Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          1VhA2Be3fxdjKF8b/Bwh2Hxl0gmS9GKZW7ocFnscUwI=
Subject key identifier:   E2:D6:38:B4:F6:74:13:82:97:C2:9D:39:44:4F:2E:2B:AF:C5:A6:9A
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2DFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2DA8
Signing time:             Tue 28 Jul 2026 15:36:02 +0000
Manifest this update:     Tue 28 Jul 2026 15:36:02 +0000
Manifest next update:     Tue 04 Aug 2026 15:36:02 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: y5Xx2fL2hnVDVVHZM/ObfDBpuHfwrNROj3vbJrxO/j0=)
                          2: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=)
                          3: DB6B2B08803F11F1AB5A5B056DA30FBC.roa (hash: cn4m4b6sIeF0CcUvFFFFcObaHyEFh3BwO2hFRYMDLIc=)
                          4: 89AC5C4686EE11F19E006003A7EE528E.roa (hash: PkydwwTolsEm1C1IlaW9dK4GplSAGjMdSU6I9gbAdos=)
                          5: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11775 (0x2dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Jul 28 15:36:02 2026 GMT
            Not After : Aug  4 15:36:02 2026 GMT
        Subject: CN=6a68cc62-a162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:7a:77:c7:a5:7b:b6:f2:72:95:70:d2:0d:
                    d8:a6:89:f8:23:31:74:2a:44:a6:73:f9:11:f9:d1:
                    c5:ed:13:4c:35:73:ba:70:f3:fc:ca:d9:9f:6a:f3:
                    43:79:35:b7:5a:53:f5:7e:06:d8:b3:dd:fc:54:a8:
                    19:4b:b6:4d:a3:a3:f6:a8:36:12:3b:8b:eb:e7:e4:
                    40:fb:0f:8d:df:2e:80:99:1d:5b:88:a9:1e:08:41:
                    b5:f0:41:f7:ba:9d:d1:5f:91:49:89:af:b0:2b:b3:
                    9c:17:cb:6c:99:bf:28:9b:6c:d1:61:1f:18:41:d0:
                    73:61:a3:c6:24:14:fd:c4:2e:bd:d6:dd:7e:65:5a:
                    84:6f:ff:cd:c5:44:c7:2f:a2:00:12:4b:56:65:88:
                    50:2d:9a:78:6a:04:13:0e:77:79:b2:9d:c1:37:e3:
                    7a:08:de:24:8d:32:1b:e4:7c:18:5c:6e:90:47:74:
                    d0:68:bf:a2:2f:d2:ed:4f:c6:78:17:6c:12:13:f2:
                    0f:b8:04:69:ef:8d:04:06:b1:dc:0c:a1:29:fa:5c:
                    67:1f:12:8a:b9:60:a1:01:67:f2:99:0a:b8:c6:80:
                    28:89:35:93:af:1e:37:f8:d7:ab:9f:35:00:b0:c1:
                    92:0f:fe:a0:2d:b4:94:5b:bb:3f:74:13:ac:61:69:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D6:38:B4:F6:74:13:82:97:C2:9D:39:44:4F:2E:2B:AF:C5:A6:9A
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e3:aa:06:f4:45:89:95:0a:f5:d8:47:67:f9:49:2b:8c:c9:
         dd:c7:8e:36:cd:cb:c6:6c:7a:9f:9e:f0:26:9d:c9:01:6e:74:
         fb:04:8e:cf:bb:9c:ee:ad:90:2a:1b:fb:52:ad:ce:8b:07:2b:
         fc:52:e2:af:0b:38:9b:73:f7:d5:1c:1d:ce:fa:0a:9b:6a:60:
         42:60:e9:93:1e:99:0e:64:f2:80:8b:59:d4:83:fb:55:d5:e9:
         e0:7c:7b:6c:83:d0:e0:8d:f2:97:11:c0:c2:5d:83:42:8f:aa:
         88:c1:5c:90:ed:d6:3a:9f:60:b4:18:54:0d:ea:74:f4:4d:3e:
         c4:dc:f8:63:44:d7:38:28:c7:af:26:e5:1f:17:ab:d8:94:49:
         5c:64:94:a7:24:d0:ea:9b:bb:35:a9:5e:81:93:84:7e:03:d1:
         65:71:29:42:5d:30:25:65:ad:08:a4:3b:94:6c:59:55:14:fd:
         b2:a7:b6:92:fd:96:4f:17:4b:fd:dd:ba:95:bd:07:68:84:7b:
         25:f3:c1:37:ac:3b:ed:62:47:21:10:3b:1a:b5:2f:a6:e1:b1:
         6c:3a:c8:7b:40:e6:e9:24:8c:a3:7b:78:f8:5d:a1:44:90:d9:
         b7:09:86:82:c5:4c:c0:9b:c6:e5:28:e0:c6:35:6e:0f:b8:c6:
         37:2c:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:13 2026 by rpki-client