Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
File:                     PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json)
Hash identifier:          grae2haWNIDy6d35WbCYRgGu1+4qPMiZP0/c0vU2jq8=
Subject key identifier:   0C:BE:A0:34:68:67:C9:E9:3D:63:1F:97:0B:89:11:AC:AD:03:7D:54
Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE
Certificate issuer:       /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
Manifest number:          8C
Signing time:             Fri 25 Sep 2026 07:40:22 +0000
Manifest this update:     Fri 25 Sep 2026 07:40:22 +0000
Manifest next update:     Fri 02 Oct 2026 07:40:22 +0000
Files and hashes:         1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: JW/rRJZMB5LAsdUIdX3eosKB5DJVNce42wKU2oaDUqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl
                          rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
        Validity
            Not Before: Sep 25 07:40:22 2026 GMT
            Not After : Oct  2 07:40:22 2026 GMT
        Subject: CN=6ab62566-6584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:af:2c:be:3f:5c:56:f2:4f:e8:e3:24:5d:
                    de:e9:08:3a:92:57:9d:e7:24:ee:fb:04:ea:2f:b4:
                    4f:42:9b:20:59:f2:71:b6:d3:a1:fb:3b:96:6f:8c:
                    9c:4d:5c:98:30:71:6c:24:e1:b1:e9:65:a4:53:b7:
                    08:4d:cd:9d:1c:20:eb:c9:32:f0:3a:59:88:ac:dc:
                    50:1c:43:73:b1:93:dc:9b:64:0c:95:b5:c0:07:49:
                    9b:18:f5:dd:8f:99:95:7c:3e:cf:74:8c:4f:03:5e:
                    66:6c:8f:f3:d4:f8:9d:f4:60:86:e3:3b:f5:10:7e:
                    5d:af:81:32:4d:24:e5:0f:5b:d4:05:eb:0b:fd:be:
                    a7:2c:fe:44:e8:b9:39:07:e6:2e:51:c5:f1:63:30:
                    f4:ea:2d:3a:3e:13:bc:01:1a:81:90:bf:ff:ad:9c:
                    38:0d:8f:d7:5c:e7:66:9b:35:ef:2b:16:b2:75:ff:
                    d7:bf:69:a0:05:8c:b7:80:f3:e7:d0:0c:05:c4:62:
                    fb:c8:29:95:a0:ca:53:d1:2b:84:1f:23:78:36:2c:
                    ae:5f:86:ec:92:f0:1a:2c:17:67:69:af:b1:e4:df:
                    ec:36:9d:00:35:b1:7b:d6:80:05:13:6a:5e:b3:54:
                    cd:97:cf:c3:96:7c:eb:c3:f5:03:5e:ea:6e:ce:91:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:A0:34:68:67:C9:E9:3D:63:1F:97:0B:89:11:AC:AD:03:7D:54
            X509v3 Authority Key Identifier:
                keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:52:5a:fa:f5:be:dd:cc:70:e6:94:30:16:d2:e7:aa:a8:f0:
         83:a8:99:e6:3d:5e:65:0d:ad:f0:63:a2:f5:b8:19:3b:57:b5:
         70:05:52:6a:09:42:69:ed:a8:6b:dd:73:3d:c6:dd:6e:36:82:
         ca:d1:df:d7:87:e8:0a:5b:66:b9:d1:4c:79:bc:c1:5c:38:b0:
         73:3a:05:1b:2d:23:04:c8:9c:aa:71:74:4e:54:2f:c8:c8:47:
         d9:30:5b:09:a5:d0:0a:e2:e9:f7:aa:3f:d0:86:e9:f8:85:c7:
         5b:eb:19:4b:a6:92:1a:01:a1:ce:f2:54:48:d5:22:97:02:aa:
         8c:9d:91:a9:69:54:c8:fa:bf:7a:9b:79:10:95:c9:1e:c4:6a:
         7d:39:66:9d:4f:6a:0e:87:d3:c7:61:68:c0:f0:72:a5:cc:af:
         50:a6:93:e9:c7:9a:5e:ce:04:94:49:c9:b3:96:8d:e3:71:8f:
         d1:d6:25:8f:aa:de:fe:0f:fe:a9:bf:93:4f:32:93:12:6d:45:
         82:00:4e:d1:0b:63:fe:e3:d6:d0:c7:03:2b:6d:81:cf:d7:16:
         a8:30:9d:67:cf:ae:a6:81:81:20:b9:f3:fa:41:35:12:6e:ed:
         0c:cf:b5:2b:80:77:54:4f:59:1a:ac:d3:18:31:c5:a2:17:bd:
         72:d6:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:49:57 2026 by rpki-client