Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
File:                     PnIyBI3L0sabqyJbikIhYEbBiyU.mft (raw, json)
Hash identifier:          aeaRCquwiBIqNWJR4OJNH3R/xSidceuTbwN7GxD3Udg=
Subject key identifier:   16:06:6C:00:3F:C1:C9:68:CC:E1:E1:21:6C:39:FD:E7:96:DD:81:51
Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Certificate issuer:       /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
Manifest number:          0254
Signing time:             Wed 22 Jul 2026 19:05:41 +0000
Manifest this update:     Wed 22 Jul 2026 19:05:40 +0000
Manifest next update:     Wed 29 Jul 2026 19:05:40 +0000
Files and hashes:         1: PnIyBI3L0sabqyJbikIhYEbBiyU.crl (hash: rrDeo5FeUYAqewvSO6loKp8PEjtgD7IyJnNoGFM3C3I=)
                          2: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (hash: UxgWHSWCQslOtEVN8vxHfkeQxG5zKwXTOsnpS8saGYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
        Validity
            Not Before: Jul 22 19:05:40 2026 GMT
            Not After : Jul 29 19:05:40 2026 GMT
        Subject: CN=6a611485-77e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:92:be:33:58:41:84:e6:30:87:cf:4e:b3:
                    0d:ae:d4:49:6b:c5:1d:e4:20:05:3d:7b:08:66:67:
                    d2:9c:38:ae:1f:96:a5:37:f2:c8:da:2d:d0:34:ad:
                    56:4a:0a:a5:e8:2c:2a:72:ee:6c:4c:7e:22:83:65:
                    ea:1c:13:27:26:e9:fd:ad:c4:a2:bf:7c:d0:2e:d6:
                    de:55:86:a3:53:41:5a:fa:f2:06:ad:f9:27:da:d6:
                    15:b2:55:7b:b7:21:2f:46:cd:dd:62:95:a3:bc:62:
                    e5:87:c7:d4:7b:0c:22:39:e4:b7:4f:14:db:27:03:
                    36:78:53:ce:35:03:0b:11:44:3d:4d:4e:09:87:6a:
                    c8:6b:34:0f:c6:c8:2a:0a:f5:01:76:01:85:f5:8e:
                    44:11:cc:81:45:39:4c:64:75:b1:32:3d:2f:64:43:
                    82:10:8d:7c:52:6c:c2:d5:c2:b1:53:ff:47:69:0c:
                    5d:aa:5f:46:00:01:b9:9c:3a:1d:bc:af:fd:78:91:
                    ef:65:93:98:e0:2e:62:52:f8:fc:64:1b:a1:b9:52:
                    56:09:07:22:65:d1:76:ee:9e:2a:29:af:95:dd:7b:
                    dc:3f:40:17:57:da:d2:25:8e:5f:5f:c8:01:e2:5f:
                    d3:06:c6:64:99:52:55:a4:02:ce:6f:b9:63:76:6f:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:6C:00:3F:C1:C9:68:CC:E1:E1:21:6C:39:FD:E7:96:DD:81:51
            X509v3 Authority Key Identifier:
                keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:94:0a:d6:d6:20:a4:98:43:d0:6a:58:38:26:be:12:c0:
         e3:74:b8:62:9b:d8:01:fc:e4:28:c4:97:8e:25:34:6b:ff:1b:
         b2:b8:45:3e:fa:3a:96:4b:9c:15:ee:66:38:52:5b:b0:ae:17:
         39:0d:5a:0c:f0:ce:aa:b8:08:7d:cf:d3:03:4c:a6:e2:bc:94:
         26:40:75:c0:26:bc:5b:52:95:27:1b:33:d4:cb:6d:bd:fd:8f:
         75:3b:df:cb:02:48:99:e2:ed:7d:24:fa:54:c0:2e:12:a6:40:
         d6:ea:cf:c6:55:ee:b7:c3:ad:03:19:33:3b:5f:a6:ee:dc:dd:
         46:3b:82:54:00:b2:ab:68:df:7f:0b:95:fb:bc:0f:15:d4:8b:
         d8:74:6d:6f:f0:b8:9b:2a:ad:9f:50:ed:ff:f6:2f:50:72:38:
         45:07:17:73:74:b8:63:45:a1:7f:20:52:9d:c0:96:4a:4f:60:
         6d:d4:6b:b0:c3:67:1c:88:26:04:a4:44:57:01:81:1f:41:8b:
         e0:62:94:0d:7f:ec:91:bc:08:1f:48:73:98:78:0e:b5:94:cd:
         da:97:3a:5e:d9:65:2c:25:7a:4a:96:09:86:e8:78:68:99:94:
         7b:7e:e8:ee:a3:a2:dd:18:95:05:f4:a4:86:06:19:48:36:45:
         fb:be:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:19 2026 by rpki-client