Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File:                     PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier:          /DRtAPvYdURYae/hF0Cij0v/hE786Gd1YJjtIYALUlI=
Subject key identifier:   2D:B1:F8:A0:B5:50:D6:E3:FE:1E:00:F7:7D:4D:70:2E:87:F7:BC:04
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer:       /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number:          027C
Signing time:             Tue 23 Jun 2026 02:11:04 +0000
Manifest this update:     Tue 23 Jun 2026 02:11:03 +0000
Manifest next update:     Tue 30 Jun 2026 02:11:03 +0000
Files and hashes:         1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: /Z/6dq1IbHUOGBALOyiaaFbdCwFFqfmwlqz/sUMUk7Q=)
                          2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: 4pifmUBWRDqIs1AxU08rq2Ecl41mBJPR1UbVv8BwJA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
                          rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
        Validity
            Not Before: Jun 23 02:11:03 2026 GMT
            Not After : Jun 30 02:11:03 2026 GMT
        Subject: CN=6a39eb38-d4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:12:65:d3:d4:ff:e9:03:66:ea:13:f7:a5:
                    24:55:0a:bc:7e:43:dd:9a:1a:b5:ad:15:64:2e:c3:
                    9d:85:02:a5:7a:44:78:ef:1d:80:ac:bd:da:14:3c:
                    a7:f3:5b:7f:7a:ad:49:99:7b:9e:07:ed:99:fd:83:
                    c6:b4:1a:3a:32:bf:80:4e:3d:0a:0f:51:ce:c8:3a:
                    fb:4f:0b:04:63:5f:8c:14:aa:66:c5:3e:5d:d2:a9:
                    48:a6:c8:98:09:05:b9:ff:f5:05:7c:16:08:64:e7:
                    0d:bd:f4:27:a6:62:e1:d1:19:f7:e6:22:e2:91:36:
                    2c:00:a4:1a:7f:b5:a5:63:76:19:1c:bb:97:43:08:
                    08:e0:6c:df:e8:87:49:90:93:4d:7e:47:be:2a:22:
                    49:e7:ec:d7:ac:c6:90:ca:61:eb:54:29:cb:4e:4d:
                    31:4d:5c:19:a3:2e:a6:6f:28:33:48:c2:8d:d4:b6:
                    a4:93:d7:82:b8:ce:04:8d:6d:cd:2d:c2:01:25:02:
                    7b:28:57:2f:be:2e:6f:58:cf:1c:c0:e0:1c:28:35:
                    76:f2:80:48:a7:d8:79:18:75:d3:92:e2:ee:ef:08:
                    d5:35:64:cc:a1:f2:50:82:06:82:cd:8f:b4:e0:22:
                    db:d2:be:69:c9:9f:ad:c8:95:b4:2f:8e:8b:57:2e:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B1:F8:A0:B5:50:D6:E3:FE:1E:00:F7:7D:4D:70:2E:87:F7:BC:04
            X509v3 Authority Key Identifier:
                keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:68:c9:9a:9d:c5:0a:05:8e:e8:9c:3f:dc:d6:7a:b9:3a:
         74:04:82:7d:1f:92:05:44:9b:1d:36:ed:99:9d:f4:2d:a7:0a:
         92:b5:4e:b3:b8:ad:9c:38:ab:39:b8:f4:79:31:76:91:3d:6b:
         20:9a:01:b4:25:5e:58:7b:53:bf:4b:bb:87:bf:ae:eb:8d:e0:
         31:c8:2d:e6:27:a2:d6:47:92:b8:50:a8:27:6a:74:8f:f9:11:
         29:ef:ae:67:fa:06:40:e1:74:a5:92:95:53:4f:83:93:a6:6e:
         48:99:94:d9:04:5c:77:de:f2:92:69:9f:4d:ae:67:54:e7:e6:
         28:3d:ea:32:e6:72:c5:6f:4e:d9:24:40:d3:7b:cc:d9:42:e0:
         29:04:ae:05:bc:29:ca:28:08:58:48:22:b1:8e:e9:eb:b1:90:
         aa:40:6e:1a:7b:71:6e:2f:81:5b:ab:48:ff:83:ef:00:dc:82:
         61:07:8e:25:b4:18:f4:3f:ce:d5:37:85:61:30:2d:d4:a5:ff:
         1c:73:fc:91:af:7e:a5:c9:9d:85:d7:de:88:28:2f:67:77:f8:
         e5:e2:98:f1:1b:79:90:25:33:3c:91:fc:f7:6a:d0:29:e9:ac:
         9e:75:28:74:57:0f:33:f4:dd:92:bd:9c:b0:2e:e1:42:2e:d0:
         3d:e2:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:34 2026 by rpki-client