Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
File:                     PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json)
Hash identifier:          7UQ0fKIzNOb3YGd1nvlKkVoRlw3BhqdYJCEX4Id6CZc=
Subject key identifier:   80:86:10:E6:46:A4:E2:A9:34:E7:B9:6E:23:98:DC:37:65:08:36:EE
Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8
Certificate issuer:       /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
Manifest number:          01A8
Signing time:             Wed 09 Sep 2026 04:36:10 +0000
Manifest this update:     Wed 09 Sep 2026 04:36:10 +0000
Manifest next update:     Wed 16 Sep 2026 04:36:10 +0000
Files and hashes:         1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: jnzR6WjGQpp4NMFHX7PbGhK1dbT+Abf0SUYh9jX3Xn4=)
                          2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: 1x8IbrPB79S9fDKHEpoprdpnMZNbbRc8APbn4VWHD7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 04:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
        Validity
            Not Before: Sep  9 04:36:10 2026 GMT
            Not After : Sep 16 04:36:10 2026 GMT
        Subject: CN=6aa0e23a-f0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:e6:50:b5:10:05:62:80:eb:6e:7b:82:8c:
                    b8:b2:70:fe:66:89:ba:a8:23:e2:58:e1:51:e6:b5:
                    b4:08:f1:50:0d:6e:77:c7:d0:21:03:11:15:92:9f:
                    67:77:cd:ac:c2:8a:f0:ce:41:71:92:07:d7:1d:7a:
                    e4:d1:fc:45:e9:a8:d3:73:ae:ac:de:33:15:25:57:
                    15:f8:69:7f:9b:00:d0:d6:c0:0b:de:9f:87:1b:2e:
                    07:6c:6c:f1:f5:ba:7d:84:d7:90:71:3d:6d:03:4f:
                    65:04:48:df:9b:98:52:fc:c4:db:5b:b4:ce:7a:4f:
                    59:3c:9e:2d:2f:9d:c8:24:0e:44:a9:68:bc:d5:69:
                    ca:a1:2b:dc:4d:fa:c7:01:a0:3f:22:c7:b3:93:80:
                    73:92:60:9d:97:ed:c1:eb:57:81:12:04:d7:4b:73:
                    70:d3:3c:5e:c3:f3:6d:7d:f6:7d:1c:07:29:dc:aa:
                    59:04:f3:a5:e8:0f:61:46:a5:d6:a2:e8:cc:bb:5f:
                    66:c7:04:66:88:91:c6:4d:8a:8f:6c:1e:6d:4a:c7:
                    4b:6d:22:0a:0d:6f:55:db:c2:fe:0a:8b:f0:eb:ec:
                    13:50:47:55:25:e1:d1:3d:44:d8:80:bc:99:f0:7c:
                    32:c9:24:3f:74:18:00:e3:d9:e6:0f:cd:ea:e8:1b:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:86:10:E6:46:A4:E2:A9:34:E7:B9:6E:23:98:DC:37:65:08:36:EE
            X509v3 Authority Key Identifier:
                keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:0b:1a:00:06:af:7e:04:88:49:29:7e:66:b1:a5:ae:47:
         87:14:ba:77:9f:0c:0a:63:63:5f:1f:29:85:3c:d1:fd:e1:27:
         fb:29:40:9d:94:a3:19:45:c4:a3:60:ca:62:b2:f5:79:1c:70:
         29:c2:e6:ed:88:40:c1:51:05:74:04:52:73:8b:58:8e:23:dd:
         d5:bf:f6:03:0a:89:5f:02:22:c5:73:d2:7a:b1:a8:b1:d0:dd:
         b2:e2:d2:6a:b7:0d:4b:cf:c8:2e:a6:11:92:b2:b7:89:13:70:
         a0:2d:fd:aa:fa:a0:eb:d6:d3:e9:70:d4:a4:11:d5:9b:6b:90:
         12:c1:cd:52:00:64:99:ff:b4:03:9f:7f:ec:09:ff:1f:9a:ae:
         4a:16:a5:34:89:7f:27:4f:97:8d:3f:a4:fb:a5:29:51:7a:8f:
         73:05:42:14:c8:14:82:a6:d2:b6:a4:39:74:4a:64:95:22:86:
         4f:eb:79:aa:c5:02:b9:4a:c4:e1:2f:84:c6:38:2c:c1:8e:f4:
         70:12:31:48:8d:df:1f:74:3c:80:23:8b:b7:a0:63:a6:eb:6c:
         2f:ba:eb:e1:9b:2a:55:ad:83:db:0d:e1:95:b7:4a:aa:29:12:
         12:66:c8:80:3b:72:83:26:be:23:74:ef:bd:eb:23:43:92:d9:
         ba:9f:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:49 2026 by rpki-client