Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File:                     pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier:          MG7Vrpr1q1G0TFt4JhCb5t0Vjt47gxLXKFOaem8CKIg=
Subject key identifier:   5A:DE:C2:F3:98:A7:08:25:3C:0D:71:AD:11:F7:79:35:02:C7:C7:50
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer:       /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number:          0272
Signing time:             Tue 21 Jul 2026 03:11:03 +0000
Manifest this update:     Tue 21 Jul 2026 03:11:02 +0000
Manifest next update:     Tue 28 Jul 2026 03:11:02 +0000
Files and hashes:         1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: pjsckBouDDYPMHmjtGLlbqv9zFkwyuHMLmOQXHXTRcs=)
                          2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
                          rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
        Validity
            Not Before: Jul 21 03:11:02 2026 GMT
            Not After : Jul 28 03:11:02 2026 GMT
        Subject: CN=6a5ee347-6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:7a:bf:61:b0:fe:50:7d:15:55:3f:50:20:
                    b7:66:bb:34:12:ee:22:9c:bf:40:3d:8b:76:b4:2f:
                    d8:d4:e0:d7:dc:07:93:23:3f:9a:b0:7d:33:08:a0:
                    bd:2b:fc:96:7e:f9:d5:7f:0f:d4:d3:c6:2b:66:36:
                    a6:2a:25:4b:b4:3a:ff:d8:cd:4a:4d:d4:c9:e2:c9:
                    91:5c:6c:69:50:b3:ef:d0:53:07:94:50:e7:ca:67:
                    c4:1d:09:8a:7e:1d:c5:ee:f3:70:00:77:2c:c7:c6:
                    ff:5d:b9:9f:c3:81:e6:67:ec:83:5e:35:02:b2:88:
                    b7:a5:0b:03:ce:87:6f:ab:71:51:2d:e2:21:95:59:
                    00:97:9c:c0:62:75:8b:ae:cc:34:a1:ac:e6:a6:db:
                    62:d7:69:3f:48:6b:1c:f0:49:9c:fb:f6:8a:e8:e0:
                    82:ad:7d:21:87:f7:fb:31:55:21:4c:5f:34:b3:9f:
                    12:81:ac:3d:e6:71:1d:a9:55:7e:8a:11:25:76:ea:
                    f4:71:19:00:d3:1e:da:c4:c6:9a:ef:7c:13:7e:69:
                    a8:e0:c0:2b:89:0a:9c:6c:4e:04:32:63:d2:8c:a3:
                    8f:8f:0e:64:ab:e9:3c:79:9c:98:52:9f:55:9b:1f:
                    12:05:99:0a:f3:16:5d:db:10:11:77:8c:fd:db:29:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DE:C2:F3:98:A7:08:25:3C:0D:71:AD:11:F7:79:35:02:C7:C7:50
            X509v3 Authority Key Identifier:
                keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:04:5b:d4:15:94:51:3f:8e:81:44:e4:bf:f8:0f:0e:be:32:
         e6:52:a1:23:13:80:08:e2:f0:64:53:d4:35:e4:56:70:be:94:
         ca:74:b3:3f:73:7d:5a:8e:5b:8e:82:95:0c:fe:c1:6e:18:15:
         87:c4:87:77:e8:a2:1c:b9:15:26:4f:14:69:1d:1c:8b:33:9d:
         96:ef:d4:6d:49:71:e7:0e:9b:d6:3c:2e:cb:14:6c:cd:44:58:
         72:3c:0b:3e:65:d6:d9:f5:95:95:d8:91:05:97:ab:60:c5:76:
         59:ae:2f:52:0f:aa:e7:7e:b8:ef:98:6f:17:50:28:d1:ee:0e:
         8c:a2:ee:dc:7a:4e:b7:aa:b3:57:4d:ef:6a:dd:70:55:16:a0:
         b4:2c:3e:bd:68:13:62:e2:9a:3d:83:a0:76:28:bb:65:fa:4f:
         a5:63:3a:93:7b:30:15:ac:be:35:31:42:cd:43:8b:10:69:77:
         58:85:50:25:4c:34:51:9c:80:93:0e:91:46:a1:90:78:e7:2b:
         3e:15:1e:e6:7f:55:d9:86:ae:53:ca:30:46:1a:8c:f5:68:34:
         e1:ad:80:a0:a8:2a:bf:00:a2:76:95:d4:03:ff:5b:0d:b0:a9:
         bd:60:d9:39:ab:b5:17:2e:10:01:73:88:08:67:8b:e4:e6:00:
         e6:2c:a0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:52:27 2026 by rpki-client