Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
File:                     PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json)
Hash identifier:          /76QmpuM6SLEeB6Z2V/EFbfRMSmK7SuAuWZnDIaosOg=
Subject key identifier:   25:2C:7F:05:B3:35:30:20:46:CE:17:77:8F:E7:91:BD:5E:23:BB:DB
Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29
Certificate issuer:       /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
Certificate serial:       0427
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
Manifest number:          0420
Signing time:             Thu 23 Jul 2026 01:12:34 +0000
Manifest this update:     Thu 23 Jul 2026 01:12:34 +0000
Manifest next update:     Thu 30 Jul 2026 01:12:34 +0000
Files and hashes:         1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: PWVNW+fD9T4RANtYnAi637h3jD9yaz+YXdnTEgcNSLk=)
                          2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: lCNfDmCO6Vy6uu5QW43aJqJrNK0XuY+KKPY1oeY2SkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl
                          rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129
        Validity
            Not Before: Jul 23 01:12:34 2026 GMT
            Not After : Jul 30 01:12:34 2026 GMT
        Subject: CN=6a616a82-a4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:1c:a3:13:2d:bf:19:6d:55:06:85:83:46:
                    f9:bd:11:62:06:b4:39:72:cd:71:3f:0c:82:39:e8:
                    db:a5:81:4f:23:96:c3:cf:7e:ac:1c:48:df:c5:c0:
                    4f:12:a9:63:ce:97:4a:60:93:25:72:91:14:8b:21:
                    82:24:26:a0:e8:b9:f4:25:32:f8:69:23:3a:6f:f3:
                    f9:60:db:a3:eb:27:68:d4:74:5d:e4:38:5f:21:87:
                    17:89:b3:7c:36:11:77:ea:be:9d:3f:bb:0e:37:3b:
                    bb:76:c8:5b:af:9e:11:d1:30:c7:53:c6:08:cd:7f:
                    31:a6:dd:51:11:9c:63:9c:18:54:54:5d:69:c7:ca:
                    16:a3:20:9c:db:fa:ec:d4:da:cc:84:26:1e:78:ef:
                    e4:20:d1:75:22:50:f3:85:75:fe:84:28:ba:d7:2f:
                    c3:b4:9d:c7:5f:c5:1e:c0:6c:af:bc:85:c9:08:5d:
                    1d:77:96:d2:66:1d:83:39:66:65:4c:b6:64:a3:ef:
                    61:58:8e:15:c3:ac:1b:82:23:04:4d:3c:8d:2d:70:
                    26:90:ad:12:bc:db:28:f9:6e:7b:22:5a:ba:6e:8d:
                    88:4f:de:3f:9f:b6:c9:1a:00:e9:33:4d:0b:f1:78:
                    19:f9:92:95:da:19:93:24:58:a1:16:f6:7a:af:4e:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2C:7F:05:B3:35:30:20:46:CE:17:77:8F:E7:91:BD:5E:23:BB:DB
            X509v3 Authority Key Identifier:
                keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:b0:cd:07:8f:cc:6c:a8:72:6f:62:9a:7e:5f:9b:c4:cc:
         36:af:c5:42:5c:ce:8e:99:38:e4:64:f4:04:fb:18:f6:1a:f1:
         db:36:b1:49:0e:28:5c:a8:2d:a5:cc:bc:c4:02:9b:73:8e:18:
         70:6b:74:f3:20:db:a4:01:0f:45:2a:ce:90:24:3f:2d:ab:04:
         97:56:90:fc:9a:bb:0d:f8:10:30:13:c5:32:81:d5:17:27:de:
         91:b5:e6:3c:ad:c7:30:b8:f2:c9:89:6d:77:7c:5e:7b:9c:36:
         6a:ff:05:3b:ff:47:10:d9:45:b6:55:5d:03:f5:85:80:b5:d0:
         99:11:55:a2:06:06:85:2c:10:b3:eb:60:c5:91:8c:28:90:f4:
         0a:33:98:4d:4a:f2:7a:e3:00:ed:03:be:b9:48:5e:71:a1:ba:
         ab:a2:c3:1e:8a:4e:4f:bc:02:b6:9f:12:44:e0:bb:37:73:5e:
         4a:09:69:d3:a0:11:04:80:e0:ba:ff:ac:c4:ed:42:1c:9c:20:
         24:d8:4a:2b:69:60:d2:fa:f1:b4:67:46:fd:05:30:98:14:53:
         68:3b:e2:7a:19:96:f4:49:0c:d3:fb:ce:2e:d2:10:94:a0:0b:
         ba:df:61:32:37:e4:d8:5d:de:fc:bd:be:29:c7:73:b1:48:dc:
         fc:51:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:54 2026 by rpki-client