Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File:                     PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier:          7Pk+d8/TE2jTz1WT9tVP9pvlVStMa6xe04ZLcOAxI6E=
Subject key identifier:   B8:A6:03:26:13:56:E7:E8:04:ED:BF:82:58:B8:17:55:CE:34:44:57
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       087B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number:          0872
Signing time:             Wed 22 Jul 2026 21:17:39 +0000
Manifest this update:     Wed 22 Jul 2026 21:17:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:17:38 +0000
Files and hashes:         1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: 66VdNhmDCEBsFQAO2KIUeHGG9kc+JXlKYXqueEg2k/8=)
                          2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Jul 22 21:17:38 2026 GMT
            Not After : Jul 29 21:17:38 2026 GMT
        Subject: CN=6a613373-f5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:c6:64:57:b5:c7:2a:a8:f2:83:62:6b:d7:
                    0b:4d:c8:4a:16:db:8b:ac:9f:26:42:84:96:8c:88:
                    1d:83:0a:e1:a9:19:1f:00:8b:cb:55:ba:36:5d:4b:
                    23:80:47:32:e3:ba:70:94:6c:15:9d:cd:c1:4a:19:
                    cc:64:30:1f:93:d7:cc:00:68:27:40:6e:36:b2:50:
                    d3:49:44:b4:92:99:41:3a:82:a7:d5:85:90:f4:be:
                    25:b1:e1:b4:6f:7d:2f:b1:42:60:2f:1a:44:cf:13:
                    92:e8:1c:11:a1:52:6c:53:41:14:85:6e:40:97:2b:
                    f0:ed:49:88:88:d9:09:a5:79:46:95:0c:57:94:94:
                    2d:93:23:b8:0d:d5:a9:ed:d7:07:99:17:bb:d2:dd:
                    e1:d1:88:2f:19:ae:2d:1b:44:c3:60:31:42:2c:b6:
                    bd:60:da:31:dd:a3:57:91:3e:18:d7:d4:88:51:b7:
                    13:b1:8c:73:e7:59:ee:37:ec:29:05:4b:3d:65:19:
                    ce:e9:d3:0d:cb:6f:e6:15:e9:d9:c3:77:fd:95:76:
                    ad:79:85:d9:2e:6c:47:c3:b3:3b:cc:79:5b:7f:c4:
                    b4:bc:1d:f5:c5:80:fc:6d:74:a2:bd:85:42:f6:a8:
                    c4:05:a6:05:73:cf:38:4c:93:99:94:b2:db:f0:f9:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:03:26:13:56:E7:E8:04:ED:BF:82:58:B8:17:55:CE:34:44:57
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:79:30:e7:d2:b4:86:07:7f:73:f1:f1:6c:85:f6:b0:70:
         9f:11:ad:6b:21:51:c7:35:bb:be:6b:16:36:54:02:28:61:11:
         a1:0f:45:94:13:74:93:3f:7b:ad:ff:df:9c:90:6c:2d:74:86:
         46:68:db:5d:52:27:92:d5:8e:6c:b4:13:f3:e8:6d:02:12:74:
         ea:4b:b0:84:4a:00:26:c9:88:e7:5f:aa:4b:82:0a:99:b6:72:
         be:1b:ba:4b:11:50:f0:3a:a9:6d:56:d0:46:2e:2a:c9:b6:2d:
         cd:c8:a4:1e:15:ab:6a:71:b9:e4:e2:98:7e:53:a0:8b:f7:3f:
         17:c6:49:a3:b6:e0:5b:d1:97:a9:c6:62:b7:3f:27:42:a6:b5:
         df:c3:85:07:6f:96:7e:99:c5:17:34:b0:7d:51:61:ff:bb:67:
         7e:fc:24:d4:bf:58:71:16:05:1d:05:ed:dd:a2:00:2c:dc:72:
         18:c6:3d:e8:04:1f:e5:ea:6e:bf:57:9a:e2:48:67:2d:9d:24:
         05:9c:0d:cf:87:fb:1b:5d:ea:b6:c5:c6:55:84:d0:5b:03:be:
         96:0a:9e:0b:3f:07:78:62:13:a5:83:69:7e:6d:d4:25:0b:55:
         2a:fd:1a:79:56:52:98:b3:cf:72:4a:01:6f:77:aa:3f:0b:eb:
         9e:69:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:02 2026 by rpki-client