Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
File:                     PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json)
Hash identifier:          MquiFdtlS92VEzS5TWTxKRG+V9Xn6yr4akjr5DvhODo=
Subject key identifier:   7C:31:B6:18:B7:B5:68:0E:94:0E:41:0B:CB:FE:64:6A:38:2A:00:B4
Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE
Certificate issuer:       /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
Manifest number:          6B
Signing time:             Thu 23 Jul 2026 09:54:46 +0000
Manifest this update:     Thu 23 Jul 2026 09:54:46 +0000
Manifest next update:     Thu 30 Jul 2026 09:54:46 +0000
Files and hashes:         1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: 1Hhr0hOkBvsQH4uMoPmDMlJQZXiAaWLBR+283H5MsgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl
                          rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
        Validity
            Not Before: Jul 23 09:54:46 2026 GMT
            Not After : Jul 30 09:54:46 2026 GMT
        Subject: CN=6a61e4e6-ae73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:53:76:6f:c6:3a:3a:f1:57:97:28:77:a1:90:
                    c0:03:a0:d8:85:0c:d3:31:2d:d5:38:61:c2:d5:b7:
                    6c:b2:50:d9:e2:48:9f:71:1e:dc:50:77:a7:c6:33:
                    9d:28:2a:ae:35:d5:78:a9:70:12:e6:9b:9c:79:0b:
                    ff:30:a8:21:3d:4b:05:88:d2:d8:3a:20:7f:79:43:
                    55:c1:f4:6a:60:d8:33:91:d7:06:cc:6d:51:30:12:
                    91:7f:0a:3b:70:8b:01:d5:9e:c1:ac:1f:9c:b7:5d:
                    33:af:02:96:98:13:2f:b6:b4:53:d9:c1:a3:91:b9:
                    9d:66:6f:63:bb:35:3d:35:ed:67:20:47:bb:b3:ce:
                    c3:72:66:35:01:25:96:f0:6f:58:98:61:d7:50:99:
                    ed:50:41:b8:6a:0e:87:b7:9a:f3:45:aa:e0:f0:9a:
                    4b:6d:5a:d1:6d:0a:07:e3:31:5f:f2:b3:69:a8:70:
                    70:e0:92:41:63:e7:ec:5c:cc:49:4c:bc:9e:c3:c1:
                    8f:40:ce:f5:c0:ad:7e:4e:70:32:6c:19:23:6f:98:
                    07:31:cf:9c:c5:87:c3:e5:24:87:7b:d9:8f:73:c9:
                    80:64:9c:7b:87:f9:9e:e3:72:a3:af:6a:92:f0:db:
                    04:7b:bf:50:b7:1d:e9:0f:49:38:3a:f6:8f:9d:73:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:31:B6:18:B7:B5:68:0E:94:0E:41:0B:CB:FE:64:6A:38:2A:00:B4
            X509v3 Authority Key Identifier:
                keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:3d:dc:2f:5e:fb:c5:b6:0c:43:1e:01:72:fd:41:ee:08:
         cc:b7:69:9a:1d:73:a2:88:81:5a:02:06:52:8d:4f:47:0e:a8:
         30:4d:9a:8d:ee:f4:12:ce:7b:81:54:b1:60:4b:79:d5:60:cc:
         5a:a9:61:61:5e:d2:da:53:e9:7e:13:64:db:eb:5b:4d:13:68:
         c3:80:b5:46:19:96:1f:b5:ec:05:d9:f9:0b:69:75:35:7d:e8:
         16:80:75:d3:bb:03:cd:78:67:8e:ac:fc:57:77:6d:e9:a4:ae:
         93:27:51:b5:8b:b8:25:7e:e0:22:33:51:b0:d6:57:ea:d1:29:
         e7:d8:c9:a7:66:86:65:f0:dd:91:4e:1b:95:af:15:20:76:76:
         1e:3a:fb:78:0d:9e:71:5a:e7:ca:07:59:63:c2:37:71:6e:9a:
         e0:26:20:46:6e:ae:1e:ee:2f:5e:85:6b:ee:dc:e4:f2:47:6d:
         56:ba:02:ca:16:e1:e1:8e:4b:10:c1:9f:87:c7:52:80:93:7a:
         f3:ea:3f:f7:54:d8:cf:9f:79:89:80:3a:05:14:00:ba:c9:b0:
         b6:f6:61:ec:73:e4:e9:ce:34:aa:b8:68:c1:77:e3:25:aa:53:
         e9:fd:7a:f6:5b:e1:ce:c5:23:b0:54:79:75:fb:15:68:93:c2:
         fd:c6:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:46:52 2026 by rpki-client