Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File:                     pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier:          hCVhj5gKCvLIM+Z7b5Turidr+kQ5B0hN2aX+cAsqnQc=
Subject key identifier:   E7:33:A3:A3:82:92:73:D1:FC:E5:76:4B:E4:D0:0A:74:D2:AF:EB:87
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer:       /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number:          73
Signing time:             Sun 25 Oct 2026 08:16:17 +0000
Manifest this update:     Sun 25 Oct 2026 08:16:17 +0000
Manifest next update:     Sun 01 Nov 2026 08:16:17 +0000
Files and hashes:         1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: 2f64AJigPfmjY3W67s03Jg4uy7cEvDmjC87t1OGNv6Q=)
                          2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: hkedeqfK0LFMecsOaRo1FRcvBmWp2WGxQYqt+q+qx5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
                          rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
        Validity
            Not Before: Oct 25 08:16:17 2026 GMT
            Not After : Nov  1 08:16:17 2026 GMT
        Subject: CN=6addbad1-fbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:31:b7:2d:79:9f:59:f7:ef:64:6b:4f:64:
                    3a:e9:e0:69:cc:cd:a5:b1:f7:5a:cb:68:80:7c:9f:
                    2e:67:e6:65:d9:fd:52:f1:67:a2:12:16:fc:e4:80:
                    e5:88:e0:03:9e:ba:3c:8e:03:fe:fb:9a:c6:e7:96:
                    d2:06:5c:a5:69:df:0b:bf:5b:eb:1e:02:c6:04:55:
                    87:91:2d:c5:5b:f2:ee:d4:db:85:a0:65:cd:f7:e8:
                    2c:d2:b2:ad:9e:da:2d:76:af:19:d1:f8:75:b9:18:
                    45:0d:1f:0e:4e:7b:18:37:51:46:89:bf:9e:f6:34:
                    d0:bd:cd:8b:0f:31:a4:3d:12:bf:5e:69:43:93:b3:
                    8e:41:71:3f:b6:e7:68:e8:ad:b2:31:9e:98:ad:fc:
                    88:29:d5:92:0f:35:23:4b:36:32:7e:a3:ad:36:72:
                    9d:a2:c8:fb:ab:bb:1f:1c:fe:04:78:80:ae:44:28:
                    07:26:5b:4e:ee:c9:d7:47:f3:e8:d7:a2:fe:fd:35:
                    5a:ed:d7:3d:ad:c1:09:8c:a9:de:e5:b4:09:ed:e7:
                    ab:b3:d1:ff:63:52:5d:c9:e3:34:1a:80:98:93:14:
                    6c:cc:bb:a8:42:c6:55:1c:3f:f6:31:63:fe:f6:74:
                    1d:f5:28:df:29:04:f0:62:29:52:f2:8f:ed:19:3c:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:33:A3:A3:82:92:73:D1:FC:E5:76:4B:E4:D0:0A:74:D2:AF:EB:87
            X509v3 Authority Key Identifier:
                keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c2:89:b1:b4:6f:07:23:d3:fd:82:60:e3:f6:9b:36:cd:b1:
         cf:e0:24:00:be:08:71:ef:a7:31:98:cc:80:09:96:a8:58:7f:
         ee:d7:b5:be:43:b7:cf:77:12:38:74:fd:26:cc:b0:0a:f2:88:
         90:64:e4:d3:7a:a6:e9:e8:fd:89:c4:fd:0c:b0:35:24:24:ef:
         e8:75:70:c6:1e:c6:62:11:86:0f:d1:ab:2d:f0:0a:7c:63:7e:
         50:16:9b:62:81:c0:e0:ea:ae:ac:00:f1:fd:ee:db:70:97:0a:
         e6:42:aa:5e:b8:5c:6a:06:33:54:c9:b1:4b:c5:ae:73:65:96:
         99:c9:5c:70:7b:36:8c:4a:95:3f:c9:cc:3e:df:2a:33:32:64:
         c6:aa:0a:54:ca:78:a1:85:47:2e:61:f2:32:4e:d7:0e:6b:15:
         0c:90:24:38:82:d2:31:ba:0a:68:2c:a7:d5:5b:80:b2:7f:89:
         df:22:e5:25:d6:57:7e:bf:4c:23:25:e0:84:89:49:09:86:9d:
         42:e2:38:e4:07:93:2a:fb:ea:f4:bd:6b:25:06:41:1c:f6:e1:
         94:ff:a4:a3:71:54:90:09:99:f2:93:d9:c0:36:e1:47:f8:ae:
         b2:94:a0:ca:63:b1:b2:d0:b6:3c:b0:2b:e3:f3:f1:c1:51:b2:
         07:88:ff:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:49 2026 by rpki-client