Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
File:                     pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json)
Hash identifier:          1T1FI29vKU4j3qkaBFtlv66ZIMvcQrIV6LPMfpKYnDo=
Subject key identifier:   93:CE:75:55:5E:A4:A8:34:30:C9:91:CC:D4:F8:A6:27:37:44:4F:F2
Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70
Certificate issuer:       /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
Manifest number:          013C
Signing time:             Mon 27 Jul 2026 07:28:13 +0000
Manifest this update:     Mon 27 Jul 2026 07:28:12 +0000
Manifest next update:     Mon 03 Aug 2026 07:28:12 +0000
Files and hashes:         1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: TIe27mCcDooGqkjX8BGJKelIS98S+KaECb9VSK7iABA=)
                          2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: fmyOBlJp+M7Q/7VoNscYpSno6SHGtVPaP/WM+TDWYG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
        Validity
            Not Before: Jul 27 07:28:12 2026 GMT
            Not After : Aug  3 07:28:12 2026 GMT
        Subject: CN=6a67088d-079d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2c:8d:a5:d2:ed:04:19:75:ff:5a:d9:70:e4:
                    9f:22:f7:83:6b:bd:c4:b5:4f:c8:a6:ea:46:3d:21:
                    7b:a9:ac:28:11:1c:9f:d6:99:ee:6a:d0:8a:40:41:
                    86:e2:da:92:1e:c0:9e:14:32:e4:02:df:93:f1:65:
                    d0:04:b7:99:29:5c:4c:4a:bd:5c:25:4b:e1:9a:fe:
                    46:86:d1:5f:bb:13:71:1c:85:52:ee:2b:23:1d:03:
                    ed:68:b0:ed:ef:44:36:e5:b5:6c:7b:6f:26:b6:d1:
                    d0:99:83:6d:20:d1:cb:8c:6a:2d:a3:6a:b8:0c:5f:
                    17:10:a9:16:52:73:77:3f:74:75:b8:61:4e:21:55:
                    2c:e6:55:7a:8c:2d:8a:8f:21:29:49:a4:11:0c:f8:
                    b8:e8:f8:77:c1:4b:1f:af:38:a6:66:10:f1:11:74:
                    70:91:ce:77:97:18:ec:cc:50:b1:60:61:06:f9:20:
                    a7:4d:67:61:ce:cb:6f:21:2a:f9:82:3a:a8:fb:be:
                    f0:64:7b:94:dd:e8:44:33:06:59:8f:13:33:04:bf:
                    ac:26:36:ea:9c:7f:1d:10:e6:cb:7e:0a:de:6b:f6:
                    12:50:a3:7d:df:02:f2:39:bc:f2:19:55:a8:11:d6:
                    fa:d1:f5:c2:c6:9c:9e:43:85:42:9f:89:38:9c:f4:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CE:75:55:5E:A4:A8:34:30:C9:91:CC:D4:F8:A6:27:37:44:4F:F2
            X509v3 Authority Key Identifier:
                keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:83:d4:5c:9f:c8:7a:c5:50:38:3f:5b:10:f4:58:e6:d1:a1:
         22:3a:fd:7e:9b:21:43:0b:03:81:71:75:17:c4:ac:f4:3f:71:
         5d:61:99:6e:f3:e2:d1:97:a1:d4:5a:e4:51:58:a9:48:2c:48:
         04:8f:1a:7a:db:24:e2:4d:40:3b:f1:e0:53:45:1e:b5:79:38:
         52:c5:f3:8a:77:42:11:3d:ed:38:1b:84:05:6d:ae:ec:1d:24:
         2d:e5:c8:90:8f:9a:b6:22:ed:ad:94:fd:2b:fa:b0:6b:53:48:
         2d:b9:41:c7:04:98:d7:1f:3c:cc:cf:38:ce:ed:50:44:dc:d1:
         1e:29:5d:1b:c0:d8:36:39:13:c0:83:c3:c5:3a:6d:f7:b8:42:
         b8:e8:76:c4:8e:26:ab:75:91:88:17:ea:c9:4b:2d:f7:4b:d3:
         3b:c3:d5:bc:68:f6:7d:ca:b9:bd:eb:7e:33:d6:84:4a:b3:11:
         9c:0e:78:b5:eb:04:de:18:88:e5:cd:ad:8e:f6:5d:66:53:83:
         c0:52:2a:d4:92:f4:f0:90:ba:6e:fa:09:60:fd:c9:b7:56:ad:
         d9:50:c2:57:4a:21:a5:5d:bc:34:9e:eb:ca:78:9f:a0:45:92:
         cf:68:c1:0f:82:48:71:41:da:b2:6c:56:86:17:d1:fc:17:77:
         28:0f:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:27 2026 by rpki-client