Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
File:                     PbNMuLW9apns99UpKJE-ZSWnHF8.mft (raw, json)
Hash identifier:          RXQ+37fx/0CLVi6FESwe/K8jj2t4hEz/louY5q/yYa8=
Subject key identifier:   32:FD:07:B7:21:D1:AC:25:67:B1:0E:1B:51:5B:04:FF:C9:E8:1E:91
Authority key identifier: 3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F
Certificate issuer:       /CN=A91B2D85/serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
Manifest number:          21
Signing time:             Fri 05 Jun 2026 09:19:06 +0000
Manifest this update:     Fri 05 Jun 2026 09:19:06 +0000
Manifest next update:     Fri 12 Jun 2026 09:19:06 +0000
Files and hashes:         1: PbNMuLW9apns99UpKJE-ZSWnHF8.crl (hash: DjVL3KR3tbpU9WcueKAKZ6bRbsgM+7YUYT6RzKf+zYw=)
                          2: F41AA87837C311F1976C4134BE833773.roa (hash: +641YeMPVXU1XF3EY/Wo8DEhhBoEin7Q7KVnql2z71o=)
                          3: E21E9FE0347F11F19DF6F99AA9833773.roa (hash: D7+bSA2LIBJFLG6B18pSyvGelNlmr8zMF7Fhiy0Ow1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D85, serialNumber=3DB34CB8B5BD6A99ECF7D52928913E6525A71C5F
        Validity
            Not Before: Jun  5 09:19:06 2026 GMT
            Not After : Jun 12 09:19:06 2026 GMT
        Subject: CN=6a22948a-8fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:62:a2:6d:b0:05:ec:f9:23:6c:b2:cd:29:
                    42:8d:86:5a:ad:2d:66:28:61:1c:dd:c8:bd:95:b5:
                    8e:f5:0d:88:9d:07:3f:3d:2a:77:f1:00:62:e8:80:
                    dd:cb:20:62:9a:6d:53:a9:6f:4c:dc:67:c3:10:be:
                    ce:66:28:08:bc:79:07:11:58:51:58:5b:d9:77:b6:
                    90:30:b2:40:60:a9:ba:d4:a6:5f:8e:a2:d9:a5:00:
                    99:91:c9:60:63:f3:03:19:3d:46:0f:84:3a:00:38:
                    63:9d:04:ab:62:54:23:4f:b0:a0:67:b0:6e:5b:03:
                    b3:da:59:98:f4:31:d6:60:ca:90:1b:3b:52:73:8c:
                    8d:01:1d:07:66:3c:c9:7e:f2:3b:0b:51:e0:2a:c9:
                    89:d8:39:4a:09:8d:90:66:09:41:3f:14:8a:49:98:
                    6d:79:96:19:4d:79:29:be:80:dc:4c:37:a0:5d:ea:
                    be:ec:2d:88:3f:8f:1f:c6:21:58:6c:f7:29:a5:21:
                    c6:a0:e2:e8:75:fd:2c:e7:2f:ac:4f:05:71:28:3c:
                    7a:52:27:05:1e:9f:15:3b:c3:a8:d7:49:c4:b6:c1:
                    cf:12:cc:ae:09:a1:19:c2:63:49:9f:5a:e2:2f:80:
                    db:bf:49:3f:1d:94:c9:b4:e5:c8:e3:5a:ec:36:3c:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FD:07:B7:21:D1:AC:25:67:B1:0E:1B:51:5B:04:FF:C9:E8:1E:91
            X509v3 Authority Key Identifier:
                keyid:3D:B3:4C:B8:B5:BD:6A:99:EC:F7:D5:29:28:91:3E:65:25:A7:1C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbNMuLW9apns99UpKJE-ZSWnHF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D85/9C21FE0C347911F18A5D1F3BA8833773/PbNMuLW9apns99UpKJE-ZSWnHF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:21:99:50:18:b8:98:e7:0e:03:66:a0:c4:8b:f6:84:df:
         be:11:de:aa:2a:fe:10:4b:c0:8a:65:e8:45:ea:ef:c8:04:2a:
         a3:38:98:6d:59:40:6e:5e:e1:d3:d5:b6:b2:6d:ea:62:12:0b:
         81:d8:46:95:c6:08:f2:43:81:d2:1c:69:ee:69:d4:17:ae:48:
         84:c2:c4:04:22:13:19:69:51:c4:f8:0a:1f:48:39:93:9d:f8:
         c3:91:6b:a5:c7:84:bb:db:33:0a:eb:b1:eb:05:4b:5d:ed:87:
         ba:38:a1:d0:02:95:12:3a:5a:39:15:36:bd:f8:9e:77:fd:5f:
         03:10:91:d2:57:47:13:47:9a:be:f4:4b:00:34:06:39:d5:00:
         64:18:af:88:41:54:a2:2d:ca:d4:3b:f8:b8:5e:f0:44:c1:d9:
         3a:59:07:08:aa:4a:9f:2b:86:63:d9:8b:f8:bb:64:36:31:ba:
         25:a3:d2:51:c1:aa:3e:fe:67:86:d4:da:1a:2e:ae:1d:8a:98:
         7f:df:d7:e6:d4:b6:01:43:54:33:06:5c:99:9b:a9:1b:38:6d:
         49:99:85:1e:6c:9a:30:79:ca:7a:23:07:86:aa:82:e8:0f:2e:
         78:f6:07:e5:eb:82:6d:40:ed:b6:81:21:27:a7:18:7f:37:54:
         71:97:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:27:41 2026 by rpki-client