a:6b:b0:68:e1:ab:35:92:68:ce:17:7d:7f:64:f4:af:2d:87:
         31:f6:61:08:d8:7f:fc:7d:9f:0d:6e:dd:56:a7:9d:f3:9c:e3:
         2d:ce:ff:a6:87:f6:41:da:a5:17:ab:07:5c:29:29:42:a3:13:
         ec:7f:fa:30:43:38:6a:fb:14:14:8d:8a:8a:4d:5d:18:a4:69:
         27:83:24:30:24:0c:1d:df:f7:2f:f3:8c:6d:25:77:fe:15:75:
         be:a4:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:45 2026 by rpki-client