Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
File:                     PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json)
Hash identifier:          OPZ5aZi232lwoDDIkf2s9smUVfikE3NKA8M8cEbdG84=
Subject key identifier:   15:0E:8D:57:0F:AB:A2:1A:A0:50:53:AD:AA:19:4B:79:CD:47:8F:57
Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Certificate issuer:       /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
Manifest number:          016A
Signing time:             Thu 03 Sep 2026 05:03:11 +0000
Manifest this update:     Thu 03 Sep 2026 05:03:10 +0000
Manifest next update:     Thu 10 Sep 2026 05:03:10 +0000
Files and hashes:         1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: qfBNlZuuJX2yOYUHNpzUqSZq9o7S7QTujHkmmDWOcFs=)
                          2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: V/d4B+TAyK61k3RWgyTLNVmvz+WToaWYZNtG+tiyTlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
        Validity
            Not Before: Sep  3 05:03:10 2026 GMT
            Not After : Sep 10 05:03:10 2026 GMT
        Subject: CN=6a98ff8e-bb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:a4:dc:a5:80:6c:40:0a:e7:3d:fc:c1:c9:
                    57:a4:7f:31:84:f3:7a:90:22:66:39:3a:f5:e0:9f:
                    a5:d8:aa:57:16:9d:84:94:27:dd:6a:d3:a5:33:ae:
                    27:02:08:bc:59:44:2a:17:ca:7a:08:33:a3:4f:20:
                    53:5b:34:99:9c:99:61:dd:48:07:d4:2b:1b:01:64:
                    15:21:c9:f3:a8:cc:38:af:e1:b5:f9:00:81:91:ab:
                    0e:23:7e:ff:f4:cc:44:18:ff:e3:f8:bf:b8:32:f3:
                    aa:1f:fb:a1:ad:35:6b:3a:d9:c5:14:44:1d:9c:04:
                    9a:1a:59:d7:e6:4a:24:2b:b8:48:12:35:b1:5e:99:
                    4d:85:fa:5c:8b:4a:5d:8b:b9:c0:70:84:d6:a4:e8:
                    6d:57:47:c1:76:a6:7b:17:a0:10:ef:1c:9f:10:ab:
                    cd:60:ed:22:e8:ba:df:d2:0d:9c:61:12:ce:4d:b1:
                    5c:77:1b:f6:69:84:a1:bc:b7:2c:ec:52:60:a8:20:
                    00:16:dc:59:70:f8:af:62:2f:e6:39:67:cd:b2:ea:
                    e0:48:51:a4:2e:3a:8c:d4:89:e7:d0:36:81:9e:fb:
                    0d:a2:fb:a9:7b:22:1f:03:6d:0f:b8:81:51:70:14:
                    bc:ee:b0:78:98:9e:5e:60:d3:ce:2d:6d:8b:2f:00:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:8D:57:0F:AB:A2:1A:A0:50:53:AD:AA:19:4B:79:CD:47:8F:57
            X509v3 Authority Key Identifier:
                keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3c:a1:21:3f:c5:18:eb:b8:0b:03:72:76:33:98:f5:1d:5d:
         6c:71:f9:b4:41:5a:6d:34:73:99:64:08:a7:73:fd:be:8f:05:
         cf:fc:2e:c6:c1:78:78:04:d0:14:a5:ac:7c:d2:84:d1:1c:26:
         21:42:dc:13:13:36:27:40:e9:57:a6:da:6c:76:11:5a:d7:af:
         8a:d3:1d:ce:b7:c4:5f:cb:ab:7b:c4:90:28:03:c6:ab:85:a6:
         cd:d6:dd:01:4e:17:88:d6:1e:a4:85:e8:71:b0:c2:a3:b4:95:
         46:25:ef:68:40:3f:0f:5d:ff:75:40:c5:54:bc:db:be:bf:2a:
         67:77:de:40:c6:c8:36:cc:21:2b:21:ee:05:29:3b:79:d2:79:
         d4:f1:06:ca:01:98:69:01:fc:37:2a:a7:e1:a0:f6:ca:50:88:
         8c:4d:a7:cc:7d:b8:d1:47:b8:0e:47:ef:82:85:26:0e:32:cb:
         72:8e:d1:b8:44:fa:8f:23:86:9b:30:e8:58:3e:92:e8:cd:44:
         39:46:cd:03:01:c8:a0:88:ad:f1:fe:51:69:8f:0c:74:33:9b:
         a2:7c:63:90:5d:a1:a1:b6:99:98:26:0c:2e:0d:89:87:1a:e6:
         0c:e6:a9:e1:af:1f:5c:6d:ad:fc:60:f3:83:66:b6:87:f9:66:
         ab:36:17:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBGQ0IxMTAvBgNVBAUTKDNDQjRBOTAwNDE4QkU5RENEQzVFMDRBMEJBNjJBODRE
QTg1RkU2RTAwHhcNMjYwOTAzMDUwMzEwWhcNMjYwOTEwMDUwMzEwWjAYMRYwFAYD
VQQDEw02YTk4ZmY4ZS1iYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtek3KWAbEAK5z38wclXpH8xhPN6kCJmOTr14J+l2KpXFp2ElCfdatOlM64n
Agi8WUQqF8p6CDOjTyBTWzSZnJlh3UgH1CsbAWQVIcnzqMw4r+G1+QCBkasOI37/
9MxEGP/j+L+4MvOqH/uhrTVrOtnFFEQdnASaGlnX5kokK7hIEjWxXplNhfpci0pd
i7nAcITWpOhtV0fBdqZ7F6AQ7xyfEKvNYO0i6Lrf0g2cYRLOTbFcdxv2aYShvLcs
7FJgqCAAFtxZcPivYi/mOWfNsurgSFGkLjqM1Inn0DaBnvsNovupeyIfA20PuIFR
cBS87rB4mJ5eYNPOLW2LLwBx9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUOjVcP
q6IaoFBTraoZS3nNR49XMB8GA1UdIwQYMBaAFDy0qQBBi+nc3F4EoLpiqE2oX+bg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEZDQi84OUM3OEY3MDgx
NjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZkemNYZ1NndW1Lb1RhaGY1
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BMU3BBRUdMNmR6Y1hnU2d1bUtvVGFoZjV1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEZDQi84OUM3OEY3MDgxNjkxMUVGODIxM0ZCMENDNEY5QUUwMi9QTFNwQUVHTDZk
emNYZ1NndW1Lb1RhaGY1dUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnjyhIT/FGOu4CwNydjOY9R1dbHH5tEFabTRzmWQIp3P9vo8Fz/wuxsF4eATQ
FKWsfNKE0RwmIULcExM2J0DpV6babHYRWtevitMdzrfEX8ure8SQKAPGq4Wmzdbd
AU4XiNYepIXocbDCo7SVRiXvaEA/D13/dUDFVLzbvr8qZ3feQMbINswhKyHuBSk7
edJ51PEGygGYaQH8Nyqn4aD2ylCIjE2nzH240Ue4DkfvgoUmDjLLco7RuET6jyOG
mzDoWD6S6M1EOUbNAwHIoIit8f5RaY8MdDObonxjkF2hobaZmCYMLg2JhxrmDOap
4a8fXG2t/GDzg2a2h/lmqzYXaQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:33:56 2026 by rpki-client