Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File:                     PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier:          Ktc1XFkgTfFWCbfnyv1uhdq76/e9R8oysTm1OJSeSVA=
Subject key identifier:   62:A0:2D:FA:96:A2:DE:24:CC:AE:A9:82:2F:84:49:24:11:26:2D:DC
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer:       /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial:       0B80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number:          0B77
Signing time:             Tue 02 Jun 2026 19:10:24 +0000
Manifest this update:     Tue 02 Jun 2026 19:10:23 +0000
Manifest next update:     Tue 09 Jun 2026 19:10:23 +0000
Files and hashes:         1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: qnenlPHRf7WJbbbiKlhqXv6ZNilFlAbJZNDeAzQvltE=)
                          2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
                          rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
        Validity
            Not Before: Jun  2 19:10:23 2026 GMT
            Not After : Jun  9 19:10:23 2026 GMT
        Subject: CN=6a1f2aa0-9c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:1b:a3:6f:03:89:17:bc:2a:e4:ff:eb:09:
                    c3:bf:08:97:e9:37:23:4f:9f:83:e8:da:41:82:bb:
                    57:f8:11:dc:f4:82:2f:cb:6a:9d:32:07:8e:a4:6d:
                    e2:7f:8b:1b:eb:ad:0a:4e:ea:50:02:d5:5a:bb:f2:
                    d5:42:50:6f:71:b7:d2:fa:0c:2f:e7:4a:79:9b:9a:
                    4a:c3:52:d8:29:7d:ef:6a:44:ed:a1:bb:df:17:7f:
                    c2:f6:98:b3:4c:9d:97:7f:9b:91:da:a2:e2:ea:e6:
                    29:4c:71:27:d0:59:33:0a:ba:c1:52:41:5d:c2:df:
                    61:be:43:ec:20:ce:05:e9:de:05:41:1e:12:ec:63:
                    55:9e:22:3a:3c:15:61:bb:12:df:7e:13:c7:12:7c:
                    00:48:56:1b:92:eb:c4:61:e5:81:cd:ef:58:5a:23:
                    f0:ed:c7:cf:5c:10:19:a9:ca:8c:54:72:57:5a:29:
                    6d:73:29:e2:55:b1:b7:c5:3a:e0:d1:d9:ab:b8:8d:
                    9b:1d:54:e3:33:b2:92:22:56:70:a6:50:4c:f3:5c:
                    f3:c0:00:f9:7f:73:29:b4:79:5b:7b:e4:0a:61:3f:
                    d0:4e:99:fc:be:a0:d7:3f:7c:fe:ca:f6:21:78:ad:
                    e8:c0:aa:ee:db:c0:bc:5d:42:d4:78:43:2e:c7:f2:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:2D:FA:96:A2:DE:24:CC:AE:A9:82:2F:84:49:24:11:26:2D:DC
            X509v3 Authority Key Identifier:
                keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ff:73:13:58:e3:20:40:3b:d5:73:2c:1c:d9:d6:c0:9b:10:
         1f:f7:b8:bc:3e:0a:ab:66:1e:80:91:76:bd:70:7e:63:1b:3c:
         8e:a1:81:dc:60:0e:78:fc:4a:b9:bc:3a:a2:30:9f:45:78:08:
         e7:d9:66:56:0b:27:33:cb:36:cd:64:42:df:27:01:94:09:3a:
         73:4a:a7:a4:15:e1:81:aa:f8:3a:c5:5d:d6:ee:55:a1:65:39:
         97:3a:08:79:c1:f4:44:37:56:ff:26:3a:f1:a3:95:ff:2b:2d:
         54:b3:56:4e:e7:9c:2b:91:71:52:dd:28:7e:bb:9e:32:fe:3d:
         48:da:79:94:80:cc:ff:a1:57:ea:36:50:d6:af:fd:a2:b6:c6:
         25:38:5e:2f:07:18:89:68:6c:3d:11:c4:d7:6c:68:3b:b0:e8:
         2d:60:63:06:e9:f9:1f:67:65:39:95:99:0f:7b:65:54:12:5c:
         9d:7c:96:69:02:9a:c2:0b:0c:f4:57:ad:a0:7d:35:1b:6a:63:
         16:97:04:9b:8a:5b:1b:fe:c3:13:a6:9f:46:16:de:07:d6:4c:
         ca:78:f4:b6:ff:08:f8:5c:57:6c:aa:fb:36:76:28:e2:d7:0f:
         05:2d:52:d8:3f:4a:45:aa:e9:c9:0c:2a:43:f0:1b:c1:75:49:
         2e:06:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:55 2026 by rpki-client