Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
File:                     PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json)
Hash identifier:          SCNxSECTYYwQhiJKaR5DJWVm6PNn8CygrJBtgW5lsnc=
Subject key identifier:   B5:80:18:E1:BB:5A:F3:EE:2D:51:0A:FF:6B:AA:E6:7F:62:61:5D:F7
Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE
Certificate issuer:       /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
Manifest number:          94
Signing time:             Sun 11 Oct 2026 08:04:34 +0000
Manifest this update:     Sun 11 Oct 2026 08:04:34 +0000
Manifest next update:     Sun 18 Oct 2026 08:04:34 +0000
Files and hashes:         1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: ZmEn7bCIPagCizBHH5telF+vIahC7uRH4jGNRbcHTNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl
                          rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
        Validity
            Not Before: Oct 11 08:04:34 2026 GMT
            Not After : Oct 18 08:04:34 2026 GMT
        Subject: CN=6acb4312-4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:29:0b:e9:e1:fb:0b:2f:7f:55:ff:37:31:
                    ae:51:57:b1:56:c0:17:71:36:82:9b:c7:24:fe:69:
                    73:6c:1d:a2:5a:ad:d8:1d:70:c7:df:91:44:9f:a9:
                    ea:02:4b:eb:eb:d4:d6:9f:d0:fc:f6:ae:23:ce:c1:
                    b9:f5:2f:fc:fb:bd:87:55:96:fc:37:89:90:8a:b4:
                    ee:65:ac:5e:d3:0d:1d:a0:9e:4c:0e:53:95:f5:a9:
                    72:bd:6f:ad:e1:08:19:8c:88:57:31:c9:db:3e:f2:
                    33:93:29:c7:72:47:74:84:38:f8:1c:f7:a4:86:84:
                    fb:96:8b:3c:3f:5d:53:11:cd:11:d1:6e:12:c0:2f:
                    3a:83:6a:35:4b:14:1c:57:a2:c8:9d:9f:1c:39:49:
                    1b:8e:a0:74:eb:c7:3d:8d:6e:72:58:bd:82:56:ef:
                    4a:c7:62:ff:40:b6:84:a1:bb:f7:d9:d1:59:1a:a3:
                    5f:af:0f:bc:7a:22:f8:18:48:dc:0f:3f:4e:34:a0:
                    0b:39:15:51:c9:21:fa:56:af:a6:97:63:bf:db:20:
                    6d:d7:5f:04:fc:a6:49:30:3d:fb:ea:e2:ba:ca:10:
                    fc:45:a7:6a:9e:28:43:97:68:63:42:ae:2e:4b:de:
                    52:44:0c:7c:5b:cb:90:0c:ad:b8:61:e3:25:d9:9e:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:80:18:E1:BB:5A:F3:EE:2D:51:0A:FF:6B:AA:E6:7F:62:61:5D:F7
            X509v3 Authority Key Identifier:
                keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:64:fd:d0:c0:64:d6:47:81:c5:82:2a:2b:5a:a0:20:f7:96:
         94:f0:50:4f:37:e1:ec:f8:d6:04:b7:64:46:cf:63:f9:6b:73:
         1c:ba:a4:20:93:65:2b:29:05:53:ce:07:48:e0:e2:93:90:ce:
         90:8f:2f:a4:77:42:02:72:9c:05:dd:f3:84:86:22:4a:30:39:
         29:88:8b:ca:d6:2e:c3:7a:94:59:27:1e:6c:c2:3b:f4:14:99:
         1b:26:43:da:b1:b4:62:a7:99:1a:34:41:01:96:fa:70:71:f0:
         c4:af:83:7d:82:ee:0d:53:10:93:cc:62:31:a0:6e:ca:ba:e4:
         2a:20:a0:d8:7e:44:4e:f7:b9:cb:ab:07:a5:c0:ae:ec:c5:ac:
         20:12:90:c8:7f:8c:fb:e3:38:27:af:06:f7:d8:91:58:9f:6f:
         d8:20:a4:7a:78:bd:16:71:83:95:20:6b:36:8c:9e:3a:32:c8:
         15:df:5f:8d:8c:77:a9:5a:e7:65:7f:da:b3:b1:08:01:9b:cf:
         5b:05:9d:18:60:a6:ef:21:7c:71:f0:16:d7:1d:8b:b1:44:9e:
         0f:2b:bf:3b:75:f1:34:cd:41:fc:d1:e3:b9:e7:57:b4:35:9e:
         84:f9:e9:00:b3:2f:8e:2d:3a:3e:1e:7c:d3:ce:c7:42:f0:4e:
         a0:19:82:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNkQxMTAvBgNVBAUTKDNDRDk4MTI1QzE5N0E1NTE0MzEyMDFCNzkwNkQ1MDRC
QjhCMjRBREUwHhcNMjYxMDExMDgwNDM0WhcNMjYxMDE4MDgwNDM0WjAYMRYwFAYD
VQQDEw02YWNiNDMxMi00NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IcpC+nh+wsvf1X/NzGuUVexVsAXcTaCm8ck/mlzbB2iWq3YHXDH35FEn6nq
Akvr69TWn9D89q4jzsG59S/8+72HVZb8N4mQirTuZaxe0w0doJ5MDlOV9alyvW+t
4QgZjIhXMcnbPvIzkynHckd0hDj4HPekhoT7los8P11TEc0R0W4SwC86g2o1SxQc
V6LInZ8cOUkbjqB068c9jW5yWL2CVu9Kx2L/QLaEobv32dFZGqNfrw+8eiL4GEjc
Dz9ONKALORVRySH6Vq+ml2O/2yBt118E/KZJMD376uK6yhD8RadqnihDl2hjQq4u
S95SRAx8W8uQDK24YeMl2Z6vVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWAGOG7
WvPuLVEK/2uq5n9iYV33MB8GA1UdIwQYMBaAFDzZgSXBl6VRQxIBt5BtUEu4skre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI2RC84ODBENkNBQ0U5
MUIxMUYwQTc1NDE2MTI3MzZGNTZCQy9QTm1CSmNHWHBWRkRFZ0cza0cxUVM3aXlT
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkI2RC84ODBENkNBQ0U5MUIxMUYwQTc1NDE2MTI3MzZGNTZCQy9QTm1CSmNHWHBW
RkRFZ0cza0cxUVM3aXlTdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEmT90MBk1keBxYIqK1qgIPeWlPBQTzfh7PjWBLdkRs9j+WtzHLqkIJNlKykF
U84HSODik5DOkI8vpHdCAnKcBd3zhIYiSjA5KYiLytYuw3qUWScebMI79BSZGyZD
2rG0YqeZGjRBAZb6cHHwxK+DfYLuDVMQk8xiMaBuyrrkKiCg2H5ETve5y6sHpcCu
7MWsIBKQyH+M++M4J68G99iRWJ9v2CCkeni9FnGDlSBrNoyeOjLIFd9fjYx3qVrn
ZX/as7EIAZvPWwWdGGCm7yF8cfAW1x2LsUSeDyu/O3XxNM1B/NHjuedXtDWehPnp
ALMvji06Ph58087HQvBOoBmChQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:30:21 2026 by rpki-client