Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
File:                     pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json)
Hash identifier:          +JOgiO0Nq6hKjbBJIia0S7ta31CTrxuujpeU8/BIpg0=
Subject key identifier:   68:5B:5F:D2:E9:13:01:F5:CE:29:86:72:5A:35:76:19:68:07:D6:EE
Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3
Certificate issuer:       /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
Manifest number:          A1
Signing time:             Wed 17 Jun 2026 07:28:41 +0000
Manifest this update:     Wed 17 Jun 2026 07:28:41 +0000
Manifest next update:     Wed 24 Jun 2026 07:28:41 +0000
Files and hashes:         1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: 78VH4YI14ID9pKeLesfSTOJZUHyX1FY15SVAxDdI0lk=)
                          2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: lPETiWe8GHpbSTMrlHOlT/Ey7B1kvBXtUjo0VwOql0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl
                          rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
        Validity
            Not Before: Jun 17 07:28:41 2026 GMT
            Not After : Jun 24 07:28:41 2026 GMT
        Subject: CN=6a324ca9-f4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:c3:26:a0:e0:ab:8d:a2:ef:b9:32:e6:45:
                    d0:86:af:6e:62:16:44:52:a1:a5:a7:42:8f:84:0b:
                    b2:0e:b4:50:ce:87:de:43:a4:23:43:bd:bf:18:79:
                    60:18:a2:15:45:d1:43:7f:3a:69:95:45:f9:c9:dc:
                    13:b5:01:fc:a3:f1:cf:e3:06:b7:49:9b:ee:71:99:
                    8a:d1:f1:71:e6:b1:b9:04:b0:33:30:f9:61:13:ba:
                    fb:ae:4c:20:c9:3a:df:75:51:39:0c:01:e5:34:07:
                    eb:ff:45:35:f7:9c:0e:1e:94:7e:77:ed:13:a8:e4:
                    69:16:b4:97:18:37:c1:b7:e5:31:42:30:49:7c:d0:
                    19:05:da:2b:12:12:89:3b:67:25:84:b6:aa:2b:ed:
                    7e:d2:0a:5d:65:38:d4:ee:82:3f:53:a3:87:29:e7:
                    ec:71:71:5d:ca:41:b3:07:c4:3a:eb:ae:e4:92:1d:
                    ae:f6:60:ea:54:d7:96:79:3b:bb:db:c0:59:4d:e4:
                    d6:88:03:08:fc:7e:11:7b:6d:d9:81:96:b9:61:c0:
                    63:52:73:01:ce:54:86:b7:61:b9:1f:c5:90:96:10:
                    7a:a0:1b:17:c6:1b:65:c2:6d:2f:7e:0a:b2:17:bb:
                    4a:6c:58:e2:de:f7:93:e2:47:cb:fc:8b:9a:54:5b:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:5F:D2:E9:13:01:F5:CE:29:86:72:5A:35:76:19:68:07:D6:EE
            X509v3 Authority Key Identifier:
                keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:77:86:9f:42:76:85:f8:f3:de:cc:da:7c:27:aa:3d:43:
         e4:d9:91:81:81:a0:3b:d3:69:77:57:21:07:da:24:75:d6:86:
         e0:5f:43:bf:d7:38:30:78:79:2d:22:f4:de:7f:c1:a8:04:c1:
         26:f2:dd:56:a9:f1:3a:c5:39:bd:6b:1e:6e:9c:8b:30:b2:2e:
         e4:c5:67:b8:d9:e4:07:53:f9:c0:64:74:1f:83:46:f4:9a:48:
         f4:2d:c4:fb:91:8c:85:a7:7e:43:9e:e1:96:89:13:57:04:6c:
         db:d3:f9:c0:43:06:41:8a:e6:01:76:ec:bc:0e:23:62:0c:95:
         1f:4d:e9:2f:ba:e7:ea:f8:8e:40:e3:aa:26:c9:79:c4:76:5d:
         0e:d6:03:37:46:71:aa:f3:86:ad:dd:eb:55:60:22:5b:c1:50:
         41:19:8e:b9:66:cd:55:38:ab:59:b3:75:1a:99:12:64:5d:ad:
         f9:39:29:c7:61:64:d0:e6:df:5d:f6:b9:81:3b:3f:87:01:d4:
         32:f1:3a:3c:c1:f1:b1:a0:c6:a9:8e:54:1a:ad:f0:ec:5c:3f:
         11:2a:42:6f:03:66:b1:a3:f7:89:e6:d1:31:08:92:9b:64:9d:
         7e:f7:65:11:c4:55:bb:55:ba:b3:f6:e9:6a:7b:77:38:2d:ac:
         11:14:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:23:17 2026 by rpki-client