Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
File:                     rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json)
Hash identifier:          UQCNJGBkUyQHeQH+aG0/frZzbcu3tZwNY4VGxeOvS00=
Subject key identifier:   BE:21:F7:3C:A9:E4:C5:12:48:DE:47:9B:0E:D1:48:4B:05:FF:96:AC
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Certificate issuer:       /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial:       3580
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
Manifest number:          3562
Signing time:             Tue 02 Jun 2026 14:39:39 +0000
Manifest this update:     Tue 02 Jun 2026 14:39:39 +0000
Manifest next update:     Tue 09 Jun 2026 14:39:39 +0000
Files and hashes:         1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: JLuJpkCqJHdh9DZGglcnfyOc4fcIYkiqvqdanVnYhWw=)
                          2: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=)
                          3: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
                          rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13696 (0x3580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
        Validity
            Not Before: Jun  2 14:39:39 2026 GMT
            Not After : Jun  9 14:39:39 2026 GMT
        Subject: CN=6a1eeb2b-d64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:86:6e:cb:e2:58:98:40:f5:4f:f8:2a:a0:
                    13:ff:08:45:24:d6:b0:db:83:f5:3a:98:91:9d:7f:
                    4a:39:66:d2:62:1c:cf:97:b7:17:02:b1:47:ab:33:
                    41:d0:84:19:9b:9a:03:4b:11:57:09:80:38:e5:01:
                    b6:0c:05:8f:26:fc:f0:5c:e5:8e:b8:77:a5:5f:df:
                    fd:2c:7c:1d:54:d8:b1:18:9b:b3:74:eb:c5:1b:87:
                    ab:01:df:46:fc:60:27:db:cf:c3:99:7e:93:a9:dc:
                    af:85:c9:00:08:01:74:d0:a4:ac:73:c7:2c:6d:15:
                    03:e8:f8:19:91:18:6b:52:b4:40:5d:21:8b:58:3a:
                    50:9b:7c:fe:b5:9e:01:21:ef:bc:12:29:f1:ee:ca:
                    04:0e:f6:b9:91:ed:fd:f7:32:f9:45:ec:db:88:07:
                    3c:11:99:fa:40:16:74:df:96:ad:e4:5e:64:d2:3b:
                    c0:29:30:d2:84:9a:af:61:67:1f:5a:e2:43:af:ca:
                    4c:92:44:e6:1c:44:36:71:63:f2:f8:83:e6:a7:b2:
                    9a:60:d0:9c:64:a0:22:29:4c:38:69:f9:46:48:d2:
                    7e:d6:ac:e5:b9:45:0b:3a:1a:12:a0:61:5e:7d:58:
                    40:c9:c8:5e:95:b3:60:ed:9b:cd:cb:29:6a:9c:98:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:21:F7:3C:A9:E4:C5:12:48:DE:47:9B:0E:D1:48:4B:05:FF:96:AC
            X509v3 Authority Key Identifier:
                keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:12:78:fa:d4:27:38:c2:d7:f3:a2:66:49:2a:89:d0:85:5f:
         b5:03:be:31:13:99:cf:cc:89:1c:53:b7:9d:c4:24:f4:91:a5:
         65:df:02:23:60:86:fa:cc:8a:f2:ad:48:48:19:ec:5f:e9:73:
         9e:bf:b5:e0:d1:b8:3e:78:78:5f:e2:90:74:ca:db:8c:fc:eb:
         f7:58:5f:e8:47:c8:12:64:80:f2:18:99:f5:ca:63:e6:06:b9:
         b0:c5:55:c0:29:81:91:76:f4:6a:ae:f1:ac:17:1b:6f:ee:54:
         48:2c:7c:00:54:6c:6f:c4:d8:00:1f:e2:8b:2b:5b:9d:45:85:
         56:82:40:de:7e:21:c4:83:2e:59:cb:cd:50:25:4a:e2:4f:ef:
         8c:c6:28:21:85:98:a2:5b:bc:8a:f5:16:d7:ee:af:1f:08:fe:
         b1:b9:c0:b4:76:38:a5:58:7d:d0:b9:50:84:71:6e:48:f4:5c:
         ab:82:d0:32:ba:68:cb:5a:a8:f2:54:86:39:6b:bb:7c:d4:d7:
         3d:58:40:5f:e2:1b:ce:c4:88:6b:76:06:14:42:d0:0a:9c:83:
         02:11:74:13:f5:ca:be:9d:c5:bd:e6:6c:a4:c0:3c:65:d1:91:
         db:60:a7:f5:20:bd:61:9f:9a:e5:f2:b6:5d:1a:52:b8:20:54:
         20:a8:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:24 2026 by rpki-client