Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
File:                     PnrrKf5aoynEr0n-NgOYf_HoWJg.mft (raw, json)
Hash identifier:          vubftBj6cNIggW3WNGrSd6QqTZbb2apdCLKWnS+22vI=
Subject key identifier:   FF:C0:0D:15:2B:81:5F:53:B2:A0:13:AA:CB:7D:68:DB:42:1D:EE:88
Authority key identifier: 3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98
Certificate issuer:       /CN=A912465F/serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
Manifest number:          89
Signing time:             Sat 31 Oct 2026 08:03:55 +0000
Manifest this update:     Sat 31 Oct 2026 08:03:54 +0000
Manifest next update:     Sat 07 Nov 2026 08:03:54 +0000
Files and hashes:         1: PnrrKf5aoynEr0n-NgOYf_HoWJg.crl (hash: iESpFVuIdfhMfEdSSXcpyzdSCG4ZZOzk2WW1m5QVrPY=)
                          2: D693D3C2064711F1AE681DED2D3D8C67.roa (hash: R08xIozBjqOPEnc9ObPFb2XMyk15jqEtA+6f1tT4Fic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl
                          rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 08:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912465F, serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
        Validity
            Not Before: Oct 31 08:03:54 2026 GMT
            Not After : Nov  7 08:03:54 2026 GMT
        Subject: CN=6ae5a0eb-5c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:ae:be:43:9c:81:e4:9c:c1:49:44:b5:4e:
                    3d:e6:57:21:62:18:c4:9a:33:f7:cb:bb:f6:b3:30:
                    86:bd:4a:d4:be:83:63:d5:66:2e:54:17:28:3e:1c:
                    b1:d5:0e:ac:3e:7f:59:26:c6:04:52:76:33:dc:07:
                    16:08:b4:e5:cf:ce:cc:39:a9:15:1e:1c:a0:d5:41:
                    09:5e:12:a0:fc:08:ec:ae:94:b6:33:84:dc:23:de:
                    2a:16:fb:93:96:0b:99:62:db:42:00:b5:8a:b1:5c:
                    98:60:78:0e:3a:de:bc:51:49:12:ef:ee:6d:30:9d:
                    4c:80:da:43:f8:12:5f:de:fc:bb:34:87:13:db:a8:
                    76:ac:82:fb:b0:93:69:74:d7:58:7e:3a:18:86:05:
                    ee:a9:3b:66:68:e6:fc:26:09:13:9f:0c:10:5d:e7:
                    00:ab:32:d4:10:de:35:ad:4d:87:1c:12:3d:b7:21:
                    5a:32:8e:70:6d:74:a4:09:b7:67:d2:d4:14:4d:97:
                    c8:ea:4f:85:91:ca:80:81:0f:af:14:d0:93:c9:89:
                    db:e8:48:2d:f6:4f:ec:a8:eb:7a:38:83:9c:5b:40:
                    93:93:2f:ea:53:81:3b:5d:57:66:af:49:f4:5e:97:
                    be:7f:33:bd:21:43:97:1d:81:7d:84:1e:1d:46:45:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C0:0D:15:2B:81:5F:53:B2:A0:13:AA:CB:7D:68:DB:42:1D:EE:88
            X509v3 Authority Key Identifier:
                keyid:3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:3a:38:d4:71:20:e9:ba:45:5d:d1:d0:31:b5:c3:c9:73:
         57:29:3c:d7:cf:44:b9:fd:02:ee:de:17:51:49:dd:65:bc:bd:
         a7:01:9c:02:e0:8c:94:9a:ab:ac:e4:13:5d:fb:54:bb:ff:26:
         b3:4e:9f:4f:af:ef:87:bc:00:c3:c8:89:f8:29:57:4a:0f:bf:
         e8:43:27:b5:cf:7e:d0:8f:04:02:fa:f5:71:82:06:cc:73:ef:
         9a:76:d6:f8:63:8c:1b:0c:c2:f3:79:5e:9c:f8:8a:ea:e6:30:
         a1:c2:2d:ee:21:91:ec:6e:7a:69:ac:d8:6e:b2:d6:7c:1b:03:
         db:e5:de:49:8a:f0:2f:f8:14:e4:bf:14:34:a1:06:86:af:86:
         1b:f8:56:0f:8e:37:70:33:ba:03:2e:52:2f:c3:56:c1:28:4a:
         16:d9:f4:fe:a5:07:df:d7:2d:09:c8:89:87:9a:85:5e:ce:23:
         dc:10:df:d2:6b:e1:d8:4f:d6:38:c8:1a:39:eb:8d:8b:16:07:
         40:a2:4d:3b:70:ca:07:d2:ec:d3:68:9d:39:66:2c:48:45:97:
         29:7f:49:5f:d4:26:51:b1:3e:e4:ed:36:2b:78:57:51:23:b5:
         c5:2e:67:3e:41:d4:99:68:22:98:cc:04:f6:4d:77:f4:f9:61:
         24:ea:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:24:44 2026 by rpki-client