Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File:                     Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier:          KM1WFljM4XJ/7KMb5XizMkT7W0f3egcnNfyb0r26CaY=
Subject key identifier:   4B:18:39:4B:5D:37:02:E7:93:60:2F:E7:49:81:3F:4D:DE:35:95:2D
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer:       /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial:       0407
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number:          03E2
Signing time:             Wed 19 Aug 2026 00:53:22 +0000
Manifest this update:     Wed 19 Aug 2026 00:53:22 +0000
Manifest next update:     Wed 26 Aug 2026 00:53:22 +0000
Files and hashes:         1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: WjhU9ARjgDZUpCsXatJzxTs7BOQgysFI/sUTxdLHKXw=)
                          2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: Bba3ux72e27e1jQ1j28aUjisSioDvxuoxGTwro6zTXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
        Validity
            Not Before: Aug 19 00:53:22 2026 GMT
            Not After : Aug 26 00:53:22 2026 GMT
        Subject: CN=6a84fe82-d55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ce:c8:bd:3a:9d:73:ce:09:4b:7b:40:81:47:
                    01:c2:6c:df:8e:cd:70:ef:96:fa:0e:37:fa:cb:18:
                    c2:b2:4e:3c:6f:e4:8e:e7:54:1b:5a:83:93:01:a0:
                    cd:20:b2:b2:d1:f4:27:74:c7:56:01:54:04:80:01:
                    fb:cc:4a:f6:f8:ae:3d:3a:1b:81:f5:22:0f:a5:d1:
                    3f:40:18:b6:c4:be:5d:e5:b2:6e:a1:b6:44:b2:e3:
                    cd:b7:fd:45:7e:df:4f:fa:10:a4:78:84:99:fc:54:
                    0e:87:9e:49:4f:7f:82:a7:c8:19:fd:4a:6e:44:80:
                    ad:95:bd:32:5c:e5:ba:ff:c5:48:6e:aa:6a:66:68:
                    bc:c4:a3:d0:b0:35:56:24:70:82:29:d4:85:1f:77:
                    ab:aa:4f:0a:6d:6d:ff:b6:63:76:91:58:8f:ec:2e:
                    22:3c:5e:e7:af:47:f9:78:74:59:3c:e4:6c:e2:a2:
                    1c:95:3e:19:32:15:d6:66:75:82:f3:69:36:d3:4e:
                    7e:19:53:a7:46:d0:fe:b0:2a:51:f8:c5:cc:2b:27:
                    02:0b:56:7e:81:b2:08:75:66:64:63:1f:39:33:dc:
                    41:05:d4:90:2d:30:0f:c5:6f:55:77:55:6e:80:7b:
                    d3:d6:e3:b1:fe:90:ff:6d:36:88:a0:8e:ee:8c:d1:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:39:4B:5D:37:02:E7:93:60:2F:E7:49:81:3F:4D:DE:35:95:2D
            X509v3 Authority Key Identifier:
                keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:df:ae:74:e3:42:ef:66:b2:f6:8a:ff:bf:51:ca:f7:70:ff:
         9a:91:f7:a5:e2:24:44:c8:25:8a:ae:f6:fe:3c:01:64:f8:c5:
         02:f8:31:be:f9:03:0b:0b:71:61:32:4e:f2:03:fa:1e:42:fb:
         fc:67:54:d7:3b:6f:1c:41:da:8f:06:97:8c:af:64:b9:77:5f:
         cc:7b:26:0d:56:10:8b:75:0a:e3:7f:55:bf:a2:6c:e9:e2:74:
         59:d4:25:82:cc:cc:f0:0b:f2:13:6f:33:48:f3:ba:07:4e:d7:
         ee:c3:76:e8:51:79:1d:75:a3:41:c0:b5:50:63:a7:46:f7:ab:
         1c:7e:d6:78:ab:eb:8e:53:65:38:4b:d3:e6:58:cc:a0:87:98:
         c9:e7:f8:7a:a5:90:45:31:2e:7d:0c:75:9a:67:31:20:59:62:
         5a:21:f3:ff:13:93:ad:12:42:f4:fe:df:73:15:b4:cb:dd:ac:
         ea:3f:92:73:da:51:28:4e:9a:b9:2e:cd:04:cd:ed:b5:f5:f6:
         50:4f:4f:e3:57:8b:2c:68:dc:f8:8c:59:df:04:c2:4e:5e:c1:
         85:c2:b8:c0:f5:68:cc:64:16:54:06:fb:66:c6:24:f3:fc:76:
         44:4d:da:b1:f3:35:c6:33:4b:cc:05:af:88:b7:b3:97:56:32:
         b3:84:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:53 2026 by rpki-client