Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
File:                     PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json)
Hash identifier:          SEb1A1DSobJbaPt49/vV0Ff5ghVPBVAfyfSy75Rp1iE=
Subject key identifier:   76:43:E7:2A:6D:CF:83:8B:49:51:52:BC:B6:45:78:4A:D1:8E:D7:AB
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Certificate issuer:       /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
Manifest number:          01FF
Signing time:             Wed 29 Jul 2026 04:20:12 +0000
Manifest this update:     Wed 29 Jul 2026 04:20:11 +0000
Manifest next update:     Wed 05 Aug 2026 04:20:11 +0000
Files and hashes:         1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: 236hz8XTBXhXjG1bUBMQydhQLe3wrJbWjjKI48jeToY=)
                          2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: Nj2SWfF08+NWeNfqPzGe0G/AhkrzTZtBpN7F7NKz6A0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
                          rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
        Validity
            Not Before: Jul 29 04:20:11 2026 GMT
            Not After : Aug  5 04:20:11 2026 GMT
        Subject: CN=6a697f7c-e4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:ce:77:4c:ed:2a:4e:be:b6:32:a4:3f:b0:
                    ca:87:14:ba:f8:93:79:80:25:1d:b9:d3:ff:53:01:
                    a3:4d:d8:ff:fc:37:44:44:36:ad:98:0a:1e:26:dc:
                    04:7b:1c:a2:a1:c4:fa:0a:38:e9:22:5a:54:a7:cf:
                    da:22:94:8e:13:5e:50:51:2a:3d:b9:d1:c7:6a:6d:
                    a2:6e:e3:cb:6f:25:01:26:ee:68:35:26:e7:d5:d2:
                    8e:d2:77:c7:5d:fc:02:ac:c1:86:08:92:ba:ed:49:
                    a4:a0:f0:03:f3:f1:ef:dc:70:ef:46:47:15:c5:71:
                    8b:12:ab:d0:aa:05:73:e2:bd:51:76:8e:0c:d5:6b:
                    b7:b3:b4:70:91:c9:be:09:0f:9d:20:72:dd:91:13:
                    c9:48:09:ad:c4:b4:ab:38:2b:62:c5:98:9c:16:9c:
                    b8:b8:6b:05:e6:f3:4e:ae:f4:62:ea:dc:19:f8:9b:
                    e4:cf:27:f9:d3:e0:c1:5b:03:66:98:9f:ff:91:e6:
                    33:44:59:1e:6b:a7:39:5e:73:98:16:c5:46:16:b6:
                    72:94:b6:ea:e1:19:e1:4b:90:c6:15:18:ef:c7:ff:
                    ee:a2:81:76:55:a1:bb:d8:af:5c:66:76:9c:7f:21:
                    3f:36:7b:61:54:19:e6:20:e3:35:ad:ae:0f:24:52:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:43:E7:2A:6D:CF:83:8B:49:51:52:BC:B6:45:78:4A:D1:8E:D7:AB
            X509v3 Authority Key Identifier:
                keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:ed:41:70:8d:d6:a8:2b:b8:01:f2:55:d9:f9:33:a8:81:
         fb:72:43:eb:8f:d5:1e:b8:41:5b:55:67:29:86:3f:fa:9e:0d:
         0a:e1:94:df:10:ac:c1:f7:81:aa:d5:41:71:2f:f8:f4:c5:ae:
         76:d3:e9:3a:dd:83:8b:8d:6f:72:15:c3:ae:3f:27:6f:f7:d4:
         20:be:27:59:9e:50:dc:cb:db:21:fd:d6:0a:18:34:52:71:f4:
         da:81:89:15:51:ae:9a:17:c5:5a:c3:3f:02:6d:85:5c:b1:90:
         5b:08:a7:41:47:a2:90:ac:24:67:10:2f:24:f9:25:70:a5:f4:
         71:87:d7:a0:84:22:aa:52:ab:05:d7:5c:df:58:ef:4a:fa:a9:
         b7:a8:9a:eb:72:49:31:2b:6e:fd:9b:30:45:2d:d9:d8:89:ff:
         f4:d4:89:de:cc:0e:d4:0f:be:9d:b5:ad:d4:8d:f3:db:84:36:
         5f:04:1b:bb:04:94:7c:bf:62:7a:28:52:aa:ef:6c:85:63:a5:
         f3:b2:87:31:d1:c8:36:39:8b:f4:d1:cf:3b:80:d2:d5:d8:74:
         01:25:38:73:67:82:16:01:22:68:17:2a:2d:87:0f:81:17:47:
         8b:74:4a:b2:a5:84:a6:9e:25:6e:b7:fb:6e:64:9a:64:3a:f6:
         78:f2:66:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw
OTYwNjUzMjMwHhcNMjYwNzI5MDQyMDExWhcNMjYwODA1MDQyMDExWjAYMRYwFAYD
VQQDEw02YTY5N2Y3Yy1lNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJjOd0ztKk6+tjKkP7DKhxS6+JN5gCUdudP/UwGjTdj//DdERDatmAoeJtwE
exyiocT6CjjpIlpUp8/aIpSOE15QUSo9udHHam2ibuPLbyUBJu5oNSbn1dKO0nfH
XfwCrMGGCJK67UmkoPAD8/Hv3HDvRkcVxXGLEqvQqgVz4r1Rdo4M1Wu3s7Rwkcm+
CQ+dIHLdkRPJSAmtxLSrOCtixZicFpy4uGsF5vNOrvRi6twZ+Jvkzyf50+DBWwNm
mJ//keYzRFkea6c5XnOYFsVGFrZylLbq4RnhS5DGFRjvx//uooF2VaG72K9cZnac
fyE/NnthVBnmIOM1ra4PJFIgiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZD5ypt
z4OLSVFSvLZFeErRjterMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy
QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFU
ajVwazRCWU83d1lKWUdVeU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVObtQXCN1qgruAHyVdn5M6iB+3JD64/VHrhBW1VnKYY/+p4NCuGU3xCswfeB
qtVBcS/49MWudtPpOt2Di41vchXDrj8nb/fUIL4nWZ5Q3MvbIf3WChg0UnH02oGJ
FVGumhfFWsM/Am2FXLGQWwinQUeikKwkZxAvJPklcKX0cYfXoIQiqlKrBddc31jv
Svqpt6ia63JJMStu/ZswRS3Z2In/9NSJ3swO1A++nbWt1I3z24Q2XwQbuwSUfL9i
eihSqu9shWOl87KHMdHINjmL9NHPO4DS1dh0ASU4c2eCFgEiaBcqLYcPgRdHi3RK
sqWEpp4lbrf7bmSaZDr2ePJmhg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:41 2026 by rpki-client