Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
File:                     PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json)
Hash identifier:          pUWK3P78TEycvp/alFO77ptHqNoNd0Td1cj+Bsabfqs=
Subject key identifier:   09:5A:E1:7F:0F:C1:97:84:0B:3A:28:B4:4B:F0:E0:53:6A:F3:11:5F
Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2
Certificate issuer:       /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
Manifest number:          0C7A
Signing time:             Sun 26 Jul 2026 23:05:38 +0000
Manifest this update:     Sun 26 Jul 2026 23:05:37 +0000
Manifest next update:     Sun 02 Aug 2026 23:05:37 +0000
Files and hashes:         1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: D2O4w9om6ZpfM6vh6aBHQz6MABbFMwQ0BODfcbjZds4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
        Validity
            Not Before: Jul 26 23:05:37 2026 GMT
            Not After : Aug  2 23:05:37 2026 GMT
        Subject: CN=6a6692c1-4179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:73:8b:e5:c9:89:5c:7e:06:07:05:f7:31:
                    9c:69:b2:0b:83:db:48:c1:b0:b3:47:82:16:d4:fc:
                    1b:8c:cf:cb:6c:12:7e:e1:22:8a:65:02:be:ad:34:
                    0f:91:29:be:54:3e:30:88:a5:c9:56:05:98:5d:b9:
                    cc:33:3e:62:60:80:d8:68:69:fa:e4:97:47:46:f3:
                    c2:3b:a2:09:fd:c1:1d:1f:6d:93:88:d4:e2:9d:c5:
                    02:13:38:96:d8:16:9b:6b:3f:f0:85:b2:d4:3a:04:
                    05:28:9b:c2:3c:7a:bc:61:4e:6b:44:3b:ed:a4:ef:
                    c9:7b:d1:9f:d5:9a:d7:80:60:71:ea:bf:47:42:2b:
                    1f:9e:b6:55:f1:ee:59:84:7c:ac:14:6a:f1:37:72:
                    26:fe:9c:50:b7:a4:4e:78:89:8b:a9:7d:f3:aa:8d:
                    4b:6b:c0:cf:f9:44:48:2f:f3:0d:29:73:d2:4b:da:
                    c7:e4:dd:26:8d:39:33:11:ab:b6:40:6b:91:52:97:
                    ce:9d:68:32:9b:9c:b9:6d:a1:c4:16:e4:e1:16:c6:
                    fd:14:cf:20:58:5c:a1:69:71:d1:0a:e4:44:ff:ac:
                    9c:70:ae:15:ce:fc:81:70:57:1f:d7:88:83:fd:d4:
                    f6:cd:97:1a:2c:d9:b0:e2:19:4b:cc:29:1f:12:f5:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5A:E1:7F:0F:C1:97:84:0B:3A:28:B4:4B:F0:E0:53:6A:F3:11:5F
            X509v3 Authority Key Identifier:
                keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:c3:6e:a1:e9:04:38:0d:00:3c:cf:59:08:45:83:72:91:
         3a:17:4b:93:72:fe:3c:1f:7a:3d:0e:2a:d6:92:08:c0:24:65:
         7e:6e:17:35:e9:88:10:0c:d4:1a:ef:8e:9e:20:d7:41:37:c5:
         33:c2:13:03:8d:d9:4d:54:75:15:60:39:40:70:aa:e7:06:df:
         8b:67:57:ad:5c:4c:9b:28:0d:13:58:16:ec:ae:05:3c:16:06:
         0d:fd:d0:75:64:be:65:1d:cb:0a:85:2c:96:30:41:fd:3a:9f:
         0a:08:a1:af:e1:3f:e9:c0:7b:9a:90:f7:a3:6a:a1:77:ef:19:
         3c:2d:de:12:b8:c8:3c:12:dd:7c:43:09:a6:50:71:77:6b:fb:
         32:55:fc:db:33:0a:47:b4:2c:53:61:b5:b9:c5:88:1b:96:37:
         a8:3b:1e:0b:bf:9c:e1:f0:70:16:a5:f6:fb:56:26:57:21:3b:
         54:45:4a:87:67:bd:8d:1b:7d:d9:4e:6a:94:50:6b:c1:1c:06:
         f3:c6:56:e4:56:5c:14:b8:62:26:01:38:24:0d:d1:d8:0b:c3:
         da:ac:d8:1b:36:fe:47:8a:ab:a1:ad:30:eb:f5:17:fa:91:67:
         28:76:2f:31:82:68:6b:c5:ca:e4:0b:fe:96:c0:85:8b:15:d0:
         14:46:57:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG
RTI4N0QwRjIwHhcNMjYwNzI2MjMwNTM3WhcNMjYwODAyMjMwNTM3WjAYMRYwFAYD
VQQDEw02YTY2OTJjMS00MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj/Bzi+XJiVx+BgcF9zGcabILg9tIwbCzR4IW1PwbjM/LbBJ+4SKKZQK+rTQP
kSm+VD4wiKXJVgWYXbnMMz5iYIDYaGn65JdHRvPCO6IJ/cEdH22TiNTincUCEziW
2Babaz/whbLUOgQFKJvCPHq8YU5rRDvtpO/Je9Gf1ZrXgGBx6r9HQisfnrZV8e5Z
hHysFGrxN3Im/pxQt6ROeImLqX3zqo1La8DP+URIL/MNKXPSS9rH5N0mjTkzEau2
QGuRUpfOnWgym5y5baHEFuThFsb9FM8gWFyhaXHRCuRE/6yccK4VzvyBcFcf14iD
/dT2zZcaLNmw4hlLzCkfEvUuwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAla4X8P
wZeECzootEvw4FNq8xFfMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE
QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i
RTNIT1hBUVVJSVAtS0gwUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfInDbqHpBDgNADzPWQhFg3KROhdLk3L+PB96PQ4q1pIIwCRlfm4XNemIEAzU
Gu+OniDXQTfFM8ITA43ZTVR1FWA5QHCq5wbfi2dXrVxMmygNE1gW7K4FPBYGDf3Q
dWS+ZR3LCoUsljBB/TqfCgihr+E/6cB7mpD3o2qhd+8ZPC3eErjIPBLdfEMJplBx
d2v7MlX82zMKR7QsU2G1ucWIG5Y3qDseC7+c4fBwFqX2+1YmVyE7VEVKh2e9jRt9
2U5qlFBrwRwG88ZW5FZcFLhiJgE4JA3R2AvD2qzYGzb+R4qroa0w6/UX+pFnKHYv
MYJoa8XK5Av+lsCFixXQFEZXNQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:51 2026 by rpki-client