Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
File:                     PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json)
Hash identifier:          8kVY/9PqsCRNRGkQsOvApxc1kP0SNzn4JfI2C/UOtPw=
Subject key identifier:   5C:38:FB:66:FC:B5:3B:70:8A:95:09:77:82:0F:72:62:92:86:6B:67
Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Certificate issuer:       /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
Manifest number:          0139
Signing time:             Mon 01 Jun 2026 06:11:05 +0000
Manifest this update:     Mon 01 Jun 2026 06:11:04 +0000
Manifest next update:     Mon 08 Jun 2026 06:11:04 +0000
Files and hashes:         1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: 4XF1k02Ik0a8bsBkU19yDLH/7XLFwGhyKnoFcHQZRuo=)
                          2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: xSLpdfxPtZTZfNNgdCZ8KmKRwYRllsk583BcU4Z+750=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
        Validity
            Not Before: Jun  1 06:11:04 2026 GMT
            Not After : Jun  8 06:11:04 2026 GMT
        Subject: CN=6a1d2279-9578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:20:ac:bd:36:ac:df:ed:88:b6:e0:e5:39:
                    a7:74:24:b2:5d:22:70:73:0b:c5:5d:2d:57:73:56:
                    33:1a:51:db:91:f8:e6:ff:31:c7:76:b5:f8:c2:14:
                    8e:f7:b4:0f:78:b2:26:41:1d:e1:97:ae:bf:47:7d:
                    e7:0d:bf:1f:70:86:02:7a:77:6a:14:97:33:a3:b4:
                    57:b8:76:ed:f7:0f:e9:f8:6e:7f:50:ff:76:36:e4:
                    63:2a:af:be:b1:0b:7b:63:d6:d9:23:4d:05:3b:4c:
                    62:01:fb:fb:e2:ae:1e:6e:a7:58:5c:ca:14:6a:a4:
                    a9:bb:da:8c:2c:c1:98:a7:a4:2a:0a:e2:35:f6:3e:
                    07:88:08:f4:61:be:24:00:7f:17:90:b8:26:dc:96:
                    c9:2f:e8:86:0a:2b:b6:62:80:b2:0e:57:f7:5a:05:
                    b0:c8:c2:37:74:ef:11:db:6d:6d:7b:26:59:97:8d:
                    bf:cd:22:b0:d2:ba:0c:b0:d8:75:26:ad:5d:35:42:
                    38:d3:77:4d:7f:17:99:1f:96:54:df:51:86:6f:17:
                    ed:2b:4f:59:39:ce:7e:0d:82:06:7d:7a:ae:88:8b:
                    a4:66:e6:f5:64:e5:9c:31:4c:78:cc:51:93:23:19:
                    74:c3:6c:41:d8:52:d8:f5:64:ed:bc:83:38:fa:6a:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:38:FB:66:FC:B5:3B:70:8A:95:09:77:82:0F:72:62:92:86:6B:67
            X509v3 Authority Key Identifier:
                keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:ef:e6:14:59:63:cc:5c:b4:1b:fd:7f:85:b9:4a:36:a0:
         db:2e:63:b9:1c:bd:5b:59:90:55:21:bd:1d:74:0a:71:3d:68:
         a6:a8:f9:c0:af:e1:0c:1f:a4:8b:49:21:77:7d:fa:70:0e:72:
         be:a0:27:87:e9:4e:98:e7:94:e0:13:59:8d:27:a4:66:ea:ab:
         39:29:91:33:d3:5b:52:59:4c:dc:42:7c:21:c8:7e:ab:7c:54:
         a9:6c:75:30:9d:df:2c:0b:47:7c:95:d4:91:c1:51:05:85:81:
         7f:4a:11:bd:6d:c0:44:c6:9f:22:1b:5a:b0:39:26:40:ea:28:
         02:68:67:68:b0:9d:19:88:2d:aa:42:29:8a:50:1e:42:35:44:
         ba:d5:5e:06:ee:3a:34:b4:4e:ef:6a:5b:70:60:da:b9:84:97:
         49:44:bd:84:2a:f9:f2:28:33:87:69:22:1b:09:66:9a:f4:ae:
         3b:64:71:52:54:e6:ba:39:6b:cd:00:0a:0e:df:a9:19:6b:31:
         bd:ce:e6:63:c2:c3:ae:f9:af:73:0a:45:c5:cc:e6:50:c9:db:
         1f:e8:ad:63:92:a1:82:e8:cb:0c:c7:ad:98:c3:20:7e:9a:22:
         52:13:4e:e0:04:e1:9f:7c:ed:5d:66:a6:34:80:0c:37:13:01:
         f0:e4:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:33 2026 by rpki-client