Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          wmO3uik7WoxC+KsB0U5NPaTijsVO/ZijOnUzV4+Pc0c=
Subject key identifier:   FE:B0:F5:10:2B:B0:03:A7:20:56:97:3B:71:0C:D5:AC:3B:44:5C:25
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          010C
Signing time:             Wed 29 Jul 2026 07:27:27 +0000
Manifest this update:     Wed 29 Jul 2026 07:27:27 +0000
Manifest next update:     Wed 05 Aug 2026 07:27:27 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: ooTYIG+nfLx8W2EtSrwiZ99SuXnOcvtydMmd/djCIkc=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: Jul 29 07:27:27 2026 GMT
            Not After : Aug  5 07:27:27 2026 GMT
        Subject: CN=6a69ab5f-a034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:6a:cc:4a:77:f0:25:80:1c:d1:fb:9f:fc:
                    e0:3e:12:37:f0:83:1d:6e:94:bf:2f:18:d2:eb:29:
                    e5:67:f7:8a:15:f2:91:c2:80:4b:9c:31:f8:6b:ae:
                    8d:21:8b:f6:3f:45:ef:84:53:93:38:01:8d:a1:7f:
                    f1:cc:c7:3c:8f:12:48:13:7b:0f:dd:32:06:44:fc:
                    e1:0c:5a:5b:06:82:ff:96:90:07:03:8d:a1:34:26:
                    8e:bb:07:ef:3e:ca:ae:74:16:fd:dd:5e:e9:75:af:
                    79:38:d1:39:67:31:12:03:ed:74:50:d2:cb:0a:75:
                    d9:35:02:7e:77:d5:b1:ac:75:46:8b:6b:16:65:04:
                    a1:87:09:a5:7e:7d:29:4f:b4:a7:09:9c:e2:7a:fb:
                    a2:79:f7:91:a2:dd:a5:57:29:75:51:a3:a6:b8:f0:
                    ea:6b:28:dc:6c:68:bf:83:5a:9a:d9:56:22:67:ef:
                    96:72:af:ed:5b:e3:4a:3a:98:78:3f:80:29:53:ab:
                    d1:4a:5c:a5:4c:48:22:52:af:f4:8a:bf:e1:9e:ed:
                    57:4e:d1:9a:4c:f7:06:3a:57:03:e3:7e:fd:c5:30:
                    94:af:48:05:a1:0f:86:a6:14:ef:b5:94:a7:85:0d:
                    e5:28:da:c5:29:2e:6b:f5:7a:eb:60:2e:52:23:8c:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:F5:10:2B:B0:03:A7:20:56:97:3B:71:0C:D5:AC:3B:44:5C:25
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:a6:13:fd:f7:0c:c5:65:20:40:fc:c3:ca:dd:fa:46:aa:
         c6:93:9c:98:1f:35:69:97:fe:d4:19:c6:cb:de:66:81:cd:b9:
         f6:92:03:db:93:68:12:5e:98:46:77:b8:7e:cc:08:15:fd:84:
         44:1b:f2:12:75:b3:58:02:4b:46:a0:72:15:c5:07:6c:85:cd:
         05:04:ce:d2:c1:2a:90:79:3f:f7:1a:81:ba:d5:aa:54:36:f2:
         3b:02:a2:87:97:16:9c:50:be:e6:d8:28:1d:d7:22:1b:00:39:
         2d:c4:64:4c:25:bf:19:3f:1b:57:29:33:d1:a6:33:4a:8b:11:
         fe:0a:62:e0:55:13:f2:7d:0e:6b:bf:3f:e6:db:52:3d:51:f8:
         c8:1a:1b:4f:74:e8:61:67:5c:63:a8:94:be:5e:8a:8e:4e:1d:
         33:4d:e7:a7:7d:62:20:3b:71:ed:5e:79:49:73:29:7d:d2:d5:
         18:f5:b3:95:16:bd:3f:cb:fb:68:c9:27:c4:6c:cd:18:cc:9f:
         cf:4b:9b:14:8c:8d:2c:99:62:0f:fa:18:1b:ad:48:e9:39:11:
         3c:cb:81:4e:47:b9:8f:7d:95:c6:bd:8b:6e:d8:63:25:5b:32:
         6e:3e:38:47:bc:29:64:b3:2c:c7:36:b8:1d:6e:b2:af:d2:34:
         3d:4a:c5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:12:36 2026 by rpki-client