Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          /vFfpRspOSRBzWuYXQ1uv6lBymNaqFQDM/YePlX6iFk=
Subject key identifier:   14:9F:3A:64:EA:FA:AB:D9:BA:9A:AB:A0:FF:60:FC:DE:D7:D6:C7:C1
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          012A
Signing time:             Wed 19 Aug 2026 06:24:05 +0000
Manifest this update:     Wed 19 Aug 2026 06:24:04 +0000
Manifest next update:     Wed 26 Aug 2026 06:24:04 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: Bc8P/bfp0DMcqSYuSDM7i2bSnVN3jju/Ppl0sg1EGeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Aug 19 06:24:04 2026 GMT
            Not After : Aug 26 06:24:04 2026 GMT
        Subject: CN=6a854c04-1d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:e9:9b:a4:39:84:fa:43:15:16:23:2e:47:
                    1b:37:42:36:2d:cc:25:ad:ec:e2:e2:aa:f9:9f:c9:
                    2b:4b:86:e3:40:fa:02:0d:cf:fc:fc:6f:49:9b:23:
                    82:46:09:05:e4:bc:99:4c:3d:df:bb:f6:ce:58:f2:
                    6c:ef:65:ad:b9:47:da:42:46:0e:cf:44:40:ba:d1:
                    dc:00:02:da:1f:0d:a8:86:00:ec:7d:7d:59:1d:9e:
                    d7:6d:7f:c5:1a:9b:70:c5:6a:51:1b:48:26:83:67:
                    56:df:44:02:85:b9:f6:b9:4b:a8:86:50:a3:54:67:
                    c6:24:98:d0:cf:a2:74:9e:c0:74:2c:b6:78:55:dd:
                    a7:5f:6a:6b:69:c1:80:29:87:f8:65:0e:d0:c8:47:
                    3a:8d:2b:7f:7e:53:7a:77:66:26:e9:4c:83:8a:05:
                    1d:0f:79:91:d4:53:ee:6a:b0:c4:5d:ca:d0:be:b5:
                    a9:1c:4c:a9:fd:7e:0a:27:4e:93:48:25:3a:b4:21:
                    b8:68:ca:e4:bc:92:24:f4:5c:f7:38:9b:a7:3d:14:
                    ab:e8:85:bd:12:ad:70:b5:d4:62:0a:3b:83:74:62:
                    6a:fb:d1:90:11:d6:6f:bd:8a:d6:c4:e7:42:e6:f7:
                    7e:23:ef:d1:79:f8:b7:90:67:31:a8:0e:b2:81:4a:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9F:3A:64:EA:FA:AB:D9:BA:9A:AB:A0:FF:60:FC:DE:D7:D6:C7:C1
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:51:f4:8f:b2:3e:3b:93:b5:89:da:9b:83:65:ae:48:b7:24:
         8e:da:2f:fd:c1:6c:ac:ab:8c:89:cc:cd:cd:a3:b4:4d:ff:8a:
         30:fb:46:3a:46:cb:75:ec:ed:64:a1:f7:ac:db:cf:e7:b6:2d:
         43:82:ec:b7:ef:ae:d1:65:e0:1d:b2:21:2c:ef:24:04:d5:f0:
         5d:1c:53:23:de:56:14:00:a8:14:47:ce:16:ec:b7:4b:e6:9a:
         d9:fa:50:8b:1e:83:0f:37:4a:4a:1c:39:eb:5f:e5:ff:08:3a:
         4b:32:62:39:99:3e:bc:a2:9a:8c:83:6c:33:b4:d6:5e:66:4a:
         10:56:aa:06:08:45:a8:94:5d:20:50:d8:60:fa:79:ca:f2:55:
         75:a5:1a:07:30:fc:08:f0:04:09:59:0a:7e:48:13:a9:15:c6:
         43:93:ed:3c:2b:33:f7:09:bc:4e:b9:5f:64:a2:73:09:fa:c6:
         ee:cc:6a:09:5e:e9:69:76:e6:c6:4d:fe:fd:28:84:8d:75:12:
         66:e9:46:7a:47:d0:0d:ab:97:de:ca:fc:33:d9:63:1a:cf:27:
         2b:5f:4a:b8:cf:e4:88:0c:04:06:9d:01:5d:5e:01:34:b4:43:
         fe:ff:3f:7a:9f:8f:89:9f:e9:86:a5:f2:fd:a6:85:00:ba:5b:
         27:9d:65:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:11 2026 by rpki-client