Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
File:                     plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json)
Hash identifier:          YwtROFeUbHEzu8E58zSQGU/yYM1zoZzpI/erc1c9CmM=
Subject key identifier:   9D:F3:14:7D:64:C7:47:28:E2:5F:23:E4:82:DF:9B:EC:66:CD:CB:BB
Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
Certificate issuer:       /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Certificate serial:       28F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
Manifest number:          28E5
Signing time:             Fri 12 Jun 2026 15:34:05 +0000
Manifest this update:     Fri 12 Jun 2026 15:34:04 +0000
Manifest next update:     Fri 19 Jun 2026 15:34:04 +0000
Files and hashes:         1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: K8h7wTrJsyuikA7JQqdoaIP8hRRn+B64W2vEicjJb4s=)
                          2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: LoCmdUsK6L+TshugdKCnyVfyQSooI4RUEUwWon0yLJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10489 (0x28f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
        Validity
            Not Before: Jun 12 15:34:04 2026 GMT
            Not After : Jun 19 15:34:04 2026 GMT
        Subject: CN=6a2c26ec-be5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:9f:1c:bf:6d:8e:29:93:69:50:26:9e:cb:
                    75:84:32:9d:e5:b8:21:9e:1c:eb:2b:d4:28:65:7e:
                    f4:4f:ef:43:7e:36:c6:53:be:f6:d3:9c:a8:cc:c7:
                    99:56:68:2b:3d:59:75:8d:96:3f:c9:d8:49:4f:f1:
                    31:93:6a:56:24:e6:ed:c8:49:69:44:90:5c:2c:40:
                    7b:9e:a0:0a:2b:ec:db:3f:f9:cb:55:7f:7a:f7:68:
                    f4:b6:a3:23:c3:9b:b2:7f:b0:cc:1c:b9:29:ea:09:
                    a1:22:3a:1e:16:4b:f5:46:f9:18:4a:9d:56:9e:3b:
                    ea:14:32:6b:08:cd:a5:dd:e9:4d:df:26:3f:1f:5b:
                    5d:c4:f0:bc:bf:6b:5f:bd:96:61:e0:68:96:06:02:
                    33:3a:ec:19:1e:f7:e4:b2:82:3f:19:be:98:1a:6b:
                    ee:10:8b:99:85:c6:52:49:df:58:97:19:cc:ff:01:
                    64:6f:33:91:e3:2d:b5:11:24:2d:03:61:dc:ab:ea:
                    9f:2e:2a:f7:f0:43:1c:b1:7e:dc:08:5e:d7:3e:3f:
                    fe:5a:c5:4c:88:e1:28:93:75:6f:b0:9e:b2:7b:9d:
                    09:bb:bd:13:ba:b3:ac:e1:87:e1:7e:cb:8b:b6:b8:
                    5c:a4:81:db:89:61:a4:be:37:45:32:c4:82:9c:25:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F3:14:7D:64:C7:47:28:E2:5F:23:E4:82:DF:9B:EC:66:CD:CB:BB
            X509v3 Authority Key Identifier:
                keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:28:ca:58:df:41:34:4f:0c:eb:57:54:ef:31:f9:0c:0d:
         97:fe:79:c5:64:63:ed:89:ed:00:62:f1:95:32:c3:c8:2f:ab:
         2a:2e:ee:8b:c0:47:63:9a:eb:fb:87:2e:e7:1c:ca:13:05:ee:
         99:f4:37:42:c6:03:12:a9:8a:9e:74:82:49:b3:b0:e2:cf:9b:
         74:c8:52:16:ea:2e:6d:f4:e7:b0:81:43:ca:30:c1:a3:47:13:
         19:ad:53:76:5f:6b:99:81:69:44:f4:ce:f9:d6:e7:c6:d4:57:
         2e:8c:33:84:5c:07:14:d1:9b:e2:5e:4b:3f:ae:ee:9a:d5:0d:
         fd:9e:2a:5e:97:f9:d8:45:43:c8:12:aa:30:73:fd:de:8f:cd:
         e4:a9:9f:35:6a:cd:05:f8:c2:d8:6e:ce:0b:3e:c2:4e:70:ae:
         c1:fb:8d:a6:fc:ac:00:00:15:cc:3b:09:d3:5b:63:9c:01:4e:
         f7:9a:af:65:65:2a:16:6c:3b:27:9d:d6:ef:80:98:84:a5:89:
         25:94:ef:75:30:ec:e8:1a:0b:68:64:28:f8:3c:14:f4:b3:09:
         3d:29:28:2e:56:a7:ad:66:e3:19:7b:b3:61:56:b2:9a:67:b9:
         af:35:9e:d2:07:f2:82:cb:dc:e7:17:2a:bb:38:e8:ff:89:d7:
         38:cb:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:46 2026 by rpki-client