Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
File:                     PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json)
Hash identifier:          CjraVjDlFTnyem48N1HhuJPaMY7PGvyXkUZ0YcxBqHA=
Subject key identifier:   83:FE:E9:0C:59:BA:30:8E:69:C1:9F:E9:23:57:4E:EE:65:D4:F7:E7
Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Certificate issuer:       /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
Manifest number:          01E1
Signing time:             Wed 29 Jul 2026 04:39:07 +0000
Manifest this update:     Wed 29 Jul 2026 04:39:07 +0000
Manifest next update:     Wed 05 Aug 2026 04:39:07 +0000
Files and hashes:         1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: lpg5j6wT7mdRAZKN9gg+3rlydczpjuiB5i1QZYNz6yw=)
                          2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
                          rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
        Validity
            Not Before: Jul 29 04:39:07 2026 GMT
            Not After : Aug  5 04:39:07 2026 GMT
        Subject: CN=6a6983eb-057e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:62:c9:b0:d2:e8:9b:15:f0:68:ce:66:78:
                    2a:a0:88:c1:5a:f5:ae:8f:60:a1:94:03:33:21:f6:
                    9a:f3:b3:43:52:0f:47:ef:30:18:f6:aa:09:7c:8b:
                    f7:f4:67:86:c0:07:54:47:00:5b:df:d1:c4:45:bf:
                    ee:60:66:58:da:20:b2:68:36:ab:31:69:74:9b:21:
                    c4:38:67:85:8b:1d:92:93:f9:61:2e:13:2e:d1:9b:
                    e1:fe:b4:fc:e1:14:5a:8d:a3:45:4c:2f:46:36:e8:
                    f9:bf:c4:35:c6:9a:3f:72:83:2e:14:b4:d2:82:d1:
                    57:40:81:a5:08:d0:1c:44:2c:61:7c:15:1c:8b:42:
                    db:2a:db:77:f3:70:0b:f3:4a:a9:39:65:95:8f:39:
                    22:45:81:28:77:42:df:36:e0:57:32:ef:d0:b6:14:
                    04:43:4c:63:1c:96:92:b2:93:19:f2:59:33:4e:c8:
                    e8:e6:b0:f9:04:fd:29:fc:b1:97:b8:98:d5:fa:41:
                    fd:39:c9:6b:8c:73:f3:ca:4b:a7:13:37:7a:04:e0:
                    eb:ae:ea:b5:42:cd:81:7c:8b:b9:ef:88:98:bb:eb:
                    ec:9d:95:7f:d6:22:52:e8:69:90:a7:cd:61:b1:bf:
                    58:7a:0d:64:e9:5b:30:8c:fc:b6:95:a9:e5:a9:29:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:E9:0C:59:BA:30:8E:69:C1:9F:E9:23:57:4E:EE:65:D4:F7:E7
            X509v3 Authority Key Identifier:
                keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:ac:2f:90:81:dd:16:f5:e8:d4:c1:ee:b7:55:85:b9:61:
         a5:3d:1a:d3:8e:6c:88:89:aa:66:32:8c:d5:1b:73:6d:e6:37:
         68:be:ae:ab:06:0c:1e:91:cf:97:2b:df:0c:7e:0c:ba:79:69:
         4f:3e:01:f2:1e:d6:2d:05:46:e8:bc:7e:14:d8:1d:0b:5b:53:
         8e:c7:19:21:d3:32:85:0c:76:fb:ac:10:1d:29:e3:ab:ee:70:
         da:b7:9c:b5:87:6d:0c:0c:0b:21:c3:4b:68:ae:3e:45:d6:07:
         ff:b6:fd:23:51:74:e7:ad:89:00:79:8d:44:14:b9:84:66:52:
         bb:b7:f3:93:10:2b:5c:b9:ba:71:cb:7e:38:b6:0d:5e:8f:e7:
         ca:28:90:71:b8:99:fe:e8:c2:0f:e7:9a:7c:0b:46:24:19:17:
         65:3c:dc:f1:dd:f6:69:53:0a:a3:7e:04:a6:25:61:1b:23:82:
         81:b1:47:a0:4e:33:5c:38:65:42:82:d7:12:a8:80:99:6c:ca:
         f9:bb:3e:75:13:f9:49:8d:e4:44:69:be:10:02:de:57:bb:e1:
         a9:4c:e5:14:99:06:7d:b4:d6:43:67:cc:09:8f:dd:7e:f8:71:
         41:20:a8:0d:9f:6b:75:9b:2f:7f:24:f3:53:d6:c6:67:09:36:
         12:17:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:44:11 2026 by rpki-client