Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
File:                     PM1fKKh57729PlX0wrzyjWzdWu4.mft (raw, json)
Hash identifier:          M3Yc/5YhWXY7uy1h72Mi6HBWndv1jwd3ExPsbL3qCOo=
Subject key identifier:   59:E9:CE:6C:5C:D4:81:BE:7F:E8:7D:46:37:4D:F4:8C:D0:2D:F1:5C
Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE
Certificate issuer:       /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
Certificate serial:       0894
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
Manifest number:          088A
Signing time:             Wed 22 Jul 2026 21:10:06 +0000
Manifest this update:     Wed 22 Jul 2026 21:10:06 +0000
Manifest next update:     Wed 29 Jul 2026 21:10:06 +0000
Files and hashes:         1: PM1fKKh57729PlX0wrzyjWzdWu4.crl (hash: N6qYZ+6fRB/LgesTDXCvA8J3zZOHYZLg9Gc9JrPlrPs=)
                          2: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (hash: XH4VYu53iAjrrjdTY4lzAuAVa7gNtCanU3skjDFNBQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl
                          rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE
        Validity
            Not Before: Jul 22 21:10:06 2026 GMT
            Not After : Jul 29 21:10:06 2026 GMT
        Subject: CN=6a6131ae-0884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:a1:97:c3:3f:0a:40:7d:ec:27:dc:20:bc:
                    b4:53:f7:dc:b5:40:25:b4:c2:1e:86:5e:0b:02:bc:
                    da:5e:62:f7:20:f3:37:0a:34:e2:40:80:be:2b:d0:
                    ff:be:37:89:16:71:50:26:89:17:2f:f2:54:f7:6f:
                    71:a2:7d:93:b5:32:5f:33:e7:f5:0a:ae:6a:4d:dc:
                    b2:66:a4:65:34:e8:1f:9f:15:f2:04:c1:0b:c7:da:
                    ab:52:20:b4:f8:b2:ee:37:b5:94:07:3e:f7:1e:09:
                    92:4a:f9:82:fa:cd:d7:1e:4a:99:71:df:d8:5b:ad:
                    00:27:f1:40:98:89:d5:d9:03:74:7c:8d:ea:54:e7:
                    cd:2b:88:54:7e:05:a2:cc:b2:ba:a6:ae:4f:88:ab:
                    1a:30:41:9c:d0:b3:1e:40:9d:c1:7c:3e:46:d6:43:
                    fd:0d:bb:5b:ec:77:22:10:16:cd:fd:0f:d7:10:6e:
                    2f:51:32:d2:22:0d:4b:c4:99:b4:e6:a1:56:51:cd:
                    59:e4:91:56:a9:5e:f5:4b:f8:9d:6a:18:11:7a:db:
                    e6:a2:8a:23:b6:ad:c6:4f:9e:8a:ff:bb:00:56:d3:
                    d2:4d:50:65:42:57:c9:72:49:94:cc:bd:1e:12:6b:
                    8d:ee:c4:01:5f:26:99:18:97:de:d0:ea:f2:3b:94:
                    7b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E9:CE:6C:5C:D4:81:BE:7F:E8:7D:46:37:4D:F4:8C:D0:2D:F1:5C
            X509v3 Authority Key Identifier:
                keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5e:f3:42:22:80:5f:87:4b:41:d3:ef:fe:3d:4f:f4:c0:27:
         26:41:a7:df:a4:bd:b4:aa:4a:14:1e:c4:98:27:4f:c5:3e:92:
         15:a7:30:a3:f7:46:f5:3f:45:b5:57:a1:83:73:aa:01:6f:85:
         71:5b:9b:c0:c9:f9:3a:1b:33:77:19:f9:bb:31:65:a7:f1:39:
         cd:65:77:14:26:7d:a6:a1:91:ee:ee:be:5c:0c:e9:5e:4c:9f:
         b3:ef:17:43:83:b7:f2:b3:1d:48:28:f4:6a:90:a5:79:93:3d:
         5e:f2:bb:b3:59:c3:11:96:d1:01:80:09:19:88:a4:df:82:35:
         da:c0:95:1b:6e:c7:8a:5e:28:5b:29:ce:82:a9:1b:c2:bf:74:
         8b:be:54:ac:2a:30:d8:63:0e:04:b6:00:99:3f:85:40:05:8c:
         8b:f0:6b:a7:55:6e:23:aa:37:7d:95:fd:8e:5f:90:c6:55:77:
         a5:55:c1:2e:cf:f5:65:5b:67:b9:7b:28:c1:cc:61:dc:b5:04:
         50:54:3a:5e:f1:3f:75:4c:19:e2:9d:b8:e8:64:d7:d4:60:a3:
         9d:34:54:52:1e:c9:55:57:9a:16:30:6c:73:e5:d8:72:b7:e1:
         b3:3b:bd:cc:cc:cd:6f:e2:e6:7f:d6:a1:6f:af:73:aa:3c:f3:
         70:f6:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:08 2026 by rpki-client