Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File:                     Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier:          ViccAiZ3PQGEIJPbz8QrGdBNeLh3U80SvjCIwgI1h3o=
Subject key identifier:   F7:43:5E:9E:1F:A1:DB:C5:EF:83:35:FB:C8:82:33:A6:EB:45:F4:52
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer:       /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number:          6A
Signing time:             Sat 13 Jun 2026 07:57:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:57:21 +0000
Manifest next update:     Sat 20 Jun 2026 07:57:21 +0000
Files and hashes:         1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: y9tBJXxSVcUGH+OW/UOsv+6WtSBGKKJhTsq0P/8M2q4=)
                          2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
        Validity
            Not Before: Jun 13 07:57:21 2026 GMT
            Not After : Jun 20 07:57:21 2026 GMT
        Subject: CN=6a2d0d62-c34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:bc:74:c2:9c:11:d2:68:ae:2c:fd:11:21:
                    ec:85:eb:11:1e:d9:a9:c8:47:49:88:f9:a9:1d:0c:
                    c1:89:43:e0:9b:9a:15:0a:51:8d:2e:70:90:8a:7b:
                    5a:34:cb:49:10:41:f4:59:af:16:54:0c:68:2c:df:
                    4d:87:89:4a:36:6e:c9:97:1c:ed:eb:ae:34:13:b1:
                    1a:92:6d:81:d0:89:ac:32:7c:c2:1e:b4:24:9c:5e:
                    41:c6:e5:cf:dd:65:30:eb:8a:9d:72:8e:35:f6:9f:
                    ce:9a:dd:b6:0a:85:64:58:4b:38:b3:19:60:06:d6:
                    70:1d:33:c5:b2:c6:a4:12:91:b6:db:a9:9c:6a:2e:
                    b8:41:89:03:97:0f:28:03:7c:49:1b:ee:e0:68:2f:
                    f3:7e:f5:9e:1f:72:d0:67:9b:56:b4:7b:c8:39:79:
                    54:9c:79:58:63:44:4a:45:db:c1:a3:22:a9:52:4c:
                    3b:be:c5:06:ba:23:67:aa:9c:3a:e4:e6:9f:a0:99:
                    6e:12:a7:45:64:af:b4:8d:10:ba:03:c7:ad:b0:e9:
                    e4:04:26:5d:64:ae:56:df:30:6c:db:fd:95:5f:59:
                    b0:08:45:e2:07:65:59:09:13:66:63:74:78:46:11:
                    96:17:a0:ce:75:aa:88:fa:ca:d3:0b:ff:d9:96:99:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:43:5E:9E:1F:A1:DB:C5:EF:83:35:FB:C8:82:33:A6:EB:45:F4:52
            X509v3 Authority Key Identifier:
                keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:c5:50:03:df:15:c7:f3:62:da:95:6b:43:83:e9:9e:62:
         28:d1:60:52:96:1a:cf:71:1c:29:f9:07:1b:58:61:90:dd:1c:
         40:0e:2a:70:59:1d:52:d4:7b:ce:c1:ee:80:45:89:47:e6:97:
         43:6f:d5:3e:54:5a:fa:9e:ef:6e:44:62:34:0c:5f:1c:d0:b5:
         f8:49:2e:5c:9b:e9:40:04:7f:55:4c:b0:c3:74:cb:96:bb:34:
         51:66:e8:e2:b0:b3:c9:d7:cb:90:48:c1:42:10:4a:bc:9d:c1:
         c0:b0:8e:d6:81:17:bb:a8:ee:b3:76:fa:b5:fa:ad:ac:0d:4f:
         a2:e2:09:78:a9:0c:55:60:88:05:83:e5:5b:04:90:7e:3a:ef:
         b1:67:a7:28:6b:99:00:41:c1:9c:06:79:86:cf:5f:ce:a2:bb:
         2c:d7:a3:f0:57:d6:82:e5:a8:fb:20:d7:38:68:b6:36:6c:13:
         6b:74:b3:72:77:d0:54:22:92:74:d1:08:65:e0:0e:f1:0e:e4:
         44:4a:ba:d2:2a:f3:c7:88:73:0e:e6:65:c5:a0:e5:fd:61:f8:
         27:64:96:ba:7d:c8:87:84:c7:7a:36:6d:9a:3b:f8:42:e5:38:
         1c:56:78:62:6b:52:a0:d1:92:cd:b9:49:59:91:ab:be:ba:d7:
         02:6d:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:28:11 2026 by rpki-client