Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File:                     Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier:          g7qLIzb4pmeXDbwY9+M1SCGCBoAlKCB+ZArZj7TWNoo=
Subject key identifier:   8E:F2:61:7B:42:31:05:7A:F6:DD:36:3E:83:E5:79:81:E7:BB:C9:D8
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer:       /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial:       03F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number:          03D4
Signing time:             Thu 23 Jul 2026 01:28:55 +0000
Manifest this update:     Thu 23 Jul 2026 01:28:54 +0000
Manifest next update:     Thu 30 Jul 2026 01:28:54 +0000
Files and hashes:         1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: gw6YsLqJRi2+jZm43lLMFFIe3RuglhZ94YCDn1JY8+M=)
                          2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: Bba3ux72e27e1jQ1j28aUjisSioDvxuoxGTwro6zTXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
        Validity
            Not Before: Jul 23 01:28:54 2026 GMT
            Not After : Jul 30 01:28:54 2026 GMT
        Subject: CN=6a616e57-26b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:5a:03:5d:00:df:b8:e8:12:7e:fd:eb:62:
                    67:e6:fd:37:0e:9b:72:6c:9a:7b:ed:83:e6:bd:32:
                    f7:87:15:3d:00:27:e2:10:aa:f5:b3:cf:d1:13:4f:
                    10:d5:6b:c5:7c:9d:ba:4a:66:fe:30:95:0f:af:9b:
                    c4:70:57:d5:49:66:f4:84:2c:15:01:cd:28:7f:4a:
                    0c:4a:b7:85:fe:83:a2:2e:ba:de:56:d7:13:68:b8:
                    96:1b:82:fd:3f:4f:7c:13:f4:a1:bf:fb:b9:3e:12:
                    cd:41:48:c1:92:c5:9e:c8:8e:d4:cf:6f:ac:a3:e5:
                    53:55:ee:07:53:22:a9:f7:9f:68:1b:69:68:25:e4:
                    25:e6:f5:0f:86:e2:1f:1d:62:e5:0e:77:d3:db:9c:
                    f0:80:79:b6:62:fa:c9:12:22:cb:e3:ea:64:bb:73:
                    4d:ea:a4:ec:56:cc:55:25:0b:07:34:41:28:61:fc:
                    52:eb:7d:57:28:8a:d1:6c:db:9a:53:7a:2e:4c:d8:
                    90:e9:b3:ec:93:6a:2a:fc:33:f8:8a:93:96:1c:e1:
                    08:f4:e0:66:90:72:ce:12:01:9b:ce:58:f5:6e:56:
                    b4:42:a1:b3:bd:11:0a:a6:e5:94:66:eb:30:c7:b7:
                    2f:e8:54:75:42:46:1f:11:8c:c2:08:b9:cf:c0:7c:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:61:7B:42:31:05:7A:F6:DD:36:3E:83:E5:79:81:E7:BB:C9:D8
            X509v3 Authority Key Identifier:
                keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:cd:0e:f1:83:4b:ce:7c:11:6e:eb:44:bb:7e:41:24:2b:
         25:a6:09:7a:21:a0:84:cc:35:34:dc:8c:53:68:bb:30:a0:d6:
         a0:53:b3:d2:fe:08:ec:8e:7d:3d:82:72:04:0a:2a:7d:b2:d2:
         6e:b5:26:13:39:73:3d:1a:ea:4f:bf:f9:b5:0b:2c:5e:cb:ed:
         4c:e6:f8:d2:4d:c4:31:95:67:69:0a:00:09:b3:5c:cf:37:7a:
         73:77:7d:a7:87:00:2b:d3:c4:20:f6:f4:2d:f9:5f:af:d4:c6:
         02:cb:24:a0:91:00:15:fd:a6:2a:8b:b7:8e:65:ad:14:21:1c:
         13:38:76:27:a8:de:01:df:c2:45:47:e1:1d:c9:ac:41:c7:02:
         a5:91:b4:d9:c1:c0:93:23:fb:45:83:70:cd:59:cd:da:9a:2d:
         2c:ff:3d:0f:04:08:9e:73:63:6a:d2:a9:b7:aa:a8:6c:7f:fe:
         a2:b9:e4:fd:fd:d1:18:94:e9:2e:d3:e0:35:7e:fe:fa:e8:b9:
         02:17:d0:d4:81:c1:c6:ac:dc:6f:66:03:a5:7f:40:f5:b5:d5:
         39:a2:fa:2f:13:23:8e:72:a9:d7:46:b9:c6:ae:01:ed:28:2b:
         84:8d:be:78:a1:8e:51:f3:8b:5c:25:9f:4f:01:f2:5b:28:10:
         dc:0b:41:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:38 2026 by rpki-client