Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File:                     PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier:          Xzaq45XX2IVNoj9xBRWuJ0pbAear7pDTXETTEeor9EM=
Subject key identifier:   05:9D:96:17:5E:F1:25:FA:EC:D8:A4:9A:16:DD:76:2E:4C:E4:AB:47
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer:       /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number:          F5
Signing time:             Mon 27 Jul 2026 08:22:37 +0000
Manifest this update:     Mon 27 Jul 2026 08:22:36 +0000
Manifest next update:     Mon 03 Aug 2026 08:22:36 +0000
Files and hashes:         1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: xLI4kmVTcMycE6kPjXTxNb6CG7urtU0zrhbAP0a6kM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
        Validity
            Not Before: Jul 27 08:22:36 2026 GMT
            Not After : Aug  3 08:22:36 2026 GMT
        Subject: CN=6a67154d-a669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:49:72:2b:5c:96:51:66:8d:6e:eb:9b:e9:
                    ef:79:47:46:3d:0f:f7:f4:58:f3:da:24:87:1f:c0:
                    97:0e:df:6e:fc:9d:70:e7:39:ce:34:7f:70:66:1b:
                    55:5a:bf:ce:39:10:2d:d1:f4:5c:7b:8f:ba:ab:48:
                    76:19:68:be:6a:74:c6:0b:f9:af:01:7f:a3:eb:61:
                    5a:50:64:1d:68:ea:9f:4d:0f:f7:03:c0:56:0c:93:
                    8c:33:d6:b1:64:7d:b1:91:dd:16:9e:37:d7:dc:9c:
                    ca:47:3e:c0:8b:3f:b9:a8:46:65:93:8f:27:53:9d:
                    ed:40:bc:81:07:92:b1:87:72:7b:55:74:ba:24:f6:
                    45:7f:a9:f7:ce:06:91:83:68:18:75:7b:5d:74:97:
                    6a:39:d4:dd:89:14:02:9e:10:70:69:6d:30:7e:33:
                    6f:3e:03:54:ea:18:fd:b4:52:91:f6:75:d3:51:f7:
                    ee:ef:29:70:34:7e:c7:1c:05:d1:63:9c:54:dc:b2:
                    11:63:81:4b:99:32:31:c5:f3:65:32:54:3a:a1:c9:
                    af:b6:75:32:3d:af:cc:9c:bd:5b:ba:47:41:5d:0d:
                    89:e7:c0:39:36:07:04:99:f7:9c:d6:84:3a:89:96:
                    92:33:ea:d9:bf:8d:9a:7e:9e:ca:d4:7e:2a:c5:76:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9D:96:17:5E:F1:25:FA:EC:D8:A4:9A:16:DD:76:2E:4C:E4:AB:47
            X509v3 Authority Key Identifier:
                keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:2d:ce:71:86:29:c8:83:ea:81:0a:1f:e7:ff:92:15:09:43:
         04:9e:82:31:0e:c6:4a:f0:ba:03:d8:7a:8c:7e:25:17:bb:db:
         3b:e4:8d:99:9c:0a:fd:df:9f:bc:36:6d:5f:60:a2:0f:ee:3f:
         da:e8:c3:0d:67:da:9a:41:ae:32:05:e1:ef:f7:81:04:e4:ce:
         4b:e9:32:a7:1e:3f:89:3f:69:86:57:6c:67:4f:6d:90:1b:a4:
         27:9d:87:9f:a7:a2:19:a5:33:83:44:7c:25:90:f4:8d:af:cf:
         a7:78:bd:ae:e6:7e:0b:38:42:7f:63:26:65:ef:37:39:c4:8a:
         11:5c:c2:dc:eb:b6:40:85:11:88:2b:0c:73:a8:78:42:c4:10:
         59:25:36:5b:91:7f:a5:46:92:09:72:77:ae:5f:95:a5:7c:4c:
         e6:e1:d5:9d:b9:17:ac:90:df:44:2e:b2:d8:86:51:b0:16:7b:
         69:4a:45:b8:6c:a6:42:68:d8:44:d5:40:9b:2b:03:d2:3e:38:
         00:fc:0f:6e:e7:85:9e:7a:0a:89:89:02:23:23:04:04:ad:90:
         0e:28:53:31:97:29:c7:cc:d5:7a:55:f5:db:db:bf:9e:6b:cc:
         ed:de:be:76:44:a6:84:fd:4c:04:95:0d:84:af:06:b6:48:f1:
         72:1b:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:15:58 2026 by rpki-client