Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
File:                     PxmdXjbAMtlxfGzB9r9SYBcovW0.mft (raw, json)
Hash identifier:          px3vT9pX8CcmTzpZABLtOl5nXuwS+dX+RUZr4VqLTTU=
Subject key identifier:   46:6A:B1:0A:74:82:E4:7F:08:FF:31:5E:D8:7F:4A:49:AB:DC:5B:55
Authority key identifier: 3F:19:9D:5E:36:C0:32:D9:71:7C:6C:C1:F6:BF:52:60:17:28:BD:6D
Certificate issuer:       /CN=A9177B33/serialNumber=3F199D5E36C032D9717C6CC1F6BF52601728BD6D
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
Manifest number:          2A
Signing time:             Thu 23 Jul 2026 10:48:40 +0000
Manifest this update:     Thu 23 Jul 2026 10:48:40 +0000
Manifest next update:     Thu 30 Jul 2026 10:48:40 +0000
Files and hashes:         1: PxmdXjbAMtlxfGzB9r9SYBcovW0.crl (hash: UMNy8zuz0/u9jesXw+6mzAZfCgKHw8XqOIXPdAqkZYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.crl
                          rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177B33, serialNumber=3F199D5E36C032D9717C6CC1F6BF52601728BD6D
        Validity
            Not Before: Jul 23 10:48:40 2026 GMT
            Not After : Jul 30 10:48:40 2026 GMT
        Subject: CN=6a61f188-de92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:43:8c:98:91:49:77:36:56:ff:21:4f:8a:
                    05:53:3c:03:e3:67:fe:84:92:bb:aa:11:19:81:e1:
                    b9:ea:a5:8a:b1:2c:3c:ba:5e:d6:5f:98:03:ea:7c:
                    62:ab:31:7d:75:63:91:15:f8:89:c5:f9:63:4d:fa:
                    65:97:8f:bb:ec:1d:ef:64:c0:d0:1b:c4:a7:96:6e:
                    55:21:2d:9f:d4:46:a9:16:52:65:d9:f1:05:51:a0:
                    fc:f6:87:8f:19:14:a4:d7:5a:14:89:f4:cb:12:da:
                    e7:ca:63:47:71:bd:59:ed:f0:4d:d5:ef:6c:1d:20:
                    51:f8:f5:47:42:7a:83:a5:7f:f9:14:02:44:bd:e1:
                    9e:8b:3d:c8:b3:73:14:35:fe:37:62:f7:a3:b3:28:
                    f1:b7:2e:8c:5f:31:62:70:76:8e:de:a0:e0:cb:a5:
                    41:64:84:3d:94:80:fd:85:55:cb:54:25:29:1b:64:
                    e0:9c:b7:d8:d7:14:94:99:40:31:2d:cf:c2:95:0e:
                    bc:8d:e1:22:92:7b:4a:b5:b7:88:01:7b:a5:be:98:
                    77:d1:d1:1d:8d:7b:3d:79:2a:36:5e:98:1c:d8:23:
                    ee:e5:9d:02:62:c0:0d:d3:36:cb:74:db:ff:85:8a:
                    a6:3e:4c:47:af:4b:75:a9:4d:5b:0b:28:bd:be:b5:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:B1:0A:74:82:E4:7F:08:FF:31:5E:D8:7F:4A:49:AB:DC:5B:55
            X509v3 Authority Key Identifier:
                keyid:3F:19:9D:5E:36:C0:32:D9:71:7C:6C:C1:F6:BF:52:60:17:28:BD:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:77:63:70:fe:2e:a0:cb:8e:eb:9c:31:03:ab:4f:e8:2e:e3:
         c4:85:54:5f:9d:9d:fe:0a:fa:55:bc:79:df:cb:4f:4c:4d:e5:
         0f:dc:86:42:a8:0c:ac:9e:15:cf:56:20:c4:b9:ff:ef:12:dd:
         03:b5:5e:38:23:af:64:cb:d2:16:a8:0a:95:6b:e5:f7:09:cb:
         4c:b5:1c:ca:9e:5e:74:bd:0a:d0:f4:6a:ea:2e:67:ad:16:c9:
         db:5f:5b:38:77:81:79:7e:45:a4:2c:b8:c9:a1:57:cc:d5:b7:
         06:ac:83:18:21:d5:77:ef:ad:2a:b6:5d:ac:b9:4e:1b:da:4b:
         e0:4a:96:d0:45:4c:98:df:b0:07:ef:35:71:35:68:f1:b0:5c:
         40:a7:e8:61:eb:ea:b3:fd:ee:b4:bd:60:ab:e9:55:65:36:38:
         37:6a:ac:e8:39:a1:6b:f4:43:87:7a:80:2f:fe:f5:09:e9:7a:
         a5:07:f4:e2:c7:65:77:c3:01:5e:31:8e:c8:47:02:eb:1d:a0:
         6a:0a:86:c4:fd:02:20:fa:0c:5b:c8:72:4f:e0:dd:f1:ec:6f:
         03:93:a0:58:3f:d2:19:b3:18:f4:5e:a7:81:41:a7:82:74:3c:
         04:46:c1:fb:f4:43:cb:15:44:dd:fd:81:5a:b1:c6:42:9d:2c:
         ca:42:9f:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0IzMzExMC8GA1UEBRMoM0YxOTlENUUzNkMwMzJEOTcxN0M2Q0MxRjZCRjUyNjAx
NzI4QkQ2RDAeFw0yNjA3MjMxMDQ4NDBaFw0yNjA3MzAxMDQ4NDBaMBgxFjAUBgNV
BAMTDTZhNjFmMTg4LWRlOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClvEOMmJFJdzZW/yFPigVTPAPjZ/6EkruqERmB4bnqpYqxLDy6XtZfmAPqfGKr
MX11Y5EV+InF+WNN+mWXj7vsHe9kwNAbxKeWblUhLZ/URqkWUmXZ8QVRoPz2h48Z
FKTXWhSJ9MsS2ufKY0dxvVnt8E3V72wdIFH49UdCeoOlf/kUAkS94Z6LPcizcxQ1
/jdi96OzKPG3LoxfMWJwdo7eoODLpUFkhD2UgP2FVctUJSkbZOCct9jXFJSZQDEt
z8KVDryN4SKSe0q1t4gBe6W+mHfR0R2Nez15KjZemBzYI+7lnQJiwA3TNst02/+F
iqY+TEevS3WpTVsLKL2+tQO/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURmqxCnSC
5H8I/zFe2H9KSavcW1UwHwYDVR0jBBgwFoAUPxmdXjbAMtlxfGzB9r9SYBcovW0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QjMzL0VERkFCMTZBNDUw
OTExRjFBMEQxNUZEODkxODMzNzczL1B4bWRYamJBTXRseGZHekI5cjlTWUJjb3ZX
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUHhtZFhqYkFNdGx4Zkd6QjlyOVNZQmNvdlcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
QjMzL0VERkFCMTZBNDUwOTExRjFBMEQxNUZEODkxODMzNzczL1B4bWRYamJBTXRs
eGZHekI5cjlTWUJjb3ZXMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCrd2Nw/i6gy47rnDEDq0/oLuPEhVRfnZ3+CvpVvHnfy09MTeUP3IZCqAysnhXP
ViDEuf/vEt0DtV44I69ky9IWqAqVa+X3CctMtRzKnl50vQrQ9GrqLmetFsnbX1s4
d4F5fkWkLLjJoVfM1bcGrIMYIdV3760qtl2suU4b2kvgSpbQRUyY37AH7zVxNWjx
sFxAp+hh6+qz/e60vWCr6VVlNjg3aqzoOaFr9EOHeoAv/vUJ6XqlB/Tix2V3wwFe
MY7IRwLrHaBqCobE/QIg+gxbyHJP4N3x7G8Dk6BYP9IZsxj0XqeBQaeCdDwERsH7
9EPLFUTd/YFascZCnSzKQp/o
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:49 2026 by rpki-client