Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File:                     PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier:          K9BWb02Rp7tk7Ml2Yj2udLCxNEfbJppBEWYlAkSOp9s=
Subject key identifier:   54:82:7C:AE:67:0D:29:90:E2:3E:EF:59:D2:6C:E6:4B:C5:9C:FC:C1
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer:       /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial:       1424
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number:          1417
Signing time:             Wed 08 Jul 2026 17:11:12 +0000
Manifest this update:     Wed 08 Jul 2026 17:11:12 +0000
Manifest next update:     Wed 15 Jul 2026 17:11:12 +0000
Files and hashes:         1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: uxpjU+MlMY1aAgW57Iwn+IqrTWcZ4N+I+x/ldpBevwU=)
                          2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: bvI+3O/21LbUUnC/n4lGe7S/cmDY+HdMZcKJadF3/rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 17:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5156 (0x1424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
        Validity
            Not Before: Jul  8 17:11:12 2026 GMT
            Not After : Jul 15 17:11:12 2026 GMT
        Subject: CN=6a4e84b0-c164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:e2:ea:c8:7d:ac:02:ed:42:a7:98:ab:0a:
                    5c:e7:24:5c:0e:b9:1f:ad:11:e6:d2:96:7f:93:62:
                    c8:53:32:a7:b0:f8:77:e8:82:d7:4b:86:d9:96:7f:
                    99:2c:00:cf:a6:4f:a8:b2:da:1b:fd:13:14:8e:1c:
                    95:e0:11:c8:5b:c7:50:43:18:f4:37:f9:9a:04:69:
                    e7:42:f9:66:82:3a:fc:a5:ea:51:33:7b:65:24:a0:
                    a8:48:14:a5:fe:d5:1d:b3:a4:7e:41:87:40:02:7b:
                    ca:00:37:df:32:9e:cf:6c:e7:b8:2c:4a:ed:07:4f:
                    ce:2c:59:86:67:1c:65:40:59:f6:4b:6a:d4:07:7e:
                    27:ca:8f:30:1f:af:1a:e4:73:04:7f:c2:99:03:8b:
                    73:c8:0d:7f:12:4a:fa:d9:5c:f9:1b:ba:db:cb:ad:
                    5f:95:99:52:df:4a:3f:d6:c4:0a:27:23:49:a7:0d:
                    6b:2a:a0:54:dc:e9:d0:ce:c7:36:8d:97:36:85:0c:
                    cb:ab:55:c0:12:58:21:b1:e8:7c:8e:90:c8:1c:2e:
                    18:0d:62:41:0f:7f:24:05:f9:64:68:38:b8:a1:49:
                    64:52:a0:96:ad:95:6f:10:bd:56:8f:14:f2:7b:9b:
                    d6:b9:be:f2:9b:d0:fa:56:3e:fe:da:ba:f3:a6:a6:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:7C:AE:67:0D:29:90:E2:3E:EF:59:D2:6C:E6:4B:C5:9C:FC:C1
            X509v3 Authority Key Identifier:
                keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:21:24:f0:56:5d:1f:b7:03:3e:ed:7c:e7:3b:d7:62:57:c2:
         a0:6e:36:15:0c:ed:7d:fb:cc:e4:06:7c:61:75:b1:e3:1d:6d:
         e6:68:96:2d:60:dd:e3:86:c4:c8:34:02:96:a4:5f:b4:a7:d3:
         1b:ad:d8:c6:33:9d:bf:e3:f7:b5:dc:6b:4e:be:29:54:67:c9:
         ec:54:63:96:1f:ec:36:f5:79:ea:d1:d5:77:fe:0e:ca:37:8f:
         2b:e1:d4:51:d9:3c:e6:2f:fa:4a:e6:27:63:cc:c2:e1:48:1e:
         08:d5:15:1e:ee:bb:38:f2:55:7e:a3:a8:ea:17:60:cf:11:69:
         37:8e:c3:29:fd:d2:96:47:ef:96:60:67:36:91:5c:9f:ab:0c:
         cc:99:f8:ed:9b:a4:c5:cb:80:1e:8d:87:cc:6b:09:c7:52:89:
         43:92:2e:58:09:cf:23:f1:a3:37:d7:ce:14:1c:91:36:dc:ed:
         45:d8:ba:fc:22:16:94:fd:aa:5f:fe:e5:48:26:41:5c:c6:af:
         c1:f7:87:f2:88:8f:21:f6:fd:c1:9d:7a:33:13:b0:25:4c:d3:
         21:6e:5d:38:ff:44:73:90:63:cf:69:4e:55:61:a3:9c:22:78:
         a9:a3:06:a3:c4:ec:91:7d:87:4a:71:e7:81:fa:32:61:f3:f8:
         16:0d:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 14:46:28 2026 by rpki-client