Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
File:                     plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json)
Hash identifier:          +Jz9fYcrM3j/dG3u26s9H/YsRtraHbHqB8RUWLA+x5w=
Subject key identifier:   4F:B1:5B:FA:1C:BE:8C:66:1D:8E:C6:80:27:AB:93:84:CC:35:C3:99
Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
Certificate issuer:       /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Certificate serial:       2910
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
Manifest number:          28FC
Signing time:             Tue 28 Jul 2026 15:40:50 +0000
Manifest this update:     Tue 28 Jul 2026 15:40:49 +0000
Manifest next update:     Tue 04 Aug 2026 15:40:49 +0000
Files and hashes:         1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: kV69Zf2ZegXW6+Vopa4Zw4cr5Hcx/xyldYvf1i1fPcI=)
                          2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: LoCmdUsK6L+TshugdKCnyVfyQSooI4RUEUwWon0yLJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10512 (0x2910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
        Validity
            Not Before: Jul 28 15:40:49 2026 GMT
            Not After : Aug  4 15:40:49 2026 GMT
        Subject: CN=6a68cd82-0629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:36:2a:b0:31:f4:74:db:c0:40:70:36:d5:
                    f7:e7:08:32:ed:5f:08:b0:f4:c8:12:06:c4:13:f8:
                    cd:5d:e6:79:30:35:43:94:2c:f9:d9:51:9e:43:c0:
                    1b:41:a0:26:30:e0:7a:08:4f:b0:d5:9c:cb:f2:7b:
                    fe:36:c8:fc:86:8a:e9:fc:d6:35:5b:2e:87:88:78:
                    90:c6:22:9b:b5:6d:38:79:2a:0c:ab:cd:97:d6:8f:
                    f3:c0:69:bd:b2:42:05:fa:0b:ff:76:42:5a:8a:01:
                    01:c4:ba:e2:77:94:81:96:b6:f3:72:7d:f4:b7:17:
                    f4:02:81:7d:20:84:aa:bf:58:c0:86:be:eb:8b:e9:
                    b0:3c:b4:22:4a:b1:c0:3e:fe:a3:8e:32:13:5d:f9:
                    4f:67:d0:1a:d2:c4:29:8f:2d:e7:5e:9d:75:ba:cb:
                    54:74:35:98:10:8b:98:1e:92:70:02:2c:ad:e0:28:
                    bb:1a:11:db:5b:98:8e:de:71:d7:54:46:51:49:2d:
                    5b:b0:d4:77:98:b8:97:51:23:96:73:d9:55:8a:75:
                    3d:0c:49:91:1c:30:f6:19:ed:76:a6:af:a3:e5:f4:
                    b9:e2:56:24:1e:cf:e9:2d:22:50:71:eb:7a:5a:d1:
                    0f:7d:f5:f5:4a:33:16:cd:55:f1:42:55:82:be:ff:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B1:5B:FA:1C:BE:8C:66:1D:8E:C6:80:27:AB:93:84:CC:35:C3:99
            X509v3 Authority Key Identifier:
                keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:54:21:f7:11:54:e1:2a:67:b7:08:f1:9f:73:e3:e4:f3:
         27:f3:2a:58:02:15:d7:9b:4d:9e:b9:3c:04:5f:86:82:96:bf:
         e5:f5:1d:14:de:00:56:63:56:c7:1f:d5:b6:4f:8f:54:e4:34:
         4c:98:53:4e:25:0a:5c:66:80:1b:dd:0b:c6:0f:11:cb:2b:83:
         66:3b:23:3b:cc:fb:e6:9e:a5:05:0d:c6:8b:bd:46:fa:41:73:
         46:71:ec:9d:e0:bb:79:75:86:a7:5e:ae:3c:da:db:3a:f6:71:
         cf:5a:cb:6a:25:b2:6a:2c:d4:07:65:2a:06:4e:bd:88:3e:58:
         e8:09:4d:1c:b8:85:6d:6c:03:95:e1:23:83:38:ba:e5:f6:fa:
         96:f4:27:ed:f6:33:5f:93:8f:f6:47:53:9e:45:aa:71:22:42:
         c9:78:e7:42:3a:a0:00:30:cd:12:04:c8:af:04:69:bb:09:59:
         9c:aa:8b:06:ef:75:b6:5f:7e:1c:af:cb:c0:91:be:a7:cd:d6:
         3a:d8:c0:49:4a:27:c5:23:64:cb:a1:18:63:12:e4:c6:a5:06:
         3a:05:ca:3b:f7:27:c4:33:f6:de:6d:05:c9:92:c9:1c:a0:b4:
         49:39:c8:7d:3d:b6:db:69:b0:05:89:47:2a:bd:6a:f2:56:6d:
         0d:b8:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:49 2026 by rpki-client