Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          o9g1HayBn1CbtFp5xGxHK0PWudNlE7tdTF009PiR6p4=
Subject key identifier:   82:DB:0F:CD:BC:00:52:E8:BF:9D:95:52:FF:10:B4:18:89:34:6A:07
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       0858
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          083C
Signing time:             Wed 22 Jul 2026 21:37:46 +0000
Manifest this update:     Wed 22 Jul 2026 21:37:46 +0000
Manifest next update:     Wed 29 Jul 2026 21:37:46 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: GGIHigpLrB4fZ8VIahUeVIqU77hSZgCBYlfIU1yyOXU=)
                          2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
                          3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: Jul 22 21:37:46 2026 GMT
            Not After : Jul 29 21:37:46 2026 GMT
        Subject: CN=6a61382a-3457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:45:a9:37:9a:0b:62:d8:b0:51:19:2a:79:
                    82:7a:83:81:28:bb:cc:9e:97:5f:1a:9e:cd:2c:70:
                    3d:b1:f3:2d:db:04:dc:88:fd:df:d4:82:b0:e1:67:
                    87:0b:0d:79:91:85:3a:76:0e:02:61:10:c9:ba:97:
                    79:62:6a:77:9a:ee:24:76:9c:62:39:12:58:4f:dc:
                    7d:24:ce:a3:b6:09:9d:5f:ed:c2:7b:a5:23:44:cd:
                    16:34:0c:08:3c:b8:e1:35:f0:ee:50:a7:97:5c:e3:
                    e9:53:12:18:33:02:ee:6b:31:0a:db:12:bf:40:c1:
                    1b:88:bf:22:2a:a9:b2:55:39:4d:3d:8d:7a:02:33:
                    65:51:5d:51:2d:ad:c2:f8:f5:4a:c8:1e:87:6e:07:
                    6e:41:fa:be:49:fd:06:8e:81:55:f8:d3:05:a6:b7:
                    41:95:c8:08:c5:7a:33:3a:71:f6:af:13:a5:63:33:
                    75:26:2a:9d:ae:e2:e8:2f:0e:30:f0:6f:f2:1e:c2:
                    d9:58:bd:0b:b8:65:fd:c4:dc:c9:c7:0d:e7:5c:22:
                    19:5a:6c:a2:03:fc:16:a0:24:c3:5c:af:db:a6:c3:
                    82:56:98:fc:6f:00:79:3e:09:e1:de:c3:d6:e3:c3:
                    18:98:85:e6:ce:7f:4f:fc:26:6a:ca:ce:7a:a6:ff:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:0F:CD:BC:00:52:E8:BF:9D:95:52:FF:10:B4:18:89:34:6A:07
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:60:0b:02:3c:3c:9c:ee:08:aa:8a:25:67:9a:67:f5:a5:cb:
         84:57:16:dd:23:87:ef:b3:30:da:64:65:a0:a6:a6:76:e0:e3:
         2f:69:4f:06:41:be:fb:18:8f:b8:de:68:92:b7:60:7a:b3:53:
         0a:06:4d:5c:e2:ce:e6:2c:77:77:6e:12:aa:15:2f:9e:97:9d:
         69:3c:67:b5:58:a3:9e:ad:a9:e3:22:4f:98:37:4b:d3:31:90:
         57:2e:ae:d9:a0:59:61:dd:05:7e:a5:e3:89:2e:f4:5c:88:c9:
         2f:60:e0:df:9e:c8:f9:88:79:1a:e0:9a:53:d5:24:68:85:4f:
         e0:32:63:6f:d1:a2:32:95:0f:ba:df:bf:57:cd:f9:db:15:90:
         26:a4:70:90:31:05:a7:7c:87:e2:43:63:86:49:88:11:63:3e:
         93:dc:56:fe:26:f6:40:91:88:ca:87:0a:05:f1:52:5b:9f:a3:
         df:9b:80:53:8f:39:e2:94:73:45:9a:16:64:9e:54:bb:6e:8b:
         70:20:28:c7:18:33:7e:16:f7:4b:b4:bf:f3:2d:cf:a3:bc:d8:
         e0:b3:c4:25:97:4b:9d:f7:b7:ca:d5:c5:a3:c4:38:a9:b5:57:
         dc:fc:2e:2b:46:47:be:01:1d:78:a4:fe:50:1b:e8:a0:fd:26:
         67:7b:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:48 2026 by rpki-client