Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
File:                     pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft (raw, json)
Hash identifier:          Jab9rDv+6fGkUDJkh2L25KXvXMKv3GwA0bc7XDi1Nrs=
Subject key identifier:   32:9D:99:13:D0:17:8D:D7:D6:63:0C:00:1B:DA:88:82:70:E3:D2:59
Authority key identifier: A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
Certificate issuer:       /CN=A91D4FA2/serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
Manifest number:          1D
Signing time:             Sat 13 Jun 2026 08:56:47 +0000
Manifest this update:     Sat 13 Jun 2026 08:56:47 +0000
Manifest next update:     Sat 20 Jun 2026 08:56:47 +0000
Files and hashes:         1: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl (hash: avlRbMzJG9Cn+bWqPtzgJv6GKPAML4G0nTo7t0dvzGE=)
                          2: 40719A6C3EF211F1A0C63BEFC0833773.roa (hash: trUCovE1yXz1mUR6+zodwcoApF1cfjXUeBQcGyK6Uxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4FA2, serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
        Validity
            Not Before: Jun 13 08:56:47 2026 GMT
            Not After : Jun 20 08:56:47 2026 GMT
        Subject: CN=6a2d1b4f-5c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:3d:f9:fa:ac:df:aa:c9:df:d0:79:a3:ef:
                    f4:bd:29:9f:14:ef:08:b0:61:71:8a:ee:4e:d9:42:
                    c0:2f:bc:5d:71:bc:8f:fc:bc:22:28:e2:4c:f5:2a:
                    14:cd:4f:8e:92:8c:1b:b7:c8:67:b2:c4:8b:60:b3:
                    7a:aa:f9:ee:b4:7c:ff:fe:58:d3:ba:69:7e:84:89:
                    9f:bb:34:e4:5d:f9:b2:4f:a2:c9:84:86:1a:44:c4:
                    08:5d:6f:2d:fb:25:40:44:14:28:cd:d1:f2:ee:da:
                    8f:16:ae:51:86:6f:be:08:0b:99:48:b9:4f:b1:4c:
                    3f:17:f4:d5:f1:cf:a1:3b:c5:3d:8c:d4:b0:ca:62:
                    b0:bf:83:14:88:af:49:c6:bb:7b:06:d3:8b:f4:f1:
                    9b:68:64:e7:a9:c3:b1:5a:71:c9:28:95:39:93:62:
                    e7:ad:a7:4d:9d:19:a1:7d:bb:02:39:54:fb:d7:fd:
                    00:e9:f3:e4:47:cb:5c:e2:ec:d7:f6:5d:a8:d7:5b:
                    36:74:4d:1d:d0:0a:94:32:53:95:aa:67:2a:d2:08:
                    03:75:fe:8a:69:b8:94:86:71:65:6b:e9:94:6e:9f:
                    04:22:7e:36:42:73:59:f8:44:6e:84:44:76:ef:32:
                    3c:44:99:c3:2c:c4:b7:98:45:c1:e3:1e:e9:d7:98:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9D:99:13:D0:17:8D:D7:D6:63:0C:00:1B:DA:88:82:70:E3:D2:59
            X509v3 Authority Key Identifier:
                keyid:A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:76:0e:23:ea:4c:42:f6:bc:6d:35:64:33:48:8b:1e:20:15:
         63:55:75:23:24:10:e8:9a:24:97:31:29:54:6f:cf:6a:2a:22:
         a1:88:b0:5b:03:31:5b:66:a9:98:a3:2d:85:ea:27:ee:bf:92:
         7d:95:4d:90:8c:ee:19:5f:ca:9f:3b:4e:31:70:16:15:10:6d:
         83:cb:dd:49:29:1e:29:7a:e5:58:91:bb:22:a5:95:3a:e5:a4:
         41:0e:be:cf:0c:5a:7a:06:e6:ef:9e:37:11:ee:55:d9:3a:d1:
         13:bd:9e:91:1a:c1:4a:d4:84:68:e4:60:c8:1e:12:cd:23:91:
         3e:d2:6e:d1:7c:86:c8:19:ff:10:d4:1b:74:21:17:a3:be:a6:
         45:6c:bb:94:c9:b1:62:25:8a:f5:43:4d:46:6e:86:03:da:5c:
         0c:69:ac:9f:d1:0e:43:1c:94:da:1e:b3:6a:15:45:b1:6b:d5:
         88:0d:b7:1f:83:78:45:48:78:13:0e:e1:33:c2:30:08:9e:71:
         40:72:cc:b3:01:73:7a:9d:8d:16:ae:00:21:86:78:08:26:77:
         0b:35:14:ba:3c:1b:bf:3c:90:99:d1:7a:f9:86:2d:e3:dc:10:
         b4:47:2a:29:a8:34:87:eb:b7:11:d6:03:f2:44:6a:d0:f0:a0:
         d0:4b:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:21 2026 by rpki-client