Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File:                     Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier:          O9CGeCy1L8twqyHGB09PXpdZhm5NbPl9z++AohAGvPY=
Subject key identifier:   7C:42:EE:5C:FE:73:7F:4F:C8:91:4C:5B:22:00:B7:80:D9:86:D1:E1
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer:       /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial:       03FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number:          03D6
Signing time:             Mon 27 Jul 2026 01:39:19 +0000
Manifest this update:     Mon 27 Jul 2026 01:39:19 +0000
Manifest next update:     Mon 03 Aug 2026 01:39:19 +0000
Files and hashes:         1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: MUe0GjzjrD02YQuN72e5P2pcXXninFwqyaKJeNS7/7A=)
                          2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: Bba3ux72e27e1jQ1j28aUjisSioDvxuoxGTwro6zTXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
        Validity
            Not Before: Jul 27 01:39:19 2026 GMT
            Not After : Aug  3 01:39:19 2026 GMT
        Subject: CN=6a66b6c7-a9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:c7:db:ca:32:d0:8e:63:cb:11:0b:92:d4:
                    2e:bc:a7:33:f9:16:e0:a3:69:fd:18:d8:e0:28:e6:
                    25:9a:c8:3f:ad:56:ae:37:a6:df:0a:34:ab:19:a7:
                    a8:3d:7b:d8:0d:ee:a1:2c:5b:6c:0a:5e:ea:41:b4:
                    40:87:9f:24:ad:93:16:e8:bb:17:ee:45:06:66:8e:
                    ca:eb:29:0e:83:8c:af:a0:f5:79:e5:5b:e8:26:8c:
                    cd:66:08:0b:07:46:87:33:b0:a8:92:70:cd:2c:2c:
                    92:d0:1d:9e:10:a9:2f:bc:c5:50:53:8b:53:f1:29:
                    2d:51:82:5f:c3:c8:dd:6d:09:28:91:3c:d8:0b:cb:
                    20:7a:da:3b:03:6a:15:30:45:46:1b:a3:b7:4e:63:
                    d6:a4:65:48:1e:72:ef:6b:27:5b:d8:e5:dc:e1:ca:
                    93:b6:34:6c:4b:7d:58:f2:8c:4b:d9:84:9b:20:c2:
                    e0:9e:45:0d:53:cf:41:cc:76:27:0a:de:d6:aa:c8:
                    ec:86:7d:b8:d7:fe:fd:5a:50:a0:68:af:c4:ca:9c:
                    ed:25:6c:63:98:d2:31:f1:d2:b7:7a:29:99:27:d3:
                    39:83:67:a2:46:eb:0f:ed:34:1d:33:fc:0b:20:cb:
                    bc:b2:0f:60:98:e5:c0:ec:c5:74:ef:1d:b1:57:50:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:EE:5C:FE:73:7F:4F:C8:91:4C:5B:22:00:B7:80:D9:86:D1:E1
            X509v3 Authority Key Identifier:
                keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:73:d1:aa:90:74:63:03:99:5d:72:c9:61:f8:05:c0:07:
         05:a1:8e:8c:87:85:7c:fc:74:9d:58:8a:46:53:15:d2:f0:e5:
         98:46:4d:51:19:d4:2c:79:ed:63:db:6c:3a:52:53:0c:18:d2:
         b6:7c:1d:b5:4d:74:40:07:54:45:fc:21:4b:97:e5:ae:ea:eb:
         3c:7d:70:1a:ca:96:93:f0:90:51:57:2e:f7:ee:c0:2a:a6:46:
         bf:31:f8:c2:84:f1:f0:00:dc:fa:6d:65:ce:3a:46:7c:13:8a:
         4c:e0:94:1a:06:34:cf:84:ed:56:fa:7a:4a:e0:1a:7c:d0:eb:
         ca:9b:15:a2:cb:42:12:79:1e:fa:73:d7:97:8f:59:3d:93:56:
         c9:ad:53:cc:05:e8:88:f8:86:b6:a3:21:00:1b:f9:cc:0f:1a:
         0a:81:94:6c:3b:d6:07:39:e0:fd:90:cf:98:12:1c:b8:56:b6:
         71:72:cd:de:91:b0:6f:d5:1d:b4:0f:ee:79:27:f0:02:9b:c2:
         9b:72:b8:1b:18:d4:db:20:67:6e:d0:a5:dd:78:dc:d4:80:5e:
         c3:03:3f:eb:81:3a:ba:e7:a2:7b:eb:e3:dd:5a:7e:c3:35:9f:
         03:bf:ca:45:64:dd:f4:8d:b8:96:65:b6:af:50:47:6f:91:a3:
         0c:e4:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:25 2026 by rpki-client