Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
File:                     PFRw6B-koZCHAh0K130zbOvipo0.mft (raw, json)
Hash identifier:          +C47d/lYtyuOEJZcYA8Jv1dr12j5gHTWrjxpzKTgAIk=
Subject key identifier:   DF:AD:97:A1:20:71:9E:5A:6D:CD:DF:B6:57:00:05:AB:A4:8C:6F:CE
Authority key identifier: 3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
Certificate issuer:       /CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
Certificate serial:       1BBC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
Manifest number:          1BB9
Signing time:             Wed 22 Jul 2026 16:20:19 +0000
Manifest this update:     Wed 22 Jul 2026 16:20:19 +0000
Manifest next update:     Wed 29 Jul 2026 16:20:19 +0000
Files and hashes:         1: PFRw6B-koZCHAh0K130zbOvipo0.crl (hash: eMrZ0mY34HoaDATVLd+U6eVKJTFGFG/FfP1wPqf/nUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl
                          rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7100 (0x1bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3, serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
        Validity
            Not Before: Jul 22 16:20:19 2026 GMT
            Not After : Jul 29 16:20:19 2026 GMT
        Subject: CN=6a60edc3-3142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:a8:0e:88:24:2e:d5:ba:74:e2:e1:14:34:
                    9e:c6:77:a6:c5:b5:a3:f5:8a:d0:7e:5a:34:a4:21:
                    f2:f3:6b:61:bd:ee:74:cb:cc:55:2f:3f:4a:02:a4:
                    0d:7c:e0:83:59:ce:55:74:d1:97:8d:67:a1:eb:3a:
                    63:2c:fe:a9:af:85:82:f4:b7:71:ab:b1:89:14:36:
                    e9:57:a5:9c:7b:81:49:13:c5:ed:e2:ff:14:00:ba:
                    c7:30:d6:e8:12:29:22:d4:88:17:e2:9a:a3:76:cb:
                    94:36:ca:18:3d:f3:cc:bf:5b:ad:4c:e8:86:84:33:
                    d5:ed:7a:12:82:da:69:d7:0a:aa:85:05:74:13:19:
                    4c:51:13:7d:71:5e:17:3c:0e:86:8d:47:49:39:c3:
                    47:0e:71:2e:7e:f1:bc:83:b7:5f:06:21:6a:70:85:
                    d8:a4:0e:18:44:87:4c:ce:2d:62:b2:53:18:0d:a9:
                    f2:23:87:94:7d:62:00:a5:35:7c:52:ae:0d:9b:16:
                    99:71:d8:1a:fb:d3:3d:e5:77:14:7e:d5:93:d5:dd:
                    a5:96:d3:d2:04:00:5e:ba:a5:34:41:33:b3:01:53:
                    00:f2:fa:e1:90:bf:d6:ca:9d:f3:d3:17:19:88:9d:
                    62:49:dd:b7:52:c1:53:16:b8:53:44:86:fd:1f:bd:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AD:97:A1:20:71:9E:5A:6D:CD:DF:B6:57:00:05:AB:A4:8C:6F:CE
            X509v3 Authority Key Identifier:
                keyid:3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0e:24:ed:6d:cb:7b:d5:59:b4:19:a2:ed:9a:ee:fe:e1:f9:
         2f:76:8c:ef:2e:32:21:14:d1:00:46:d2:09:04:2a:c1:8f:ed:
         e1:a1:10:76:6f:02:32:25:65:ab:c4:80:e1:02:e2:e1:87:69:
         5e:e7:d7:89:a8:bb:07:1e:bd:65:a1:d9:e6:60:d0:d0:bf:39:
         8e:ce:ab:b9:87:a0:a4:be:c2:32:ff:b9:2f:bb:99:61:f9:b0:
         4d:3b:9a:dd:25:0e:60:e6:00:23:c6:f3:ae:68:50:f7:c4:5b:
         24:a0:50:ca:c4:09:29:cc:81:69:d4:d8:88:6d:dd:ae:6f:ae:
         54:f1:f4:23:28:0c:b2:13:90:a0:cd:02:da:ef:ea:e3:38:f2:
         6f:ac:86:31:c5:9d:d7:76:38:5f:2e:15:10:ed:95:f0:82:c4:
         26:73:28:23:8b:87:d0:69:b6:ac:9e:ea:e1:b2:f5:55:e4:33:
         3c:58:14:4e:f1:d7:ca:21:e3:0e:b4:fb:ca:25:68:c6:89:e8:
         56:1b:52:f9:db:ac:36:e3:3d:7b:74:ad:9e:50:38:6e:85:b6:
         b5:e9:98:87:a2:9a:09:b1:6e:7a:07:b5:ec:4e:00:57:a0:a7:
         b5:b0:35:c9:de:bf:08:df:54:69:6e:b6:17:cf:34:9f:b6:a6:
         55:75:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:31 2026 by rpki-client