Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
File:                     PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json)
Hash identifier:          jqoOhnjxOEFkvB6qwZNbmWb9Ep5W0EYdVZBVxoSeMuY=
Subject key identifier:   60:FB:15:25:64:51:52:BE:05:D9:6B:35:D4:87:D1:73:A5:18:D5:9D
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Certificate issuer:       /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
Manifest number:          3B
Signing time:             Mon 27 Jul 2026 10:55:05 +0000
Manifest this update:     Mon 27 Jul 2026 10:55:04 +0000
Manifest next update:     Mon 03 Aug 2026 10:55:04 +0000
Files and hashes:         1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: ncYB//568JzIRCp3FJ1fffn6Uwio0m3yK1M3YbOpB/w=)
                          2: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=)
                          3: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
        Validity
            Not Before: Jul 27 10:55:04 2026 GMT
            Not After : Aug  3 10:55:04 2026 GMT
        Subject: CN=6a673909-9da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:13:e4:75:aa:ab:82:e4:0b:10:76:74:6c:
                    90:88:83:c5:7f:63:da:88:be:04:ba:3d:03:44:cc:
                    4e:0c:2f:2c:72:2a:2c:56:ed:76:06:e2:64:3a:7a:
                    2d:e7:57:cf:53:b6:9a:cd:9a:96:1d:c1:93:02:35:
                    3a:ee:a0:0d:a5:8e:29:e9:be:d3:82:4d:cd:e7:5b:
                    f8:85:26:d8:3c:aa:8a:e4:5a:b8:d6:c6:46:48:fe:
                    9b:b7:7d:e0:b2:2e:bf:54:fd:98:d2:b3:55:11:08:
                    4b:f4:f6:c9:4f:7b:15:9a:d5:74:9f:a7:ea:e3:43:
                    70:f6:87:6a:3f:6a:3b:8e:d4:86:6c:c9:4b:4e:28:
                    fc:7b:a5:95:47:38:67:1e:df:ec:d1:9a:3f:c1:3a:
                    ec:8e:2f:0d:16:04:5f:28:cd:ff:a0:67:b0:9e:fb:
                    bf:21:dd:1d:d6:de:c0:c7:b8:40:e9:b1:51:64:a5:
                    99:1f:45:88:1b:5d:29:5c:b3:98:66:3c:f2:13:2d:
                    3b:92:29:ea:83:81:e0:bb:62:1d:28:9b:12:41:67:
                    54:39:20:ab:61:65:06:43:9d:4f:d4:6a:b8:03:70:
                    45:55:b6:d5:c5:5f:99:ff:15:07:48:dd:cd:65:fb:
                    95:71:6a:fd:28:9f:96:40:fa:6e:9b:34:58:f3:80:
                    76:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FB:15:25:64:51:52:BE:05:D9:6B:35:D4:87:D1:73:A5:18:D5:9D
            X509v3 Authority Key Identifier:
                keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e8:ca:65:d8:ef:e7:14:bb:2b:f4:2d:0a:c3:85:88:e7:61:
         be:0b:c9:0d:59:f9:eb:ee:72:52:c6:5f:2a:86:24:97:ea:1a:
         f4:6e:cd:cf:df:56:ab:c9:85:19:dd:42:87:c2:d0:57:7d:d9:
         32:55:0e:b5:a7:b2:96:11:2a:71:83:1c:03:48:ca:6e:9c:9a:
         65:82:6b:c9:93:b9:17:5a:4b:05:7f:08:a0:c9:b6:34:d3:18:
         cb:f4:f1:b7:c7:52:2b:5b:a4:01:56:35:a0:32:88:13:b1:b4:
         73:c3:74:77:e4:65:77:bd:a9:29:47:f5:a2:d8:cf:6f:67:e8:
         ef:8a:8c:d3:a2:58:2e:98:a9:4a:b5:0d:d8:25:54:13:19:45:
         3f:fc:ab:4f:2b:05:7f:a4:8d:47:12:d5:dd:71:27:6c:f7:16:
         31:59:73:66:05:b9:69:bd:f8:a0:1f:1c:81:bd:b5:a6:4d:cd:
         de:c5:d1:96:e5:9a:ad:dd:e1:18:61:95:31:b9:1f:22:6a:59:
         34:a9:08:0f:d1:5c:22:98:4f:b8:c5:ff:72:08:53:a8:98:16:
         a8:aa:10:2f:08:3f:3e:bd:d0:c5:28:b7:98:9b:28:18:94:2a:
         6d:4d:69:f3:54:cb:7a:6a:e6:b2:47:6d:43:e0:56:46:40:79:
         82:8a:1e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:59 2026 by rpki-client