Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
File:                     pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft (raw, json)
Hash identifier:          r1mGxMoivTC9VrezASpGagYv5dZVzaa6abgPeSY3vg8=
Subject key identifier:   10:18:03:38:AD:90:43:CE:3D:3D:C3:82:F1:06:9A:AB:50:FB:6E:1D
Authority key identifier: A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78
Certificate issuer:       /CN=A91D4FA2/serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
Manifest number:          2D
Signing time:             Fri 17 Jul 2026 09:59:50 +0000
Manifest this update:     Fri 17 Jul 2026 09:59:50 +0000
Manifest next update:     Fri 24 Jul 2026 09:59:50 +0000
Files and hashes:         1: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl (hash: dON2r/RLEYNoSgq/0MwunGrXnh4q4vfwGlBdp+LGaqE=)
                          2: 40719A6C3EF211F1A0C63BEFC0833773.roa (hash: trUCovE1yXz1mUR6+zodwcoApF1cfjXUeBQcGyK6Uxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4FA2, serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178
        Validity
            Not Before: Jul 17 09:59:50 2026 GMT
            Not After : Jul 24 09:59:50 2026 GMT
        Subject: CN=6a59fd16-2cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:3f:70:08:c0:6b:ff:d2:12:39:4f:e1:21:
                    29:58:41:fb:13:20:af:91:98:92:54:ed:3f:bc:83:
                    e1:bd:77:35:65:18:cc:30:2f:10:20:d2:a9:18:81:
                    36:35:e9:58:29:a0:7f:be:ff:76:e6:08:3d:6a:f6:
                    8a:aa:96:52:6a:56:16:98:7c:25:ed:89:42:ec:85:
                    df:77:6a:bb:c4:48:22:35:39:be:1f:e9:c0:37:78:
                    a1:17:b8:99:13:82:69:b1:db:3e:d4:74:97:36:2a:
                    46:ce:de:88:e8:61:7f:e2:14:9a:42:a8:40:f5:80:
                    d1:17:dd:a6:0a:1a:e1:ac:21:19:a3:07:2a:ef:b7:
                    df:9d:ca:14:66:9c:d3:d9:d2:23:5e:e9:18:bf:76:
                    2f:e1:38:d3:42:68:9b:c4:58:15:26:0f:a0:be:75:
                    a8:c7:43:20:ae:46:a3:6a:9c:ca:ef:78:f9:ab:2a:
                    ed:f7:b1:74:b8:0b:c0:a5:a3:97:bd:f5:d8:4c:50:
                    55:67:4f:b3:ca:49:72:41:a1:21:46:d3:b2:e6:f7:
                    c3:42:6d:9f:14:e5:02:13:fc:2c:72:91:3f:a4:cb:
                    c6:35:67:9b:6f:21:5e:71:78:87:63:63:e7:3a:ca:
                    32:0a:8c:8f:3b:95:ce:99:81:77:f9:d6:6b:d1:89:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:03:38:AD:90:43:CE:3D:3D:C3:82:F1:06:9A:AB:50:FB:6E:1D
            X509v3 Authority Key Identifier:
                keyid:A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:07:5d:bc:b0:3d:46:b4:61:4b:51:8c:47:79:09:0c:ea:
         67:2b:ff:6b:38:59:92:b0:59:51:12:56:16:63:25:a6:ef:e1:
         88:1e:18:48:01:34:85:01:9b:38:cb:27:ba:4d:68:b5:26:63:
         d9:bd:38:47:b4:67:ce:7f:9f:fc:65:ae:cd:2d:63:c5:e9:31:
         f9:78:b6:f4:13:fb:14:ac:a0:6f:0d:79:80:3e:05:7b:06:4e:
         1f:4a:41:da:4d:fb:5c:3b:0c:42:e5:12:cc:0d:5a:3f:53:de:
         8e:fd:69:82:f3:59:42:bf:de:32:e5:fc:f5:85:de:ad:39:3e:
         e3:0b:fa:50:0d:ca:e1:1d:ee:87:ac:ab:99:81:9c:30:ca:25:
         42:be:87:fb:f4:ed:e4:88:a1:61:6f:4c:b7:57:90:1f:77:2c:
         96:36:0c:d3:b5:75:0a:a0:5a:5d:30:d5:06:d6:67:c0:d4:07:
         e2:2c:af:46:28:fc:92:71:9a:66:05:f4:f7:7f:8d:80:02:60:
         18:49:2d:7f:6d:2e:6d:c9:16:32:19:3c:5f:c0:cc:c9:2e:c4:
         e6:8e:12:e8:58:6d:9c:25:41:05:9b:4c:48:85:54:88:50:78:
         42:f6:e3:86:b5:bc:0b:dd:4d:97:c0:66:7e:d9:09:d9:1d:c5:
         a1:4e:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:41 2026 by rpki-client