Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File:                     pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier:          8qcXx7vvsXYUOux95MUZoNesGi6jsAyp59LxlD+ZVyA=
Subject key identifier:   E0:F5:C5:A9:BB:94:E8:6C:EF:59:4B:E9:F0:63:F8:90:1A:FC:B6:A5
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer:       /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial:       17BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number:          21BC
Signing time:             Sun 20 Sep 2026 16:31:50 +0000
Manifest this update:     Sun 20 Sep 2026 16:31:49 +0000
Manifest next update:     Sun 27 Sep 2026 16:31:49 +0000
Files and hashes:         1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: t5gc4rAM9rKu+kuX/VX1r3Sa8Pn6N4F0inZq3vBdUGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6075 (0x17bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
        Validity
            Not Before: Sep 20 16:31:49 2026 GMT
            Not After : Sep 27 16:31:49 2026 GMT
        Subject: CN=6ab00a76-db80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b0:7d:57:37:7f:ab:32:b6:0a:db:23:96:f8:
                    a6:3d:e9:f8:0c:3a:9c:fd:42:86:03:9d:7c:88:71:
                    0a:5f:93:7f:c3:f0:16:9b:63:bb:a2:ee:c8:6e:ad:
                    11:d0:23:89:5a:a1:55:4c:3e:1d:39:42:fc:7b:c0:
                    82:31:3a:f6:46:1b:d0:43:9a:6b:2a:1b:9e:38:c5:
                    fe:34:4c:74:1a:4e:f1:27:ba:3f:15:bd:c9:60:99:
                    01:36:9e:94:8c:c9:b3:40:12:18:97:06:1f:74:80:
                    38:ed:23:94:20:d7:7d:82:db:5b:42:4a:f3:6e:af:
                    e9:d8:e4:09:20:7b:4e:80:fb:ce:1c:d0:6f:9e:f0:
                    d9:3c:26:4d:ee:23:95:e1:de:45:36:8e:32:c8:5e:
                    74:5b:3b:38:02:24:b8:88:fc:3c:78:81:46:32:93:
                    cc:85:98:eb:ab:e7:be:6f:26:2d:ed:b3:6f:15:b9:
                    62:91:4c:91:67:14:b1:27:9b:37:68:86:c1:50:15:
                    d9:a8:28:14:12:6f:32:ee:93:d3:8b:2c:43:26:96:
                    da:9e:d9:52:8a:2a:6d:f6:ea:cd:1e:d6:74:cb:4f:
                    5e:63:cd:f9:71:4c:b7:f3:11:aa:a1:5a:55:83:49:
                    9d:3f:60:ac:3e:fb:b1:e2:b5:c9:bc:73:50:e4:8c:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F5:C5:A9:BB:94:E8:6C:EF:59:4B:E9:F0:63:F8:90:1A:FC:B6:A5
            X509v3 Authority Key Identifier:
                keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e2:db:4a:74:a2:a6:c2:9a:94:e2:62:9d:df:8d:23:0c:6f:
         84:6e:9a:81:00:c2:28:a8:35:1a:a6:2e:9a:ba:1f:33:e4:1e:
         59:7b:79:17:73:57:a3:46:b2:cc:e0:fc:8e:9e:e3:00:68:7e:
         da:2e:0e:af:78:85:3b:65:44:a6:d6:01:55:f4:22:01:77:5d:
         be:e3:77:c2:71:05:b6:9c:46:1a:2d:2a:a3:18:a5:4f:0d:4c:
         85:d9:c4:69:fc:09:91:b8:4f:23:18:6a:5b:25:0c:d3:bd:fb:
         4f:79:8b:11:e9:2d:80:c5:97:a1:f9:2d:87:e0:b1:35:48:13:
         68:5d:42:fa:f3:56:69:ea:7f:b7:ec:2b:e9:3b:c2:1c:03:5a:
         10:b1:2a:f7:47:a5:76:42:be:a3:72:1d:25:d1:8b:e5:66:3a:
         c5:de:4f:31:79:be:f4:64:3a:c5:63:65:90:1c:e4:89:01:eb:
         19:be:f0:e7:96:3f:f5:cf:94:f2:0f:d6:df:7e:5f:f0:dc:4e:
         3c:ee:86:c8:ce:d6:44:c8:71:7c:a8:e9:4b:96:c6:85:34:95:
         63:73:5a:21:62:93:54:51:4a:70:c4:e0:a0:ca:66:e9:4d:6e:
         66:06:e9:ba:bb:5e:f7:1a:72:8c:8e:6f:49:ef:33:7d:fd:b0:
         ad:e0:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:44:15 2026 by rpki-client