Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
File:                     PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json)
Hash identifier:          XHNUbcs3wsyUVU1XAfp0MlRgrR6kllK+lU9QEEUBrzE=
Subject key identifier:   70:AD:10:1A:2E:D4:42:4A:A0:F8:5E:91:D4:53:D1:1B:30:26:5E:F5
Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE
Certificate issuer:       /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
Manifest number:          79
Signing time:             Wed 19 Aug 2026 08:29:56 +0000
Manifest this update:     Wed 19 Aug 2026 08:29:55 +0000
Manifest next update:     Wed 26 Aug 2026 08:29:55 +0000
Files and hashes:         1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: smDhC2G2e+HF+/HFj7oku4TdrDvGUWOEuxz4Od1I6HQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl
                          rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE
        Validity
            Not Before: Aug 19 08:29:55 2026 GMT
            Not After : Aug 26 08:29:55 2026 GMT
        Subject: CN=6a856984-4f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:34:cd:5b:b4:8b:63:f5:8b:a8:86:28:21:
                    eb:c1:78:36:0d:95:38:21:6d:26:d2:47:e1:5c:a1:
                    a4:77:83:fe:5a:b1:23:09:1b:df:a9:61:84:8e:8f:
                    7d:58:6e:c2:4b:31:ec:57:64:20:da:8b:8f:d5:20:
                    38:b5:ed:3c:c2:b8:a8:a5:ef:c9:39:85:ae:b1:89:
                    5d:aa:bc:b6:53:e8:ad:69:88:08:4c:0f:0f:6f:90:
                    95:5e:2d:6e:da:7c:34:81:6e:4d:c0:9c:ce:f0:cb:
                    d4:07:77:7e:b0:05:c5:f4:2c:6b:e5:88:b6:c2:d5:
                    33:19:8c:de:82:5c:c2:06:84:68:16:b3:3f:5c:87:
                    77:29:ed:7d:55:1b:ca:df:5b:79:86:d8:3a:ed:21:
                    d7:ce:c1:92:9a:da:14:bf:65:d8:b2:68:22:8d:fd:
                    7f:2d:ce:9d:fb:a9:be:c6:96:54:08:d0:47:ac:c4:
                    08:42:97:1d:d7:1c:3d:8c:62:8f:c9:2f:d3:11:da:
                    b0:31:16:d8:3e:d4:f1:2f:49:b5:30:6c:5d:2b:c3:
                    26:a4:12:cc:70:14:38:17:2c:35:d0:22:43:b4:45:
                    12:5e:9c:17:5c:b3:58:a5:ef:f8:ee:d5:9a:45:37:
                    15:3a:68:10:89:92:c0:97:d0:2c:8f:ea:db:4a:77:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:10:1A:2E:D4:42:4A:A0:F8:5E:91:D4:53:D1:1B:30:26:5E:F5
            X509v3 Authority Key Identifier:
                keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:16:d5:88:36:98:7e:6e:58:07:a5:f9:b2:55:18:28:82:
         df:af:9a:7b:e2:6a:0e:b2:98:81:d8:52:96:61:c5:4e:8e:ea:
         2f:59:cd:4e:6f:85:5b:6d:a4:d3:95:52:c7:75:0a:a1:c4:b9:
         f6:01:5e:bb:a3:fb:7a:8f:19:48:45:96:e6:ab:82:a1:6a:89:
         16:33:d2:19:6a:5a:2a:25:42:57:f0:4e:08:e4:0e:d0:d2:65:
         98:4b:5a:fa:63:3e:d3:a1:86:5d:96:5d:b5:f1:3d:11:9d:f6:
         d7:ea:e1:c6:e2:94:31:82:28:83:89:36:af:ad:be:d3:2d:cf:
         87:cc:f4:16:cb:ae:8b:70:e1:b8:fb:6a:a0:aa:3f:75:d2:d1:
         be:b3:21:ec:9f:a9:06:52:81:a8:0d:a3:c6:25:7b:ec:e1:a5:
         98:03:b6:44:13:af:8e:fc:9c:de:3f:15:8d:dd:a8:ae:22:18:
         c8:73:d3:6e:42:e6:f4:bb:fd:88:2e:76:2c:bf:ab:ba:2b:82:
         d9:3a:8c:c9:2b:0b:76:24:b0:fc:39:86:67:73:cb:2a:49:59:
         a3:ef:ab:f2:9c:8a:82:0c:f4:75:a8:6a:79:65:3a:b1:c6:28:
         48:ab:46:25:cd:d7:ad:3a:a1:48:2d:e8:85:84:02:62:d9:a9:
         b6:ab:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:32 2026 by rpki-client