Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File:                     pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier:          dlAQdnXiocxdmP0IrVjIGbeRic/vwXN9I8OEGEDbPZc=
Subject key identifier:   EC:0E:17:17:93:B3:33:D7:BC:AA:24:2D:FD:40:B1:A3:8D:F5:E0:7E
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number:          097B
Signing time:             Mon 31 Aug 2026 20:02:18 +0000
Manifest this update:     Mon 31 Aug 2026 20:02:17 +0000
Manifest next update:     Mon 07 Sep 2026 20:02:17 +0000
Files and hashes:         1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 9eGSRuIci0SjsnKILL7BsQn96FMNcLy3vCr+N5v2Umo=)
                          2: D41A51DE20C311F197B90590083D8C67.roa (hash: dKPEHvEXlheUH6KmSU9/eB38o9t5KYQIp5NmXFvQZKk=)
                          3: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: q9LAdQP4pbK6C2KkR/sjb3Jr08te9azMTAwrksN5OUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 20:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Aug 31 20:02:17 2026 GMT
            Not After : Sep  7 20:02:17 2026 GMT
        Subject: CN=6a95ddca-743b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:7f:f4:43:b0:13:0a:be:1a:50:09:1c:84:
                    a9:66:57:bf:10:59:2c:93:0d:79:c4:5e:e1:d6:50:
                    11:c6:8b:45:25:c6:07:6b:cc:c3:29:27:90:fb:ae:
                    06:d1:85:81:a5:b0:7d:11:9d:a8:09:19:b2:a7:c5:
                    6c:1e:1d:2d:2c:d6:45:64:4d:17:9c:f6:9b:5d:29:
                    3e:09:8a:e3:5f:8e:87:83:eb:aa:94:c2:13:59:a7:
                    e5:6a:69:d1:89:08:74:0a:0c:e4:ef:7b:76:af:63:
                    96:00:bd:4b:3b:73:6d:6d:52:9a:73:91:2c:9e:e2:
                    33:f5:b9:56:ce:e5:72:57:bd:9c:3d:62:6a:b6:4e:
                    48:d4:71:30:80:10:f4:d8:08:ad:b9:e3:83:3c:27:
                    58:04:9e:15:6f:7d:cd:4a:49:b6:a3:24:74:d4:92:
                    81:67:4d:63:21:ba:70:9d:f8:4f:3c:d4:54:0b:c0:
                    af:ee:6c:de:fb:bd:b3:78:11:1b:d3:6d:8e:d2:a4:
                    b2:d3:99:b1:b9:02:f6:34:d3:37:81:dd:e2:0f:ac:
                    bd:f7:18:70:d8:c1:3b:b6:85:c6:85:6a:4e:4b:d2:
                    82:40:45:41:3c:c9:65:da:e1:e7:c7:c1:78:50:e8:
                    f2:86:36:d4:5d:0e:53:12:22:fa:db:9d:b8:e8:f2:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:17:17:93:B3:33:D7:BC:AA:24:2D:FD:40:B1:A3:8D:F5:E0:7E
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:67:bd:ec:b3:de:14:42:2c:6e:67:38:8a:17:18:11:06:5f:
         b2:18:78:84:a5:91:99:52:89:97:d5:89:0b:54:65:ee:5d:f8:
         49:2c:53:32:d0:1f:b6:54:db:27:c4:6b:fc:3d:ac:14:38:65:
         a0:25:1b:9e:a9:25:dd:98:53:d5:4e:20:f8:bb:1a:10:85:70:
         f7:9a:34:d2:52:70:a0:11:2a:c3:c7:05:91:cd:8e:3c:6e:2f:
         b0:2d:e8:cb:0b:23:13:31:ee:92:40:4b:2a:bb:69:70:eb:f5:
         b9:05:83:bd:b9:72:8f:28:80:1b:80:65:77:86:a6:9c:d3:07:
         11:c8:16:98:3e:03:e6:b4:d3:dd:c0:46:df:d8:52:63:a9:ee:
         a1:81:f4:14:21:b1:76:6e:7c:8e:72:d4:68:35:fc:7e:8d:bc:
         e3:a1:42:ef:4d:81:fa:a2:fa:b5:25:4c:0b:b3:d3:6d:33:01:
         85:6b:93:3d:d6:9d:3a:09:b3:bf:a8:ee:5a:d5:83:37:62:e0:
         54:29:5c:1a:fe:07:97:14:fa:0e:de:b2:9a:4a:b9:40:ea:37:
         33:49:bc:8b:38:72:86:f4:92:30:6b:84:73:43:e5:b7:a0:00:
         e6:b2:ec:ad:4b:16:22:08:02:fb:f4:ed:a5:b2:c4:f8:80:1f:
         6f:f9:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:04:50 2026 by rpki-client