Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File:                     pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier:          butUgb4LuNaYazG+NK8JpCw65toWJlXN9mk8lFOc5ZY=
Subject key identifier:   2E:51:01:C6:07:9F:AC:43:14:19:19:AB:3D:91:18:C9:BF:24:67:0E
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer:       /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial:       17C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number:          21C8
Signing time:             Fri 02 Oct 2026 16:42:05 +0000
Manifest this update:     Fri 02 Oct 2026 16:42:04 +0000
Manifest next update:     Fri 09 Oct 2026 16:42:04 +0000
Files and hashes:         1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: EBhUmCmDk7zv8sOLxbE0DJvdqUpJx8P4Td/glQYxLfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6081 (0x17c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
        Validity
            Not Before: Oct  2 16:42:04 2026 GMT
            Not After : Oct  9 16:42:04 2026 GMT
        Subject: CN=6abfdedc-6dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:08:bb:9d:8c:5a:81:88:b3:ca:93:8f:67:
                    9b:bc:38:02:77:a2:3a:ff:91:45:dc:0a:c2:47:75:
                    fb:be:57:4f:d2:4f:0c:ad:8f:fe:35:58:19:95:d5:
                    a6:ef:97:64:e8:56:9c:90:71:db:ad:87:dd:2c:63:
                    41:d1:6e:80:a5:6c:fd:d4:bf:fc:31:d0:46:e6:56:
                    71:40:34:dd:d5:4a:2a:65:4f:15:43:bd:db:e3:97:
                    24:4a:04:b5:44:0e:1e:ff:52:df:c2:e4:fc:52:b3:
                    99:56:45:0e:c4:6a:d6:f9:55:41:a3:af:2d:4b:0e:
                    bb:7e:a3:5a:50:3e:50:7e:59:6a:e9:6d:c7:2b:aa:
                    8b:e4:86:a6:7f:2d:74:73:76:94:73:b7:3d:72:4e:
                    74:57:d8:cf:28:5f:06:bf:ae:94:5d:3c:8e:72:34:
                    13:e2:2c:d6:d6:e3:86:84:4c:70:0f:a0:64:6e:5e:
                    16:6e:d9:88:44:30:76:c6:08:b0:3c:cf:1e:7c:68:
                    bd:77:14:9d:0c:72:9a:ef:76:6d:62:c4:cb:58:40:
                    14:14:6b:50:68:cf:13:3a:db:dd:a0:cc:21:49:3e:
                    78:44:ba:a8:4c:4c:26:49:98:fe:fd:7c:0c:fa:1d:
                    79:8e:cd:eb:4a:ca:24:e9:e2:67:a3:54:25:7e:5f:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:51:01:C6:07:9F:AC:43:14:19:19:AB:3D:91:18:C9:BF:24:67:0E
            X509v3 Authority Key Identifier:
                keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:69:48:d0:bd:e1:f6:d4:fa:e4:46:30:af:b4:b1:41:1a:
         bc:16:d3:5a:e9:8d:34:5c:66:19:0f:75:ab:36:3e:7d:4a:d6:
         64:7b:15:65:47:a5:3b:77:ef:3a:db:5c:72:2d:46:10:e0:80:
         16:fc:fb:68:bd:bf:a6:37:2c:b9:f6:b7:64:e7:ea:58:1c:c1:
         73:79:24:26:f5:34:d2:09:95:30:2e:f6:19:9a:61:93:76:47:
         55:ba:4c:18:9b:54:42:4a:6a:7f:91:5a:aa:34:00:c9:93:1e:
         6f:e4:40:2a:c8:a4:d8:82:9a:d3:2e:f1:6f:1b:36:c1:08:97:
         96:8c:54:75:24:9f:83:c5:30:a6:fe:e2:c4:74:14:45:d3:43:
         2f:57:3d:ae:84:3a:12:57:49:01:34:58:70:ff:b6:33:0a:a6:
         64:2d:08:2a:67:1d:f9:30:9e:93:4e:23:50:6b:f6:b3:66:2c:
         ab:4c:0c:6f:1f:78:3f:8a:f8:b5:8a:c3:16:26:f3:65:f1:92:
         e6:4f:61:2e:24:ed:6a:f1:9d:46:0e:3c:43:73:c3:b4:c7:29:
         ca:c0:d1:89:65:a0:8e:12:cf:e4:b3:f0:b4:15:78:9f:6e:1f:
         cb:91:db:50:45:6a:30:43:dc:50:49:38:41:27:9f:9c:68:e6:
         c6:7a:fd:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0
MEEyRDVBNjYwHhcNMjYxMDAyMTY0MjA0WhcNMjYxMDA5MTY0MjA0WjAYMRYwFAYD
VQQDEw02YWJmZGVkYy02ZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2wIu52MWoGIs8qTj2ebvDgCd6I6/5FF3ArCR3X7vldP0k8MrY/+NVgZldWm
75dk6FackHHbrYfdLGNB0W6ApWz91L/8MdBG5lZxQDTd1UoqZU8VQ73b45ckSgS1
RA4e/1LfwuT8UrOZVkUOxGrW+VVBo68tSw67fqNaUD5Qfllq6W3HK6qL5Iamfy10
c3aUc7c9ck50V9jPKF8Gv66UXTyOcjQT4izW1uOGhExwD6Bkbl4WbtmIRDB2xgiw
PM8efGi9dxSdDHKa73ZtYsTLWEAUFGtQaM8TOtvdoMwhST54RLqoTEwmSZj+/XwM
+h15js3rSsok6eJno1Qlfl9HAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5RAcYH
n6xDFBkZqz2RGMm/JGcOMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2
MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO
VTZaNm1MZG5HV3hBb3RXbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASOZpSNC94fbU+uRGMK+0sUEavBbTWumNNFxmGQ91qzY+fUrWZHsVZUelO3fv
Ottcci1GEOCAFvz7aL2/pjcsufa3ZOfqWBzBc3kkJvU00gmVMC72GZphk3ZHVbpM
GJtUQkpqf5FaqjQAyZMeb+RAKsik2IKa0y7xbxs2wQiXloxUdSSfg8Uwpv7ixHQU
RdNDL1c9roQ6EldJATRYcP+2MwqmZC0IKmcd+TCek04jUGv2s2Ysq0wMbx94P4r4
tYrDFibzZfGS5k9hLiTtavGdRg48Q3PDtMcpysDRiWWgjhLP5LPwtBV4n24fy5Hb
UEVqMEPcUEk4QSefnGjmxnr9Ew==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:54 2026 by rpki-client