Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File:                     PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier:          3wWX7ELChhnv0fqqxcCy04TRCBzKAndtl34vHVlqtFE=
Subject key identifier:   24:28:21:45:9C:22:C0:57:4E:DA:83:A8:B3:C1:60:E7:16:E9:CB:2C
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer:       /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial:       0506
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number:          04FE
Signing time:             Fri 12 Jun 2026 23:45:30 +0000
Manifest this update:     Fri 12 Jun 2026 23:45:30 +0000
Manifest next update:     Fri 19 Jun 2026 23:45:30 +0000
Files and hashes:         1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: EBVQIEHrnukHwZkEV8r01TfbQOdSNo4zSDmDRREUqYU=)
                          2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Validity
            Not Before: Jun 12 23:45:30 2026 GMT
            Not After : Jun 19 23:45:30 2026 GMT
        Subject: CN=6a2c9a1a-a679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:90:9a:b1:a9:53:37:29:f6:c9:b7:52:60:
                    92:31:d7:55:d2:03:b9:cb:f7:6f:25:b3:da:76:ef:
                    dc:ad:53:b4:a1:26:67:ac:b6:34:b4:f1:dc:68:40:
                    89:cf:13:1c:d1:c5:58:1c:7a:a1:32:32:43:1f:d7:
                    d5:a3:ca:57:a5:af:6a:4b:94:0b:66:a5:2d:21:68:
                    06:7c:ea:c4:1e:b2:53:2a:8c:b6:e5:2f:e3:75:74:
                    e4:a3:8d:22:14:1f:e0:a6:61:47:23:ec:eb:81:50:
                    a5:03:91:a8:da:b8:41:75:4f:2e:4b:04:7c:fe:51:
                    80:2b:9d:e2:f0:34:73:ca:ed:cc:12:ad:95:a8:ee:
                    29:93:9c:52:e5:6d:e7:44:69:1b:1f:ab:d7:30:0a:
                    f5:7e:56:50:ee:e6:c1:8e:e2:3d:b5:1e:67:a3:de:
                    7b:4e:27:a9:64:ef:f9:cc:44:44:63:61:6c:00:30:
                    fe:e2:81:3f:4b:27:b8:4d:a1:0c:df:7b:79:a9:d6:
                    b6:63:e5:dc:4a:4e:2e:ad:e4:3b:da:8e:d0:6e:f0:
                    e9:5c:e1:a4:a6:60:65:83:6f:de:30:1e:6f:2c:e8:
                    76:8b:8a:42:41:ee:5f:76:35:cc:6d:f8:6a:1c:b7:
                    81:a3:51:f1:c2:a6:e8:3e:b2:bf:af:8e:d9:d4:f0:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:21:45:9C:22:C0:57:4E:DA:83:A8:B3:C1:60:E7:16:E9:CB:2C
            X509v3 Authority Key Identifier:
                keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:2e:25:e8:cf:33:51:bf:22:dd:dc:ba:ff:c7:50:15:8d:
         fe:2d:6a:c7:53:93:9b:1d:2c:f9:d7:f3:52:21:7c:ec:27:6b:
         41:24:97:aa:f2:66:cc:e1:0d:28:09:c4:a1:9c:11:29:4a:b1:
         16:f4:73:7a:8e:4e:47:53:b4:86:22:42:f8:08:91:de:b0:5f:
         af:e5:d1:0a:ab:f0:28:0e:d5:0f:3e:fd:ed:3c:db:ad:a8:27:
         f0:39:d4:f6:75:5b:41:e9:6e:45:67:ed:ba:f9:ae:6f:7b:0d:
         10:64:16:94:64:da:40:7b:33:43:db:fd:ce:2d:65:54:f9:b8:
         06:a7:c0:f3:8b:97:2d:c0:24:5c:0b:f9:38:ac:8b:91:ca:5c:
         df:f1:56:df:f4:ea:0e:da:47:3c:05:17:59:2e:17:6e:d2:9a:
         7e:dc:08:81:c8:1a:e2:92:58:be:ad:1b:9f:ea:2d:b7:16:2c:
         50:02:55:14:f2:b5:c2:ae:6c:3b:fb:f8:1a:3f:bb:76:d8:66:
         7f:75:ac:65:f4:10:e2:bf:03:2c:b2:86:57:60:f1:49:b8:64:
         d2:5c:53:d4:d4:cb:b6:a9:f8:c0:ee:30:41:cd:12:1d:dd:88:
         8b:5c:96:46:18:85:93:b2:29:14:8f:3f:55:4e:25:d7:f8:34:
         70:10:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:40 2026 by rpki-client