Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
File:                     PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json)
Hash identifier:          /y47OcIJ1AWuZG6/w5zoZBuTFxfM4nmlVsrhSBi9us0=
Subject key identifier:   A7:D7:04:72:E3:47:84:62:6B:9B:D0:23:36:A4:06:74:FE:64:89:E8
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Certificate issuer:       /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
Manifest number:          EA
Signing time:             Mon 27 Jul 2026 08:33:29 +0000
Manifest this update:     Mon 27 Jul 2026 08:33:29 +0000
Manifest next update:     Mon 03 Aug 2026 08:33:29 +0000
Files and hashes:         1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 4B/4k0hPZfum2upt8XpCXnuK8B5ffs71J0wT48nnQe8=)
                          2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: 87D6nuf5v49Tli4xwHZuhqMSGj+/KqzNB34sSWREAF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
                          rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
        Validity
            Not Before: Jul 27 08:33:29 2026 GMT
            Not After : Aug  3 08:33:29 2026 GMT
        Subject: CN=6a6717d9-171d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:30:1f:15:f9:78:ec:21:de:02:9b:c8:43:
                    24:f1:8c:0a:3b:8c:0c:68:b6:a8:9f:a3:59:e2:1e:
                    ea:16:70:2f:78:3c:2b:45:ab:6d:2e:90:eb:ea:09:
                    32:ee:a4:73:8d:d3:f1:cf:8c:33:cc:ab:de:c8:ed:
                    c8:c2:4c:08:51:ca:5c:9d:fc:04:1f:e0:41:c2:33:
                    ea:ee:4f:f1:44:94:12:a2:e6:47:b8:91:7d:09:70:
                    07:1b:26:ec:3d:e9:a2:6f:8e:41:f0:8f:88:bc:5e:
                    a1:f2:62:4e:8c:34:95:ef:fa:12:53:08:0a:19:11:
                    c0:81:97:4d:d6:40:4b:3b:5f:76:18:ce:17:b7:0a:
                    a4:39:a0:8c:16:86:3c:7f:ec:ff:b5:89:d1:47:00:
                    0a:95:67:a2:b8:0b:c5:bc:7b:64:df:b0:85:54:d2:
                    b1:49:dd:9d:59:11:74:a5:3a:b9:1b:59:46:89:23:
                    ee:1e:b7:7f:93:43:d7:d0:64:1c:1f:9b:0d:96:76:
                    29:73:ed:50:de:d2:be:7f:34:9e:a3:af:cf:71:35:
                    74:53:f3:b9:ee:92:ac:40:d1:f8:c3:12:50:41:e4:
                    e6:7c:d4:a3:32:bf:9f:6f:be:55:d4:19:71:e6:13:
                    3a:6f:bb:f6:3f:60:e2:dc:d2:17:c0:2a:6c:c7:1c:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:04:72:E3:47:84:62:6B:9B:D0:23:36:A4:06:74:FE:64:89:E8
            X509v3 Authority Key Identifier:
                keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:e6:b6:99:f8:cb:28:8f:97:57:01:a9:e3:6a:b8:3a:2b:
         bb:15:30:be:b5:7d:e9:b2:e6:44:8f:11:e2:e6:cc:08:ec:9b:
         9d:03:a8:f0:be:39:40:4b:2f:90:5c:91:58:86:3c:51:97:22:
         3c:9c:8c:1d:a5:ec:05:06:0b:9a:66:65:13:0c:fa:e0:3a:50:
         ba:f8:9b:78:86:16:b9:3b:92:47:8c:e6:7b:f1:77:14:0b:2b:
         1d:d1:88:88:00:15:f3:ad:54:f6:fe:84:01:35:ef:c8:50:64:
         7a:e0:93:c6:96:b5:c2:3f:6d:d0:ec:ab:de:4d:ee:ec:f9:3f:
         56:99:af:7b:8c:35:df:ec:05:03:20:e6:44:e3:a4:22:49:d7:
         9b:76:16:b7:3c:57:d2:b4:55:a0:4e:0f:81:79:f4:b1:49:3e:
         1b:94:d1:10:c3:25:7b:53:58:94:ea:10:9c:dc:2d:e7:9a:98:
         93:5e:a2:f1:4e:c3:78:8f:f3:54:52:da:14:0b:80:bd:96:28:
         dc:bf:d4:06:bd:29:50:b1:cd:33:ff:5a:db:7d:7e:c4:1f:6f:
         40:dd:93:ce:f4:91:99:b8:01:49:3f:22:a6:df:12:6e:19:8f:
         a0:91:2e:2b:20:1b:56:a6:76:da:76:1a:25:b9:c2:89:73:69:
         26:26:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:03 2026 by rpki-client