Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
File:                     pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json)
Hash identifier:          0zh+tBKL0zog7ESf232NWHcz+M3P4k7AstAbZBN9sKY=
Subject key identifier:   C2:22:BC:E4:79:93:88:39:C1:79:34:03:E5:13:E1:22:F6:56:49:18
Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66
Certificate issuer:       /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
Certificate serial:       179F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
Manifest number:          2184
Signing time:             Tue 28 Jul 2026 16:39:58 +0000
Manifest this update:     Tue 28 Jul 2026 16:39:57 +0000
Manifest next update:     Tue 04 Aug 2026 16:39:57 +0000
Files and hashes:         1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: Fkl5d1HA23lmXlaNP+yF8G1KsR96uiVZ0J9X5VQV6xQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6047 (0x179f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66
        Validity
            Not Before: Jul 28 16:39:57 2026 GMT
            Not After : Aug  4 16:39:57 2026 GMT
        Subject: CN=6a68db5d-bf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:96:cb:d1:ec:26:be:18:2a:d4:07:41:7d:
                    25:0a:a2:5d:55:34:19:90:14:42:6d:eb:19:09:8d:
                    d1:ad:c5:26:96:05:47:df:d1:d6:41:55:9b:00:3d:
                    a0:f6:c6:cd:00:66:d6:20:a2:50:6d:78:9b:a5:6d:
                    5b:fa:47:f9:6b:08:92:e6:c0:cc:8b:c6:14:5b:ec:
                    75:12:7a:25:bf:8c:75:09:d2:2a:08:4b:52:c3:a0:
                    8f:91:3f:94:51:5c:2c:57:23:81:3c:d6:81:ab:19:
                    c7:64:9f:9b:0f:d5:48:84:50:69:1b:6a:1f:3f:e4:
                    d5:09:ac:af:b5:bc:f0:e1:2f:fc:72:4b:ec:58:e9:
                    26:5b:f2:b3:89:9c:90:06:48:25:7a:95:c6:c2:77:
                    a8:34:c4:60:86:61:4b:5f:32:4f:a8:94:c1:00:cc:
                    8e:60:1a:05:49:08:f7:63:f2:e0:23:f4:39:90:16:
                    d5:ce:6c:83:05:3f:e2:ad:ae:21:48:20:a3:00:0a:
                    89:bb:78:76:a4:fa:b8:f4:86:0f:7a:76:92:36:82:
                    77:49:cf:ab:9b:1c:86:b2:e4:ff:1f:3e:e6:e3:51:
                    15:61:10:3a:25:5c:09:b7:f6:57:50:5d:83:60:4e:
                    f6:a3:93:f4:ce:ce:e0:23:56:50:e3:87:9a:cc:d3:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:22:BC:E4:79:93:88:39:C1:79:34:03:E5:13:E1:22:F6:56:49:18
            X509v3 Authority Key Identifier:
                keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:66:e8:ed:f7:d4:b7:7a:d8:8f:50:96:96:9d:67:55:d1:
         33:33:f6:e6:30:c8:c3:98:d4:e2:2f:59:85:6d:35:72:c0:68:
         59:65:0c:2c:25:6c:d5:98:77:fb:a7:1e:1b:83:2d:c3:e8:d2:
         47:54:b2:5f:18:df:99:0c:e4:24:bf:58:20:ef:a0:0c:14:7e:
         31:30:77:f1:b3:a9:8b:02:a8:1f:66:9e:c3:74:b1:9e:fd:7f:
         76:57:2c:19:dc:b3:91:51:36:7c:64:45:95:2e:e9:39:2c:78:
         a1:01:f3:01:98:7f:a0:c3:a7:78:e5:4f:1a:d3:63:47:e6:79:
         ec:ce:66:b2:c5:bb:df:21:23:49:6c:0c:c3:7e:87:a5:17:f0:
         be:9e:35:6d:fb:94:2e:41:ea:b0:42:ad:da:8a:61:7e:77:b4:
         05:c0:da:3f:dd:03:d3:3b:d7:2e:6a:d8:ff:08:2f:08:de:e0:
         10:d4:eb:78:60:86:a7:57:1b:be:7b:2f:96:22:49:ac:e1:1c:
         8b:b0:d1:e5:05:1e:06:3b:28:58:73:16:7e:6f:fc:4b:bb:0b:
         2b:a9:69:4c:54:0a:7f:50:1a:dc:cd:d4:47:f8:60:32:35:23:
         89:7e:96:63:81:a3:7f:bf:fe:49:40:14:81:f6:3c:50:22:6d:
         c5:2a:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:44 2026 by rpki-client