Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
File:                     PxmdXjbAMtlxfGzB9r9SYBcovW0.mft (raw, json)
Hash identifier:          5+MQb23ZA9exTME2lx46vbRbsB+GYbcWXHVLzMgWSFs=
Subject key identifier:   75:94:C6:51:C6:F9:D9:7F:1B:DE:D3:1B:2F:02:DA:F2:AC:9C:88:4C
Authority key identifier: 3F:19:9D:5E:36:C0:32:D9:71:7C:6C:C1:F6:BF:52:60:17:28:BD:6D
Certificate issuer:       /CN=A9177B33/serialNumber=3F199D5E36C032D9717C6CC1F6BF52601728BD6D
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
Manifest number:          2C
Signing time:             Mon 27 Jul 2026 11:05:20 +0000
Manifest this update:     Mon 27 Jul 2026 11:05:19 +0000
Manifest next update:     Mon 03 Aug 2026 11:05:19 +0000
Files and hashes:         1: PxmdXjbAMtlxfGzB9r9SYBcovW0.crl (hash: ztBbSRgjtFEH9v7sS96gRvVvh0e/f1+hj6L+GU143o4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.crl
                          rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177B33, serialNumber=3F199D5E36C032D9717C6CC1F6BF52601728BD6D
        Validity
            Not Before: Jul 27 11:05:19 2026 GMT
            Not After : Aug  3 11:05:19 2026 GMT
        Subject: CN=6a673b70-67f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:49:1e:00:47:f9:ce:26:86:09:c5:c3:96:
                    38:2b:b4:e2:37:10:5c:89:d3:b4:42:25:96:12:d7:
                    8f:a8:47:43:3c:fa:32:b7:7f:bd:44:fa:7b:d0:69:
                    8f:1a:e7:57:49:b6:69:1e:43:45:f6:7a:ab:70:87:
                    22:7f:36:52:8f:e8:a6:bb:07:fc:de:5a:bf:98:9c:
                    10:8a:f7:90:cc:e0:18:c8:b8:62:ea:c0:3a:f7:d8:
                    b6:d8:09:07:6b:b5:a2:d3:e3:b3:30:70:10:13:df:
                    98:1e:d9:34:33:c2:32:27:95:55:ac:25:ea:a7:9a:
                    dc:5e:4c:93:72:7b:a5:89:c2:19:d1:43:ec:67:b7:
                    fe:46:be:b9:42:ad:3d:15:8a:00:e8:23:2e:9b:21:
                    6d:bb:5a:01:a9:a9:ad:47:a4:78:70:c6:30:28:36:
                    a1:74:a6:32:cc:94:43:8a:7c:6a:34:cf:71:91:49:
                    6b:42:0e:70:23:ec:a7:3f:23:f9:79:14:c1:a4:0e:
                    c8:a3:94:b2:34:16:53:dc:41:53:ce:d3:fa:ac:01:
                    52:68:1e:0d:64:03:f8:e0:ee:36:41:12:e3:1a:2b:
                    26:20:74:55:f2:da:44:aa:90:fc:ae:e8:c0:6d:41:
                    22:19:23:3f:05:94:53:a6:08:32:a1:e6:ad:df:0d:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:94:C6:51:C6:F9:D9:7F:1B:DE:D3:1B:2F:02:DA:F2:AC:9C:88:4C
            X509v3 Authority Key Identifier:
                keyid:3F:19:9D:5E:36:C0:32:D9:71:7C:6C:C1:F6:BF:52:60:17:28:BD:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxmdXjbAMtlxfGzB9r9SYBcovW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177B33/EDFAB16A450911F1A0D15FD891833773/PxmdXjbAMtlxfGzB9r9SYBcovW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:24:76:a4:af:05:5b:c6:91:6c:6c:aa:6f:f3:8f:30:c4:9c:
         df:6b:2b:42:54:43:10:37:86:02:15:32:f0:47:25:7c:a2:75:
         83:67:7a:ae:5c:38:8e:2e:b0:2b:71:5b:4d:7a:f3:c9:56:07:
         99:fd:8e:e6:ae:62:b1:45:c7:da:b3:39:1e:69:5e:dc:e9:37:
         a0:3b:01:38:65:39:53:f8:99:74:16:b9:c4:bc:d1:eb:99:b9:
         53:bc:a0:ce:89:8c:73:30:5a:57:1e:91:ea:4b:03:eb:fb:e6:
         56:0f:46:c3:39:4c:3f:d5:24:da:0c:dc:d5:44:ba:35:7a:6a:
         75:1f:b9:14:cc:7d:f4:eb:89:0a:2c:20:dd:be:b9:a0:19:1b:
         6c:51:8d:41:74:38:37:c5:47:e2:2b:b7:d6:67:3b:ca:33:e5:
         9d:71:57:53:c6:18:dd:a8:99:c7:0e:5e:b6:1c:fb:af:7b:cb:
         4b:da:fb:d2:6e:1b:5b:b2:df:4a:81:75:d0:0b:ca:08:8f:2e:
         a0:e1:a8:af:9a:5e:d6:40:8a:1c:28:0d:52:50:61:41:ca:70:
         71:44:f1:e6:e9:c5:4d:d8:a1:8b:9e:6d:a6:e9:70:e7:ba:f2:
         cd:43:cc:4b:56:79:7d:ec:3f:50:cf:9e:25:ab:45:fe:14:4e:
         cc:a9:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:02 2026 by rpki-client