Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          QIhdJyuuARlu8nQvShc8ysJiQA0K3/FjP0jg/2hef8A=
Subject key identifier:   AA:07:14:2F:BF:74:D9:99:16:0F:1D:95:58:7F:47:8F:D7:8E:60:C3
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          FD
Signing time:             Thu 21 May 2026 06:21:20 +0000
Manifest this update:     Thu 21 May 2026 06:21:19 +0000
Manifest next update:     Thu 28 May 2026 06:21:19 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: iFR+Em2csTreQvgUow28vyHDGr07X/1CmH+waQcqEEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: May 21 06:21:19 2026 GMT
            Not After : May 28 06:21:19 2026 GMT
        Subject: CN=6a0ea45f-28ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:74:20:9c:61:0d:7b:df:7a:9f:fd:f2:1b:
                    5e:c1:b0:05:6a:91:fd:6d:3e:cf:4d:8c:d9:b6:f6:
                    b8:19:b2:23:d6:35:3f:2c:5e:6d:49:18:b6:f4:a3:
                    9e:f7:7a:19:9d:dc:d4:5e:b5:d0:27:f2:26:18:c5:
                    1f:d2:6b:7b:9c:38:e3:75:14:70:8b:28:3b:53:f5:
                    4d:5e:d8:28:16:3b:ab:60:23:77:ee:77:b4:cf:02:
                    df:d6:f5:d9:f6:ab:a1:32:72:aa:94:a3:b1:74:c9:
                    9e:24:c4:b2:fc:f0:28:52:6d:b8:fe:d8:95:5e:1e:
                    c3:eb:e3:a7:cb:ea:bf:20:36:19:9e:03:f5:10:47:
                    63:e2:f0:cc:6a:56:8a:81:56:a1:12:27:e0:8e:2e:
                    1b:9b:98:b3:6b:56:25:da:f6:59:4c:9b:66:41:48:
                    62:43:6d:47:5a:73:29:03:67:76:c5:f3:63:f0:2c:
                    0d:4d:3c:ad:5c:07:eb:b7:f2:e4:14:9b:77:b2:90:
                    e1:bc:4b:12:32:94:0a:7e:79:2b:73:60:ff:17:50:
                    e8:49:52:1f:d3:7a:91:2e:97:11:22:8a:6e:4e:42:
                    56:ed:d1:72:6b:04:26:2e:4a:c0:fd:fd:62:30:ee:
                    d6:19:85:ac:3d:5b:dd:b0:55:b9:86:14:fc:c2:2a:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:07:14:2F:BF:74:D9:99:16:0F:1D:95:58:7F:47:8F:D7:8E:60:C3
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:be:44:74:84:56:3b:ca:cc:b3:29:83:7d:6b:b3:6b:d6:9a:
         82:91:d2:9e:ee:d8:97:79:95:6e:3f:73:5e:4d:6d:9f:6f:9c:
         a3:93:74:f8:e7:ca:64:e1:8d:c1:64:a4:ee:9a:a2:8d:76:85:
         ee:72:ee:f1:c4:1f:4a:f2:e8:b8:bb:cc:db:f7:51:63:b4:9c:
         02:32:21:cb:c0:eb:c8:42:77:7a:40:d9:9e:95:d2:7d:c0:74:
         63:82:bf:f0:62:dd:0b:4b:09:71:8f:aa:68:78:0f:ec:e7:91:
         89:97:22:ce:cc:82:0a:18:db:6f:c6:cf:93:39:a9:7c:cb:31:
         bd:c4:fc:84:30:9e:fd:48:a6:95:c9:07:2b:24:af:17:db:1e:
         8b:07:6f:3a:97:3c:67:a4:d8:5f:91:41:9b:eb:de:eb:a7:4b:
         fd:ef:61:ef:cf:59:dc:b7:9b:7a:4a:ee:48:4a:d4:b7:75:93:
         9d:90:d5:89:13:79:ac:08:7a:53:fb:9a:a1:16:c6:d2:6e:c4:
         d3:21:34:70:cb:78:87:11:35:6f:38:f0:17:26:46:5e:ae:07:
         e3:a7:1d:dc:f7:85:d1:91:a4:6f:26:24:9f:23:c6:a3:4f:5a:
         5f:56:d1:4b:d7:b7:4d:a6:68:33:bc:a5:8a:f0:46:c7:80:c6:
         b9:38:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:46 2026 by rpki-client