Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
File:                     PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json)
Hash identifier:          yT1cYczPZHfI1/p4YlXo9SbXhm1RcnHgQnMRtYd3ZeU=
Subject key identifier:   7F:4C:A9:F1:1C:0B:82:04:E4:27:56:A5:EA:19:CF:8B:37:89:21:9D
Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2
Certificate issuer:       /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
Manifest number:          0CB6
Signing time:             Tue 18 Aug 2026 22:36:01 +0000
Manifest this update:     Tue 18 Aug 2026 22:36:01 +0000
Manifest next update:     Tue 25 Aug 2026 22:36:01 +0000
Files and hashes:         1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: z57GOh2ay68Ia7st4oajEUlT7h3O+XGH+eU6CLNhiyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2
        Validity
            Not Before: Aug 18 22:36:01 2026 GMT
            Not After : Aug 25 22:36:01 2026 GMT
        Subject: CN=6a84de51-8f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:bc:75:79:64:91:a8:75:50:2a:a3:58:88:
                    37:8a:cc:7d:1b:28:01:ad:34:a4:4f:6d:71:9f:e9:
                    35:dd:ab:80:4d:5f:70:d4:bb:df:73:44:49:4d:4b:
                    55:a6:df:68:59:55:5a:58:e5:bb:67:de:6a:ff:04:
                    a1:d2:74:be:b0:28:3a:e5:dc:80:6c:28:73:46:c8:
                    fb:84:98:b9:7f:02:b9:2c:c7:a1:1b:07:14:ad:b0:
                    b7:50:f7:c5:df:05:e5:96:40:e7:35:39:5b:27:ae:
                    d1:6b:6d:40:1d:3b:06:6a:12:63:ee:de:fc:7f:f4:
                    64:4b:3f:57:d4:a9:20:e2:7b:86:aa:e5:aa:3c:89:
                    0b:e7:e4:93:23:81:71:7d:86:88:7d:ac:28:ae:91:
                    c6:a4:d9:25:7c:62:4d:63:c8:50:46:ac:f6:d6:2f:
                    53:0e:c4:ce:a3:a4:fe:c5:8d:2a:bb:30:28:5e:b1:
                    3b:c6:48:2f:53:01:d4:c6:3e:88:93:95:b7:72:71:
                    a8:de:41:e5:ae:dd:bb:00:51:39:3f:2f:1b:02:e4:
                    4f:7e:fe:64:4d:b0:85:67:69:1a:e2:7a:75:09:29:
                    fb:f5:ff:bb:50:c2:ef:c9:d8:fe:b4:07:94:32:cd:
                    19:e0:84:a2:fe:3a:8c:9c:3c:2a:9a:76:9d:08:5a:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:A9:F1:1C:0B:82:04:E4:27:56:A5:EA:19:CF:8B:37:89:21:9D
            X509v3 Authority Key Identifier:
                keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:38:c0:77:be:ae:71:cd:dd:53:be:cc:11:97:38:a7:88:
         00:8a:c7:bf:57:96:18:0d:cd:9b:d9:72:48:74:b0:7d:d1:55:
         55:66:a9:5a:d0:2b:5d:85:40:00:8d:79:b2:af:4e:bf:a8:83:
         36:71:63:d4:4f:73:ba:0c:55:d1:76:48:5f:c1:3f:8f:3b:bc:
         a3:89:f3:24:71:d4:23:eb:0a:cb:6e:36:53:06:e7:3b:c2:02:
         11:fe:b7:44:01:f6:d1:48:8d:69:e4:5e:43:9f:c9:97:cd:0a:
         f2:78:6f:c4:dd:50:d9:76:44:f6:69:28:5f:48:61:9b:1e:28:
         f9:1e:3c:e9:86:5a:28:14:16:ec:03:b9:cd:bf:83:9b:52:12:
         0d:2b:2f:3e:fe:3f:cc:a7:38:fe:af:63:e0:95:6f:d3:e1:bc:
         5b:35:f7:8e:2c:c4:05:84:bc:cf:91:1e:62:f0:b9:b3:49:d2:
         fc:ff:95:3e:1d:3d:13:aa:b5:da:79:ab:9c:8c:3a:7f:e8:47:
         37:48:1f:7b:66:96:7e:ff:ae:de:e1:21:f5:02:2c:79:ac:6b:
         7e:0f:ac:ba:99:0b:e0:9b:dc:e5:63:af:1d:4d:b2:fc:de:0e:
         89:b0:4e:78:34:f4:cd:1a:f5:79:40:3f:72:3d:e0:fd:39:1f:
         69:2a:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:38:54 2026 by rpki-client