Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File:                     _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier:          KBJy9yiZ3yjagN2KgFPWt//Bf1v7S+csV6J9ZJkGSs4=
Subject key identifier:   7C:B4:21:04:1D:2F:26:F1:D0:6F:5C:4B:2E:D8:BD:30:E6:71:00:2E
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer:       /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number:          76
Signing time:             Mon 27 Jul 2026 10:08:59 +0000
Manifest this update:     Mon 27 Jul 2026 10:08:59 +0000
Manifest next update:     Mon 03 Aug 2026 10:08:59 +0000
Files and hashes:         1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: z77EFCm99MwI6stDYXYQMgNz4/K2fSsFTmB0j79hScc=)
                          2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
                          rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
        Validity
            Not Before: Jul 27 10:08:59 2026 GMT
            Not After : Aug  3 10:08:59 2026 GMT
        Subject: CN=6a672e3b-8d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:f0:a5:4d:20:0f:b7:87:fa:20:82:18:c7:
                    aa:ac:3d:5d:15:e3:cc:aa:06:27:c1:d2:d9:14:42:
                    7e:cc:ae:f9:ab:85:60:77:84:d9:a0:f4:e2:f9:4d:
                    6e:31:21:16:2a:4c:c5:29:20:b0:17:8e:77:c1:00:
                    7a:bd:4d:7f:96:51:66:e0:d2:f9:da:a7:4d:31:4c:
                    02:66:27:8d:d3:04:1d:fe:76:12:e2:d5:62:c7:38:
                    8d:f9:47:ee:89:ec:32:f8:63:0a:a9:8a:73:c6:23:
                    6a:c1:1f:6e:9d:47:f3:12:b3:48:c1:de:c6:a8:aa:
                    7a:aa:0a:00:4c:92:1f:35:b0:61:c5:c3:89:80:2e:
                    03:ac:92:38:26:a1:21:97:1f:3b:40:fe:ff:30:2c:
                    c2:56:3a:3a:d7:a2:0f:00:5c:7d:bf:21:80:8d:ef:
                    8e:51:35:ca:0f:04:64:38:78:86:cb:38:88:64:fe:
                    7a:80:52:2c:3a:7b:50:c6:21:b0:0a:af:94:4d:71:
                    d8:ec:42:a6:f2:0f:70:5d:bb:fd:79:25:67:94:b8:
                    6d:a8:d4:7c:e4:71:c7:20:e4:0b:b2:d7:6f:92:c5:
                    62:81:2b:10:d3:5d:c8:03:2d:33:e5:62:dd:16:2c:
                    27:59:35:cb:19:42:da:54:f1:0b:d7:40:f2:73:68:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:21:04:1D:2F:26:F1:D0:6F:5C:4B:2E:D8:BD:30:E6:71:00:2E
            X509v3 Authority Key Identifier:
                keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:9f:ce:ad:34:87:70:b4:63:ff:a3:04:1b:39:18:c8:8a:
         11:69:39:bf:de:58:49:bf:05:cf:33:92:b3:9d:8f:fd:4e:c7:
         d7:66:e3:04:c7:6b:07:dd:70:50:d9:68:12:44:a1:ea:ea:c2:
         25:f7:63:3b:9d:22:89:06:98:99:78:53:18:cc:e1:28:14:50:
         25:b9:bb:90:9e:2f:d1:cf:36:53:5a:58:a1:da:3f:bc:ad:80:
         51:fd:71:ab:41:13:c3:be:c9:9b:c3:02:3e:a6:67:2b:a6:c0:
         63:8d:dd:a6:f3:26:19:61:19:df:7c:13:e1:a2:6c:6e:e5:d6:
         46:72:c3:72:c1:5e:bf:8e:32:76:17:0d:3d:ca:8a:ea:4d:0d:
         0e:a4:1e:6f:b9:fb:02:64:ae:85:76:36:b4:31:25:d2:b3:11:
         46:35:06:13:25:38:3b:aa:1f:3b:1b:05:f0:47:1a:8f:35:fb:
         2b:d8:19:d3:f7:32:2a:a7:c1:b4:f2:43:b7:2e:95:bf:6b:96:
         75:85:0f:23:62:aa:fb:3c:61:2e:6c:bf:a2:3b:b4:46:3e:cf:
         ce:ce:77:c9:9e:4b:fe:58:dc:bf:83:99:65:98:ae:ed:61:4b:
         1b:86:19:d6:2f:da:68:f3:1b:a1:94:fc:e9:b9:af:00:d1:b6:
         38:42:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:51 2026 by rpki-client