Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          hM3n4Uudyj3sZ7WrMsKZ3z0u8IZqTryO510SBLNX+/g=
Subject key identifier:   BA:16:D5:4E:E3:11:F0:B7:07:58:04:0C:40:3D:82:EA:91:50:06:8E
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       0777
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          076E
Signing time:             Fri 12 Jun 2026 21:41:14 +0000
Manifest this update:     Fri 12 Jun 2026 21:41:14 +0000
Manifest next update:     Fri 19 Jun 2026 21:41:14 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: Y550hbj1bORqcqtsaHTYcYlKeNFGdnZV8gWurZNegVI=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: jmaFcpaDeiXM/6W+3Dvlo06UYUE1H6LTzGNr5Pw/4po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Jun 12 21:41:14 2026 GMT
            Not After : Jun 19 21:41:14 2026 GMT
        Subject: CN=6a2c7cfa-7c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:98:e5:da:47:c2:25:56:42:b6:ef:0d:e5:
                    20:3b:2a:2c:4c:1c:56:c4:d5:25:43:fb:80:70:d1:
                    42:2b:7e:c7:1c:23:eb:2e:43:b7:32:f2:54:ee:6e:
                    87:89:bb:59:0f:a7:77:6f:ef:92:42:de:17:dc:2d:
                    c6:76:05:af:45:20:67:16:c3:6c:15:6b:82:1a:c8:
                    4c:89:60:2e:80:27:ac:cc:f5:aa:4e:f0:45:d2:5d:
                    27:28:cd:44:d4:ac:6a:b6:53:ce:2d:51:50:59:59:
                    a9:ee:f5:86:30:6f:51:e9:1b:bc:57:9a:98:94:a9:
                    2e:ca:a3:4c:4c:42:7e:c8:07:67:7d:f4:96:de:8c:
                    40:56:57:89:d3:4c:c7:5e:ec:0b:cf:73:7e:c3:91:
                    42:db:0e:49:38:58:3b:90:ed:fe:01:05:ec:54:ae:
                    9c:27:8f:4c:3f:61:05:05:c0:da:61:1b:15:4c:fa:
                    52:87:b8:10:66:f9:a8:d5:0a:ac:d7:27:f4:92:bf:
                    c0:e1:90:e5:38:cd:ac:8f:52:fd:34:e9:3f:c2:df:
                    38:7c:b0:e8:7a:4d:ba:00:fa:09:36:de:99:dc:23:
                    b6:02:35:9a:64:2d:5a:10:cf:94:cf:58:2f:29:28:
                    91:19:01:15:82:66:2d:2c:02:28:53:21:08:8f:29:
                    88:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:D5:4E:E3:11:F0:B7:07:58:04:0C:40:3D:82:EA:91:50:06:8E
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:2d:49:b5:17:39:68:e1:71:4b:d9:9f:8a:74:f0:4e:f5:
         72:8b:29:26:08:e6:5c:4a:e2:e8:a3:75:b7:6e:b9:a4:14:8f:
         b1:3d:a6:01:60:4a:27:b9:8c:35:e9:e7:18:da:55:be:09:b1:
         a9:42:dd:8c:47:1c:0b:a2:ce:00:2f:a4:39:5c:0f:d1:ad:29:
         0f:8b:62:9c:a4:2d:2d:94:ab:55:c2:4c:75:5a:1e:9d:ab:24:
         ea:7e:0a:f5:cc:ae:04:1d:1e:b5:12:fc:5d:c9:af:9b:4a:09:
         b4:ed:69:59:8a:59:a5:93:9b:d1:98:c0:94:c0:64:fa:25:2d:
         b0:db:e4:18:69:f2:22:84:29:7a:f3:30:a7:cf:da:c5:b0:78:
         f0:82:c6:d7:fe:3b:c9:00:72:e1:36:7f:93:91:ee:dc:4c:a3:
         35:bc:ff:eb:28:ab:de:cc:b3:67:0b:c9:f8:1a:dd:82:4d:84:
         7a:79:24:c1:bb:9e:4f:7a:76:95:7d:40:e9:56:33:7b:7e:1d:
         a1:8a:a2:7c:8c:74:bb:7c:df:c9:3b:ac:a5:90:68:07:69:c0:
         e8:34:cd:d2:6e:88:2c:21:64:0b:92:fe:c6:28:60:05:28:81:
         68:c3:62:54:ef:29:a2:24:a3:bf:6a:bf:df:8a:ee:e9:9f:40:
         ac:25:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:26 2026 by rpki-client