Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File:                     PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier:          ZCYawJMl+PeMY5RfNWWNclBvXlikTYZF6a177Hg2ul8=
Subject key identifier:   8C:AA:71:F1:28:99:0F:4B:7E:2E:4A:DB:8A:25:49:11:7A:93:06:28
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer:       /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number:          CF
Signing time:             Mon 27 Jul 2026 08:52:03 +0000
Manifest this update:     Mon 27 Jul 2026 08:52:03 +0000
Manifest next update:     Mon 03 Aug 2026 08:52:03 +0000
Files and hashes:         1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: TufojlWf/xQn3/qj1U1rdMRxALcLr0Iarm/IyifYHiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
        Validity
            Not Before: Jul 27 08:52:03 2026 GMT
            Not After : Aug  3 08:52:03 2026 GMT
        Subject: CN=6a671c33-e1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:13:ed:67:83:03:2c:00:7b:2f:82:dd:4d:
                    ad:f6:3d:95:30:ae:e6:6d:61:e5:b5:5a:22:88:55:
                    68:f4:ff:f5:99:c3:00:b5:05:86:fb:65:e2:8e:5b:
                    4a:e3:ed:62:2c:68:c5:cd:85:85:c5:bb:1e:1d:17:
                    12:95:9d:d1:7d:c7:70:e1:1d:13:ca:f6:07:5c:a7:
                    be:c0:4f:33:22:59:2a:67:6d:c3:b0:0c:84:ac:af:
                    e0:80:1b:26:a8:28:ae:de:15:f9:45:44:8b:6b:63:
                    c2:f6:02:3c:0d:aa:fc:8e:5d:42:b0:cc:99:96:ab:
                    d9:f0:b0:88:1b:19:e3:9d:7d:21:ea:c0:c8:13:e7:
                    58:c6:3a:44:9e:10:9b:bb:64:5b:f3:2d:e9:16:a3:
                    bd:a2:68:13:ec:d1:fd:da:d6:05:2e:0d:55:01:f1:
                    a7:e0:01:6e:b9:c2:71:ae:ce:98:d8:5a:d6:23:31:
                    01:b5:80:fd:39:9d:39:62:12:69:8f:6f:0c:ee:55:
                    46:cd:8c:0a:d5:a2:ae:55:71:36:ca:1c:92:a3:7f:
                    f1:43:c0:60:5f:83:b0:18:c3:17:14:4c:62:c4:92:
                    84:9c:32:05:bb:ff:52:8e:da:4c:75:5f:5c:bd:f8:
                    4f:d5:c1:be:f7:e1:1f:27:fd:92:20:6c:94:fa:de:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AA:71:F1:28:99:0F:4B:7E:2E:4A:DB:8A:25:49:11:7A:93:06:28
            X509v3 Authority Key Identifier:
                keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:dd:4c:45:cd:1d:d5:2e:55:a7:16:68:b7:da:9c:c4:ab:5f:
         f0:55:b2:52:c2:76:1e:06:40:4f:7e:60:fe:09:5a:5d:fd:d1:
         ef:85:5b:29:bd:9c:ea:e9:a3:29:ff:1f:cc:52:db:d2:08:ce:
         46:d6:ab:57:06:47:0f:d5:3c:42:c2:2e:d8:39:05:c7:8e:05:
         71:57:36:4f:e3:85:9d:c5:dc:d5:87:21:40:3e:0c:d1:10:fc:
         e8:59:8e:cd:de:a3:d6:86:ed:e0:da:21:0d:54:01:c8:68:16:
         cb:44:18:b3:72:81:93:5b:f1:d9:6b:a8:3a:9d:12:32:93:50:
         f1:6c:dc:68:ed:da:0f:68:bf:80:ae:0b:29:e7:ff:0f:b7:4d:
         2f:12:0b:bc:41:3f:a1:c5:c9:0e:57:a4:96:4d:f0:bd:14:a0:
         c4:44:72:9f:3b:e3:85:46:55:6c:61:14:11:4d:d9:a1:3d:69:
         5e:89:0a:d8:7a:41:30:1e:02:ab:37:a4:62:e3:94:5f:3c:7c:
         99:3f:23:b0:2a:78:ac:7f:04:8a:d3:1a:27:5b:11:ee:43:80:
         cf:07:33:16:67:1c:83:1d:86:89:43:f7:27:0d:d8:de:71:42:
         a0:c9:54:37:3f:e0:e5:d2:72:12:59:be:4c:1c:19:44:34:de:
         05:15:93:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg5RTcxMTAvBgNVBAUTKDNGMDk5NzlEODg4QTNEQTc3MTYwQjNDODA3MzdDQzM2
MDBDNkI4REUwHhcNMjYwNzI3MDg1MjAzWhcNMjYwODAzMDg1MjAzWjAYMRYwFAYD
VQQDEw02YTY3MWMzMy1lMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1MYT7WeDAywAey+C3U2t9j2VMK7mbWHltVoiiFVo9P/1mcMAtQWG+2XijltK
4+1iLGjFzYWFxbseHRcSlZ3Rfcdw4R0TyvYHXKe+wE8zIlkqZ23DsAyErK/ggBsm
qCiu3hX5RUSLa2PC9gI8Dar8jl1CsMyZlqvZ8LCIGxnjnX0h6sDIE+dYxjpEnhCb
u2Rb8y3pFqO9omgT7NH92tYFLg1VAfGn4AFuucJxrs6Y2FrWIzEBtYD9OZ05YhJp
j28M7lVGzYwK1aKuVXE2yhySo3/xQ8BgX4OwGMMXFExixJKEnDIFu/9SjtpMdV9c
vfhP1cG+9+EfJ/2SIGyU+t7bqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyqcfEo
mQ9Lfi5K24olSRF6kwYoMB8GA1UdIwQYMBaAFD8Jl52Iij2ncWCzyAc3zDYAxrje
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODlFNy9BMjdGRTZEQzRD
MDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9Qd21YbllpS1BhZHhZTFBJQnpmTU5nREd1
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODlFNy9BMjdGRTZEQzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9Qd21YbllpS1Bh
ZHhZTFBJQnpmTU5nREd1TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARt1MRc0d1S5VpxZot9qcxKtf8FWyUsJ2HgZAT35g/glaXf3R74VbKb2c6umj
Kf8fzFLb0gjORtarVwZHD9U8QsIu2DkFx44FcVc2T+OFncXc1YchQD4M0RD86FmO
zd6j1obt4NohDVQByGgWy0QYs3KBk1vx2WuoOp0SMpNQ8WzcaO3aD2i/gK4LKef/
D7dNLxILvEE/ocXJDleklk3wvRSgxERynzvjhUZVbGEUEU3ZoT1pXokK2HpBMB4C
qzekYuOUXzx8mT8jsCp4rH8EitMaJ1sR7kOAzwczFmccgx2GiUP3Jw3Y3nFCoMlU
Nz/g5dJyElm+TBwZRDTeBRWTLg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:53 2026 by rpki-client