Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File:                     pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier:          kJfLEBg1X+9+Kt7snPq1llnxfeT7mSmGLpCA4AH07Qg=
Subject key identifier:   EA:39:BF:B4:2B:DD:C1:DA:E3:2E:45:F4:37:FB:E6:DC:11:39:D0:90
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       0A03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number:          141F
Signing time:             Thu 02 Jul 2026 19:48:44 +0000
Manifest this update:     Thu 02 Jul 2026 19:48:44 +0000
Manifest next update:     Thu 09 Jul 2026 19:48:44 +0000
Files and hashes:         1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: DLpl/gDghjQNKITFAAkLg4CM6NNDWtIs2kg0UL2du3M=)
                          2: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: +8vupQ0QuPSYBYa82jxeQErq+vDZddysx6476WnaTVg=)
                          3: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: eEmKcFndc7XvklOM2RYi47Zr8GegIbdLIWOkG5YRiBw=)
                          4: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: ZdcK0Egz/cJf5v8OPJC6NHsy3ll+Zc6qF2z+CwTsBLo=)
                          5: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: 99fqD2Aad5qT3SpkHaUvCQIizH9NzhgDnPHNNitg7tE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 19:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563 (0xa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Jul  2 19:48:44 2026 GMT
            Not After : Jul  9 19:48:44 2026 GMT
        Subject: CN=6a46c09c-ef93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:19:ac:d4:80:c0:0e:57:92:7c:23:e0:6b:
                    17:e8:7b:09:32:19:2a:8d:52:ae:aa:5c:98:12:bb:
                    80:b4:75:38:86:b8:b1:4e:49:f5:a3:24:30:4f:ce:
                    04:6e:4f:7c:c3:4b:05:d5:ab:55:f1:26:ac:66:06:
                    ca:1b:30:92:5d:86:7d:c4:e6:cb:0d:cd:c6:23:ea:
                    67:3c:7d:e8:0f:3a:2e:88:29:c3:e8:9f:1b:84:5f:
                    3e:60:7e:32:79:0c:c9:89:6d:a3:51:b2:c0:b9:f9:
                    c1:78:99:18:40:31:47:5a:b8:fb:86:01:ad:77:d5:
                    d9:24:47:72:d1:1e:ce:0c:ca:a0:90:52:db:b8:51:
                    0b:43:23:e7:ee:cc:61:51:34:14:27:6b:df:b3:44:
                    84:dc:9c:ba:a0:d6:98:46:48:8e:16:d6:d1:1a:07:
                    00:75:d7:28:c2:a3:1e:05:1f:29:9f:84:68:c1:ae:
                    4a:78:93:aa:d4:a9:df:c8:df:c1:7f:a6:41:6f:15:
                    63:b3:f9:aa:48:ad:f1:43:4e:68:58:7f:53:5b:43:
                    b6:1a:c3:39:6c:f8:6d:f0:25:31:ea:c4:0c:5b:15:
                    1f:8a:d3:93:e7:94:45:e0:83:ca:21:1c:c9:01:21:
                    77:c7:8e:63:e7:2c:aa:8c:8e:a0:47:8c:a5:5a:1b:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:39:BF:B4:2B:DD:C1:DA:E3:2E:45:F4:37:FB:E6:DC:11:39:D0:90
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:6e:5d:df:2e:c3:23:84:58:70:63:ed:08:cc:b5:ca:ee:
         d4:3f:cf:41:6a:53:b3:0b:c9:bc:71:8c:0a:ad:69:be:7e:87:
         2c:a2:a6:14:98:b7:f5:81:8b:4a:a4:e8:79:42:ef:66:a6:4f:
         97:b0:be:7f:7f:6a:26:be:25:56:03:1f:b9:f8:8a:75:6f:7a:
         f8:ad:eb:72:c9:86:de:d9:e7:43:b5:d7:fd:71:f7:5b:3c:45:
         e1:2a:5f:98:a7:0f:20:56:00:e1:7a:2a:b8:c3:c0:67:1e:6b:
         ea:86:97:64:d2:0c:99:cd:0e:0e:bd:76:20:d4:86:3e:d1:b0:
         81:a7:84:d7:dc:cf:f7:69:d7:5c:dd:80:70:95:48:1c:c5:43:
         69:9e:32:6d:3a:d2:89:cd:e9:6c:b3:52:89:0e:5e:a9:43:93:
         6b:e2:0e:3e:2c:a9:d9:a3:ee:c1:e5:d1:e8:b6:cd:3c:e3:43:
         e6:3a:d1:b2:1d:64:a4:08:e8:bc:84:0e:d1:33:21:2d:86:25:
         01:b9:ba:98:4c:bb:ae:39:24:30:dd:c8:bc:01:87:52:59:84:
         64:9e:ca:23:e4:6e:dc:1e:6b:9f:d6:72:53:ac:2c:df:a4:d7:
         44:79:19:ac:fb:bf:7f:75:b7:8c:66:fe:0e:6a:2e:30:ea:4a:
         61:13:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 13:29:21 2026 by rpki-client