Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
File:                     Pq60tRb3A-pY8W4I2opmdwP7XK4.mft (raw, json)
Hash identifier:          OBuXDraM6nuK/HEIzmbjzhBrfL7AErINlSD8r45uFCo=
Subject key identifier:   C4:85:CF:26:C4:94:90:CE:F5:CF:7B:E0:9F:7C:03:88:F8:D7:58:E6
Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE
Certificate issuer:       /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
Manifest number:          021B
Signing time:             Mon 27 Jul 2026 04:30:09 +0000
Manifest this update:     Mon 27 Jul 2026 04:30:08 +0000
Manifest next update:     Mon 03 Aug 2026 04:30:08 +0000
Files and hashes:         1: Pq60tRb3A-pY8W4I2opmdwP7XK4.crl (hash: PBFTIuRizyugH5D6Miw7ChTvff8j7aAimYuOdJCP1uA=)
                          2: B67DC27A60E311EEB04BEA49C4F9AE02.roa (hash: Ammp8qF05nah6v/McxV23VKxzM9VW/7aLFZmanvDnyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl
                          rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE
        Validity
            Not Before: Jul 27 04:30:08 2026 GMT
            Not After : Aug  3 04:30:08 2026 GMT
        Subject: CN=6a66ded1-a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:5e:06:f8:a9:af:f1:b6:aa:b3:de:f7:ae:
                    6b:74:23:53:47:2a:54:e8:a2:a2:7e:2f:e2:58:b4:
                    32:94:ad:b7:ab:a2:74:de:d0:b4:6b:34:8b:e5:79:
                    f2:00:b0:be:6a:8c:ab:0f:a1:1f:5a:f5:3d:49:25:
                    c6:bc:13:1a:6c:ac:67:f9:0b:f2:8a:10:cc:0d:d4:
                    9b:78:04:76:1b:fe:ac:61:c8:65:b3:88:21:d8:1e:
                    eb:70:94:bc:6e:b2:5b:63:90:61:56:85:77:cb:04:
                    ba:b4:b6:09:fb:e1:70:1a:91:2c:2c:bc:a2:a0:81:
                    29:5a:31:ca:d2:ec:70:a8:72:07:dd:bd:ac:64:da:
                    da:7b:33:de:a4:2b:b4:b2:51:44:cf:62:6c:f1:8b:
                    48:42:a0:1d:20:d5:99:50:0a:a8:53:2f:10:2a:f2:
                    05:18:a9:8d:85:ac:04:5a:2a:64:0e:79:ee:73:da:
                    bd:d2:27:c6:86:1e:7c:e5:02:61:b9:66:83:5d:34:
                    be:02:a5:49:80:fc:52:1f:75:5c:c6:43:64:00:de:
                    00:ff:87:c6:88:95:51:f6:de:ee:7d:a0:b6:0c:6f:
                    b6:e7:f3:ee:cf:00:51:18:b7:e8:11:10:0e:45:10:
                    36:14:2a:e5:89:8b:f1:66:9a:01:29:61:76:16:cc:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:CF:26:C4:94:90:CE:F5:CF:7B:E0:9F:7C:03:88:F8:D7:58:E6
            X509v3 Authority Key Identifier:
                keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:75:84:d2:62:7e:a5:3f:48:1c:a7:4d:06:15:f7:10:24:f9:
         f9:8c:d3:3f:2d:35:f0:02:f1:a2:cf:dd:07:9b:4b:f4:3c:c4:
         60:60:2a:87:b1:8a:b3:df:cb:0f:d0:86:f9:38:f1:a8:0c:22:
         34:90:c5:5b:e8:7d:1e:2e:ba:5e:da:71:f7:8d:8d:4a:82:9a:
         81:37:c2:93:29:3b:22:6b:b5:2d:0a:0a:af:0c:7e:91:f6:73:
         08:64:9d:72:d4:d8:a5:13:73:cf:f5:d2:46:41:5a:d1:16:00:
         2d:aa:cc:25:79:32:ef:ee:ad:36:8c:96:02:9a:dd:3a:e9:05:
         9f:17:10:d4:6b:85:a4:5d:16:e0:45:ca:cc:9e:d1:93:3f:f2:
         bb:fc:98:0e:70:58:86:d9:46:2b:77:19:a4:50:3d:a2:9b:f0:
         8f:54:07:62:85:a6:c2:f6:a5:3f:31:98:dd:f6:96:d4:be:87:
         6a:bb:29:a5:e3:dc:e3:6f:85:bf:42:c1:ab:5c:f6:55:52:c7:
         67:fe:b5:4d:04:35:b6:9d:6f:3b:d1:e1:f0:99:4d:8c:65:d3:
         7c:c0:29:2f:0b:a4:95:f8:bf:9f:96:07:f8:17:e8:9d:cd:b0:
         da:b7:9a:18:17:b0:6a:06:54:8a:87:64:bb:36:2e:71:ea:1f:
         f9:c0:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:26 2026 by rpki-client