Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
File:                     PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json)
Hash identifier:          Q3IWAfFFGcbDSPZXCaQiNJx5q3lJwEj3y0eHpZ0QL+8=
Subject key identifier:   2F:17:72:07:04:FC:E8:39:55:75:14:8A:34:1F:D0:C6:7B:FF:88:8E
Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0
Certificate issuer:       /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
Manifest number:          086F
Signing time:             Thu 16 Jul 2026 21:06:13 +0000
Manifest this update:     Thu 16 Jul 2026 21:06:12 +0000
Manifest next update:     Thu 23 Jul 2026 21:06:12 +0000
Files and hashes:         1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: 1upUPivjWvCnvETA+WfHfSYCmZ3s5VfQA/NS8pCmIhY=)
                          2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl
                          rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0
        Validity
            Not Before: Jul 16 21:06:12 2026 GMT
            Not After : Jul 23 21:06:12 2026 GMT
        Subject: CN=6a5947c5-8c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:13:a6:04:87:af:e4:4f:87:b8:a3:54:44:
                    c2:ee:a9:bd:0b:b9:3f:73:07:21:c1:ca:ba:80:15:
                    70:38:ad:75:c2:1f:85:79:3c:2a:e9:9a:37:20:6e:
                    aa:23:a1:15:ed:0c:c0:8c:8c:d9:6d:b6:42:64:ee:
                    cc:2c:37:93:a5:3a:75:06:76:34:e3:8e:14:5f:77:
                    31:2c:7e:19:ec:c5:2b:8e:c1:bb:57:8d:7a:ff:4a:
                    89:c5:0b:28:48:05:3e:ed:da:c7:e8:fc:14:45:01:
                    a2:b5:b4:af:9a:64:a4:7b:4a:53:f0:a5:db:c6:d3:
                    4b:c5:47:6b:13:c1:c5:62:18:6b:e0:1a:8c:49:3c:
                    af:80:87:2f:9f:f7:f2:a0:4c:cb:13:fe:a9:ba:f5:
                    a6:02:5b:10:da:fc:96:b6:cf:c5:b3:79:4b:33:b4:
                    d3:8b:67:03:73:91:b3:64:4a:4c:26:e8:58:d4:d9:
                    6b:20:ff:25:b0:fc:c5:72:30:75:03:fd:42:42:f8:
                    3f:0d:0e:a4:53:f6:d5:a3:87:95:cb:57:a8:95:0c:
                    0b:4a:b6:46:11:21:38:96:9a:52:23:fd:77:d5:f7:
                    03:00:cd:bb:92:74:28:ca:4b:0c:53:33:89:31:78:
                    5d:86:97:23:59:91:ef:7b:c8:fe:02:a5:bf:12:03:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:72:07:04:FC:E8:39:55:75:14:8A:34:1F:D0:C6:7B:FF:88:8E
            X509v3 Authority Key Identifier:
                keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:36:dc:db:91:74:87:1f:45:c6:04:c7:60:f8:6b:ba:77:ef:
         7d:fe:4d:92:51:14:14:38:e1:b8:95:15:54:0c:8b:5e:17:7e:
         11:9e:d2:59:71:97:88:9c:59:c3:75:25:8c:3e:2a:49:06:25:
         28:4b:ae:a5:46:3b:77:f7:b1:5f:9c:b3:12:22:8c:e9:25:57:
         89:cc:98:7f:8d:9f:9b:17:41:ea:63:06:90:14:d8:45:29:4c:
         45:25:fb:9e:e1:0b:4a:c7:9e:33:21:34:90:1e:19:d6:90:58:
         9e:10:59:62:ee:46:c3:01:a5:52:ad:5c:58:8e:86:b6:2f:47:
         ba:9c:e3:be:02:30:77:e7:14:da:ab:94:3e:e8:63:cc:c7:18:
         88:bb:0d:a5:72:74:2c:77:69:24:7b:19:27:6e:27:19:87:a8:
         1b:26:36:fc:db:43:bd:61:e9:e4:32:0e:74:0d:05:cb:2d:b8:
         01:2f:67:ed:a1:64:e4:9b:cc:64:2c:2f:ad:44:41:af:fd:fe:
         22:e5:8d:8d:48:64:04:f6:cc:5a:60:a7:ee:bb:cb:84:c7:65:
         6b:bb:2b:c9:c1:08:05:f1:d9:9f:48:0f:30:7f:e4:b4:d7:39:
         7a:2d:15:0f:13:58:54:80:b0:f0:c0:32:f8:94:98:de:0c:82:
         8d:09:2c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:10 2026 by rpki-client