Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
File:                     PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json)
Hash identifier:          ajBY7LbVyjAqSqSmG2FDjXOhVexQ2q1pK4wnHvCWPmE=
Subject key identifier:   09:55:26:1A:CC:9C:86:8E:3F:62:E5:BA:BF:BF:19:5A:9F:0F:EB:E9
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Certificate issuer:       /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial:       0C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
Manifest number:          0C74
Signing time:             Wed 22 Jul 2026 18:58:08 +0000
Manifest this update:     Wed 22 Jul 2026 18:58:07 +0000
Manifest next update:     Wed 29 Jul 2026 18:58:07 +0000
Files and hashes:         1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: cIS3FthqIOex8J6lqP0vj4debJr5YsSNF6L7iPbGTL8=)
                          2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: CeFP4sSrL7pQBbEDj/02tRNGfcmmqQfD2Lb6qkPSS2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
                          rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
        Validity
            Not Before: Jul 22 18:58:07 2026 GMT
            Not After : Jul 29 18:58:07 2026 GMT
        Subject: CN=6a6112c0-bec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:3c:10:f4:fc:88:ad:13:c5:32:43:10:ae:
                    b9:95:d0:f8:8b:ec:58:db:8a:6d:e4:e6:92:ca:a1:
                    34:85:e6:b0:1e:17:b1:d4:a4:b4:f0:01:be:c0:3d:
                    3c:4d:14:f8:75:1b:dd:38:0c:e3:a5:79:fd:6b:8e:
                    85:e5:0b:41:b0:91:7d:4b:56:8c:6a:18:f2:67:fa:
                    31:73:64:9e:e8:e4:03:a8:42:44:4d:c4:ec:03:fe:
                    c7:74:67:bd:22:cf:4b:1d:af:28:d4:a7:3f:ef:25:
                    25:51:f3:13:4f:d5:3e:1e:71:dc:54:56:4c:a1:ef:
                    a0:54:71:96:49:53:d2:08:9a:32:02:ab:a9:be:64:
                    8e:d3:5b:c2:1f:da:e0:6c:a9:90:37:64:4f:a9:09:
                    d7:5e:2d:b2:f8:a7:20:57:0f:a9:94:5e:74:48:00:
                    a0:eb:17:76:7f:89:03:86:a9:d9:5e:37:74:a1:7b:
                    6a:82:4b:a8:44:f6:3f:d4:3d:d9:2c:aa:33:29:9e:
                    34:9c:9f:07:c7:da:3d:1d:6d:b4:60:db:72:74:38:
                    84:28:75:9f:57:4c:63:44:79:b3:c8:0f:d2:86:4a:
                    f9:cc:01:60:de:07:36:5d:bb:5f:4f:8f:7a:4c:a3:
                    a1:1c:04:9d:e9:28:44:37:17:30:f8:26:46:6a:a4:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:26:1A:CC:9C:86:8E:3F:62:E5:BA:BF:BF:19:5A:9F:0F:EB:E9
            X509v3 Authority Key Identifier:
                keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:a6:51:fa:e7:be:9a:76:10:fd:05:11:a2:d9:da:3b:82:
         a6:ef:75:a9:da:e4:a5:e5:02:1d:5c:3a:de:b1:b8:f7:ee:3e:
         7f:fb:49:05:0e:41:7c:2d:6f:f8:84:9f:b8:d4:cb:c0:76:7f:
         b5:e8:ef:e6:e1:ac:27:e4:8d:f0:6e:df:bc:93:92:be:c9:6c:
         8e:e2:bf:73:fe:b1:e4:cd:c9:36:7f:39:7c:87:73:bc:5a:65:
         0e:45:1b:60:06:39:8d:96:16:6a:6e:80:5c:47:20:c4:39:d3:
         62:4a:ce:46:19:0a:26:43:1d:79:63:ea:1b:ff:64:2e:c9:49:
         f1:57:b1:c4:5f:8c:f7:61:a6:06:ec:f4:9a:7a:46:68:dd:f5:
         c4:62:82:a5:83:51:00:21:45:be:43:05:fa:51:06:51:19:50:
         04:fb:1c:23:13:e8:1d:cf:95:65:00:23:96:98:b4:2c:92:f6:
         8b:70:0e:b2:fa:ff:cb:36:08:82:52:62:68:50:45:be:d0:3e:
         bb:49:86:82:32:f1:c8:f1:1e:67:d2:c7:5a:0e:06:3e:7a:ce:
         d0:6b:7f:bf:6c:d4:77:2d:ff:9b:84:db:63:6c:98:72:49:5f:
         b7:ca:8a:88:ee:0d:ba:59:de:17:38:7b:20:95:96:a0:5b:fe:
         15:fd:31:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:16 2026 by rpki-client