Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File:                     PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier:          S8OAMtBLNXR2foulFPq0MolTGQvu+xiD2RNgkQW6eBY=
Subject key identifier:   59:6D:E5:37:FD:71:70:1E:06:93:ED:11:60:50:6C:47:91:37:A7:71
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer:       /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial:       0F1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number:          0F10
Signing time:             Tue 28 Jul 2026 17:43:37 +0000
Manifest this update:     Tue 28 Jul 2026 17:43:37 +0000
Manifest next update:     Tue 04 Aug 2026 17:43:37 +0000
Files and hashes:         1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: 8XTTHnL4Iz3Xec+EBlOyx5sRHutchpy9TtF8KZXGkzc=)
                          2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
                          rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3867 (0xf1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
        Validity
            Not Before: Jul 28 17:43:37 2026 GMT
            Not After : Aug  4 17:43:37 2026 GMT
        Subject: CN=6a68ea49-7fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:07:f4:03:4a:84:ac:1d:2d:19:13:85:f2:
                    52:b1:54:dd:3f:c6:92:a0:12:4c:f0:88:b4:79:d0:
                    e2:4d:22:f9:b7:a0:5a:6b:35:03:79:f2:1b:ca:26:
                    86:c9:e2:f6:2d:54:c6:b9:e2:91:3e:86:ac:7f:c2:
                    08:84:03:bf:4c:cd:22:8d:59:ce:f9:b1:39:9b:e0:
                    18:31:48:5e:52:ab:7d:ef:f8:6e:61:64:8a:eb:e3:
                    12:16:2d:3a:84:93:dd:de:f0:2b:da:c9:c7:3f:de:
                    95:f5:59:b1:ad:72:18:2e:e2:a3:b2:56:45:83:96:
                    5c:73:3c:8c:70:10:e1:b9:09:37:00:17:a6:f8:86:
                    2d:61:35:f8:ed:2a:30:2b:0a:8a:24:c9:5f:3d:f3:
                    9a:67:89:ce:ff:17:e5:16:6f:05:dd:4e:28:a0:6b:
                    20:af:fb:86:0e:68:b8:61:b2:eb:9d:65:c1:d7:0d:
                    e1:00:91:ed:78:3f:47:f1:3f:51:65:e4:97:92:29:
                    89:36:60:06:e7:1e:4e:ff:43:80:6c:d5:0e:fa:3b:
                    79:78:2e:8d:b2:4f:4e:87:3e:c7:0c:7e:a4:78:a8:
                    c0:38:a1:be:82:e8:57:9e:f2:8c:57:8d:6e:c2:45:
                    2a:40:43:41:08:61:bb:ef:06:88:d6:45:78:55:15:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:E5:37:FD:71:70:1E:06:93:ED:11:60:50:6C:47:91:37:A7:71
            X509v3 Authority Key Identifier:
                keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:32:ed:99:94:97:3f:73:b4:b3:07:ba:ea:20:95:90:30:b9:
         5b:64:69:1f:0d:8f:cd:e7:e2:d9:37:91:67:05:15:05:42:3b:
         c1:3e:ef:17:ad:ef:27:4f:4e:88:10:7d:e7:2c:4a:7b:6f:7e:
         ca:e1:3c:a6:d5:8d:64:b2:d6:05:fb:95:e2:0e:7d:4b:df:c5:
         4e:65:97:30:54:b6:c2:24:c9:38:af:81:00:c7:40:b4:47:66:
         ed:71:c7:3a:ff:af:3b:df:fc:2f:ed:58:df:5c:bd:75:e2:6b:
         06:b3:29:ed:bb:df:c2:ba:f0:17:9c:0d:b2:f1:5b:b6:bf:fb:
         dc:c2:61:cc:5a:9a:aa:bf:28:08:e1:db:78:6f:b0:bc:cf:dd:
         75:27:7c:8f:79:d5:a0:90:5c:e0:a3:86:a0:11:c2:28:a1:03:
         0b:3e:c6:4e:cf:f7:bf:41:15:2e:cf:59:db:46:b3:ad:5d:40:
         7d:7c:82:cf:f2:25:ae:64:d2:db:27:30:d3:7c:dc:03:e0:fc:
         29:86:97:6c:f7:43:25:e7:f9:47:0f:80:0b:26:82:5d:6d:5e:
         fa:83:8b:95:fd:33:52:b8:bd:1a:d1:b6:25:f9:e9:4c:c6:12:
         02:34:c6:48:5d:d6:6c:da:53:f7:11:44:8d:bf:35:de:67:a6:
         c6:55:18:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4
NzUyODE5ODMwHhcNMjYwNzI4MTc0MzM3WhcNMjYwODA0MTc0MzM3WjAYMRYwFAYD
VQQDEw02YTY4ZWE0OS03ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvF8H9ANKhKwdLRkThfJSsVTdP8aSoBJM8Ii0edDiTSL5t6BaazUDefIbyiaG
yeL2LVTGueKRPoasf8IIhAO/TM0ijVnO+bE5m+AYMUheUqt97/huYWSK6+MSFi06
hJPd3vAr2snHP96V9VmxrXIYLuKjslZFg5ZcczyMcBDhuQk3ABem+IYtYTX47Sow
KwqKJMlfPfOaZ4nO/xflFm8F3U4ooGsgr/uGDmi4YbLrnWXB1w3hAJHteD9H8T9R
ZeSXkimJNmAG5x5O/0OAbNUO+jt5eC6Nsk9Ohz7HDH6keKjAOKG+guhXnvKMV41u
wkUqQENBCGG77waI1kV4VRXx0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlt5Tf9
cXAeBpPtEWBQbEeRN6dxMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy
RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl
OExONURRNTVZZWlIVW9HWU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkTLtmZSXP3O0swe66iCVkDC5W2RpHw2Pzefi2TeRZwUVBUI7wT7vF63vJ09O
iBB95yxKe29+yuE8ptWNZLLWBfuV4g59S9/FTmWXMFS2wiTJOK+BAMdAtEdm7XHH
Ov+vO9/8L+1Y31y9deJrBrMp7bvfwrrwF5wNsvFbtr/73MJhzFqaqr8oCOHbeG+w
vM/ddSd8j3nVoJBc4KOGoBHCKKEDCz7GTs/3v0EVLs9Z20azrV1AfXyCz/IlrmTS
2ycw03zcA+D8KYaXbPdDJef5Rw+ACyaCXW1e+oOLlf0zUri9GtG2JfnpTMYSAjTG
SF3WbNpT9xFEjb813memxlUY9g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:58 2026 by rpki-client