Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File:                     pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier:          FKmHnZkZdrMEDr6LzNFfTMEU8+y87X1NXMdo1J5bJy8=
Subject key identifier:   48:12:8B:5E:AF:E2:5C:36:39:1C:A4:8C:60:54:1E:81:C5:BF:4B:11
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       0974
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number:          0963
Signing time:             Thu 16 Jul 2026 20:22:44 +0000
Manifest this update:     Thu 16 Jul 2026 20:22:44 +0000
Manifest next update:     Thu 23 Jul 2026 20:22:44 +0000
Files and hashes:         1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: z6GC1R1DfxioO99NzIF0yBmmUtJ6MDa369WaVxGZzf4=)
                          2: D41A51DE20C311F197B90590083D8C67.roa (hash: dKPEHvEXlheUH6KmSU9/eB38o9t5KYQIp5NmXFvQZKk=)
                          3: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: q9LAdQP4pbK6C2KkR/sjb3Jr08te9azMTAwrksN5OUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 20:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Jul 16 20:22:44 2026 GMT
            Not After : Jul 23 20:22:44 2026 GMT
        Subject: CN=6a593d94-0edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:8e:54:ba:43:dc:31:7e:80:41:4c:75:15:
                    7b:df:c3:f0:28:d5:2f:31:48:f3:ca:8c:49:56:a3:
                    ca:ba:11:61:d6:4b:07:ce:db:38:10:93:3c:b5:ed:
                    08:d3:24:37:75:68:6b:1d:9d:d6:d1:4a:fe:91:22:
                    cc:d9:7a:f3:9d:91:56:30:a6:80:23:3d:ab:4c:bd:
                    d9:c7:c1:5e:44:b4:e3:eb:64:32:40:29:95:53:7e:
                    7a:0a:a6:97:f3:03:ba:bb:d1:1b:a6:c4:8c:b3:ba:
                    89:ab:e3:9c:4c:01:f5:ab:cb:fd:e8:20:e6:20:6e:
                    6b:1e:9b:f1:5b:d2:54:92:9c:4b:b0:03:90:f7:44:
                    86:d4:4f:44:64:4c:a0:f6:d5:05:58:c4:62:92:0d:
                    68:3e:fc:4e:fa:96:6c:35:9b:71:ad:b2:40:c2:47:
                    0c:c1:65:1f:bd:51:e2:b2:17:7e:e1:f8:70:4b:19:
                    2a:9f:f5:30:00:7a:23:b6:d4:d5:9e:90:93:53:76:
                    3a:5c:07:2b:bf:9e:45:5a:3f:52:15:2e:5a:ae:0d:
                    26:c4:3f:8e:70:e2:8d:0d:f5:1c:1d:a3:a8:a2:ac:
                    c1:3d:76:ed:85:29:5d:00:d9:01:b7:82:3b:20:a2:
                    bf:f0:36:db:85:d4:e0:43:bc:ab:97:f1:e3:59:b2:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:8B:5E:AF:E2:5C:36:39:1C:A4:8C:60:54:1E:81:C5:BF:4B:11
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:b4:96:c3:38:c3:3a:f5:e2:fd:7c:40:71:f3:fa:3c:41:
         e6:98:85:7c:fc:81:d5:75:0b:f7:84:fe:2d:f1:99:ea:1f:b6:
         4d:22:9c:e5:00:c7:f7:4f:7c:9e:c2:84:a0:a8:60:b4:3d:6d:
         ad:1e:c4:4b:6f:c2:f1:dc:7c:0e:58:19:c7:7e:4d:a6:1a:52:
         1b:bb:8e:3a:5e:2b:6d:14:21:9c:20:a7:8c:32:08:41:70:ba:
         2e:98:7e:c3:90:eb:39:91:9f:ee:ae:43:e9:19:ea:09:79:a6:
         cd:30:94:54:aa:82:eb:68:aa:42:55:10:b9:be:d6:96:18:e5:
         25:f2:42:d2:60:ee:ef:f1:a8:21:f8:c9:31:fe:27:e2:2e:c8:
         ba:21:b0:84:a3:a1:93:80:9b:87:46:03:22:a6:22:4c:45:63:
         e1:3c:7d:f9:27:d9:ab:2d:46:24:f2:d6:dc:c0:67:cf:85:bb:
         bc:9c:12:37:31:15:02:c4:da:28:25:6e:89:3d:8f:17:05:a4:
         d7:a8:46:74:2e:98:bb:a4:4a:25:5f:f2:46:fe:71:ba:d4:b4:
         ca:68:0e:18:67:23:28:eb:e8:04:73:24:22:2e:14:76:98:e1:
         b2:42:6d:86:3f:b0:3b:d1:65:e9:be:54:12:5c:5c:1c:ad:1e:
         20:65:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:00:17 2026 by rpki-client