Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
File:                     pjM-hRYZl7cwtGh_BelmGT9roa8.mft (raw, json)
Hash identifier:          +USJaQxfY8GzcyWHucGvvKhXCnOIt8xEEJB1m+B8SGg=
Subject key identifier:   DF:11:84:C3:28:D2:13:50:EC:58:F5:56:0A:36:C8:AE:22:CC:3E:15
Authority key identifier: A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF
Certificate issuer:       /CN=A9174CBE/serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
Manifest number:          51
Signing time:             Sun 23 Aug 2026 07:54:41 +0000
Manifest this update:     Sun 23 Aug 2026 07:54:40 +0000
Manifest next update:     Sun 30 Aug 2026 07:54:40 +0000
Files and hashes:         1: pjM-hRYZl7cwtGh_BelmGT9roa8.crl (hash: LW6VDr7gzi9J98GvMs5lrVuhk1XuTxGHZVJBHJ2dzpU=)
                          2: 37DA9614245E11F1A1D0CE16C5833773.roa (hash: lMRR/zqNW58wSBmGf5f2NfJ6o9i7EWhZV///FsnpLQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl
                          rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174CBE, serialNumber=A6333E85161997B730B4687F05E966193F6BA1AF
        Validity
            Not Before: Aug 23 07:54:40 2026 GMT
            Not After : Aug 30 07:54:40 2026 GMT
        Subject: CN=6a8aa741-0bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:02:8e:88:b5:b3:17:b5:d2:d9:05:b3:62:
                    e1:78:9b:be:59:11:d6:a2:c2:18:63:09:50:52:82:
                    10:b0:e6:19:b6:5b:32:87:17:49:af:f4:0c:bb:c4:
                    7b:6f:2a:99:5c:dc:76:2d:9b:58:92:3e:b8:46:b5:
                    ef:d2:6c:e3:0e:d8:f2:50:40:46:34:32:9e:21:c4:
                    64:5a:42:de:ba:38:51:14:d7:42:c8:34:6f:5a:13:
                    e9:e6:64:80:69:07:ca:e6:44:55:c6:1a:f7:1a:d3:
                    9a:25:be:34:d1:c1:d4:7a:ad:21:20:3d:7b:42:08:
                    e7:da:e4:28:76:53:04:a2:37:16:83:c0:9d:81:7e:
                    ab:c3:95:96:9b:7d:b1:30:af:b8:ab:b5:85:d5:3b:
                    a9:e9:7f:38:24:b4:72:2f:03:63:68:8f:f5:65:1a:
                    c3:19:90:f1:d6:69:bb:99:f1:b1:88:af:38:3d:22:
                    ff:a3:27:f0:da:af:a5:4c:40:29:e7:86:b7:b8:17:
                    d4:d5:86:fc:1e:cd:35:68:70:11:d6:bc:85:e6:66:
                    f5:86:bb:c1:84:8e:4d:04:50:9e:6a:cf:ae:ce:b2:
                    cd:4a:d9:13:46:46:11:04:df:d5:28:9a:24:cd:ed:
                    95:89:4d:2b:db:23:e1:a5:c8:73:0e:6a:1e:88:91:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:11:84:C3:28:D2:13:50:EC:58:F5:56:0A:36:C8:AE:22:CC:3E:15
            X509v3 Authority Key Identifier:
                keyid:A6:33:3E:85:16:19:97:B7:30:B4:68:7F:05:E9:66:19:3F:6B:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjM-hRYZl7cwtGh_BelmGT9roa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CBE/B3BF3542245D11F1AB125F9AC4833773/pjM-hRYZl7cwtGh_BelmGT9roa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:12:f9:23:15:38:76:17:06:ea:93:11:1f:56:ea:f6:cf:
         1b:2c:df:93:ed:52:5b:7d:71:13:b5:71:c6:16:21:d4:f1:a7:
         a4:7d:93:fa:6d:75:0c:11:f8:50:89:f8:83:e6:2b:db:7e:af:
         f2:93:04:e4:e9:88:5f:47:90:6e:5c:48:e6:9e:b3:12:de:c7:
         f8:aa:61:9e:93:3e:70:b9:27:24:12:2e:f1:4f:52:09:d4:72:
         a3:dc:fa:a6:45:06:22:c0:eb:0c:df:45:3f:f6:f6:9a:7f:0d:
         c4:7c:1f:a2:d8:8a:ec:44:da:8a:c1:39:8f:96:2d:e3:e1:37:
         27:83:93:24:a5:93:91:d6:1a:46:c4:71:bd:5c:e9:66:e9:d0:
         84:b1:2c:35:47:b6:c6:16:bd:ff:3e:79:d2:dc:e1:65:72:ad:
         72:b3:b9:aa:62:14:77:53:64:cd:26:f0:e8:e6:70:5a:f0:ad:
         85:53:71:04:07:1b:85:ce:d0:d0:27:57:cb:b3:c3:01:2d:2c:
         c6:04:22:5e:a4:71:29:ad:9a:28:90:ca:e3:88:58:6f:64:09:
         73:c4:99:a8:1b:9e:a0:25:32:69:65:93:87:9a:da:80:ed:09:
         6b:81:df:f7:23:6f:f9:b6:de:98:65:a4:06:d5:37:db:92:ca:
         a6:d1:07:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:35:22 2026 by rpki-client