Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          r8QEXyrjhSq0woKw9Bv0uNMlqT+e5PWmIrUnLwkpFfo=
Subject key identifier:   EE:4D:82:1F:FC:39:73:9E:08:3F:62:C6:52:36:BD:43:F7:AE:59:38
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          0145
Signing time:             Fri 09 Oct 2026 06:06:02 +0000
Manifest this update:     Fri 09 Oct 2026 06:06:01 +0000
Manifest next update:     Fri 16 Oct 2026 06:06:01 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: rUWGTjPnoZHJUhyW2M3CZ0J4CdAsYCIaia/F1TtzSKY=)
                          2: B49E7AA2BD6611F18CF0EA736211F970.roa (hash: 9JEMfQHaMb0E1NK24p5ZqRY1Hi/EGDuYHi5wAxL8Eh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Oct  9 06:06:01 2026 GMT
            Not After : Oct 16 06:06:01 2026 GMT
        Subject: CN=6ac8844a-ed6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:f8:e9:13:25:80:6e:e4:e9:99:8f:bc:bd:
                    2b:c4:63:7a:7d:37:8b:91:cc:73:ab:fb:30:1d:a6:
                    51:ee:cf:e5:b7:d1:8a:16:fc:60:66:8a:d0:eb:c5:
                    85:c6:4d:97:24:e7:fc:a0:41:5f:08:8c:6a:6d:e9:
                    67:c2:a0:8b:a4:12:a1:c2:db:28:4b:00:5e:df:49:
                    69:8e:72:3a:8e:59:85:fa:98:1d:76:75:ad:78:75:
                    50:a4:42:94:b4:2d:60:4d:1e:1b:c5:d3:e4:8c:7c:
                    41:f2:88:4c:4a:af:9b:b9:58:a5:e4:82:97:d5:ed:
                    d0:d8:fe:12:83:0d:36:33:a0:c3:32:8b:f5:14:d1:
                    84:c6:4f:17:bf:bd:f9:4c:3d:8d:12:b6:2a:ee:9f:
                    1a:df:27:a2:9b:33:aa:0c:97:af:91:19:d9:f4:a6:
                    2b:63:d8:2a:92:26:fb:e9:0e:36:93:c2:49:a7:68:
                    f0:4a:a7:e1:9e:18:74:2c:1e:47:c8:97:d6:24:50:
                    81:b5:1b:56:a6:54:87:79:f8:0c:66:b7:35:b2:25:
                    a8:e8:8d:32:97:cf:b2:8c:1a:ff:3d:f2:4f:cb:df:
                    32:e1:fd:bf:59:55:76:db:6d:f2:90:a3:cc:01:01:
                    43:9d:77:61:fb:b9:7a:d5:08:3b:54:46:ea:27:50:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4D:82:1F:FC:39:73:9E:08:3F:62:C6:52:36:BD:43:F7:AE:59:38
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b9:8d:2f:00:17:fb:6a:69:c6:f0:c3:16:2a:c6:ed:ff:9b:
         72:75:a5:16:a6:a0:bd:44:22:ba:a3:58:d5:e4:c6:e9:4a:05:
         30:64:e0:d0:87:14:6d:99:03:ac:fd:36:f4:33:9b:62:e9:ce:
         8c:40:71:25:97:10:ab:49:f7:6d:6d:22:4f:fb:af:60:6f:ff:
         0f:dc:b6:41:10:1f:c0:ea:93:29:ef:2c:fd:d3:92:5c:9f:21:
         df:1c:47:cc:8f:f2:7b:e2:64:af:42:fd:87:e0:03:6d:6e:4c:
         0e:04:b4:48:af:b9:6a:93:54:dd:cf:46:66:d7:9f:66:b3:91:
         48:45:de:45:25:81:39:cd:33:f5:79:ff:ff:ff:1d:c6:7f:c8:
         77:02:32:fa:ce:77:96:59:fe:ef:2d:46:bb:80:f3:59:ba:e0:
         16:7e:00:da:bc:e9:76:57:c7:76:e7:4b:f8:5d:9e:29:aa:ae:
         40:47:60:1a:5e:4e:d8:6e:33:c3:b4:61:25:75:3c:1a:43:dc:
         e7:bc:c3:11:7d:b7:47:1f:48:bc:56:e8:81:f0:c4:89:e9:5d:
         c3:78:d1:47:64:b6:ac:60:37:b6:f4:53:84:c2:26:45:00:39:
         de:12:2b:79:59:09:76:b8:44:d1:3c:a5:78:77:45:a1:9a:36:
         61:06:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:23:39 2026 by rpki-client