Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
File:                     pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft (raw, json)
Hash identifier:          xX+Pk1G56rXAwAaEDizmI5O+CoASMtX82lzZp7vaR8Y=
Subject key identifier:   CC:71:29:63:48:F4:CF:20:6D:A5:7A:8A:06:79:BD:A1:73:41:62:2C
Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1
Certificate issuer:       /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
Manifest number:          0258
Signing time:             Mon 01 Jun 2026 02:58:37 +0000
Manifest this update:     Mon 01 Jun 2026 02:58:36 +0000
Manifest next update:     Mon 08 Jun 2026 02:58:36 +0000
Files and hashes:         1: pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl (hash: 1TuYn5bHLL+boO/6W2Vy3oX675d0yUyFlT4WvMNM/Qk=)
                          2: 33A48584C92911EDAE3AB84EC4F9AE02.roa (hash: uBe9trVvTXibsFAdUxncYIdjHBZ+5n+JI/NflInuCrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl
                          rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1
        Validity
            Not Before: Jun  1 02:58:36 2026 GMT
            Not After : Jun  8 02:58:36 2026 GMT
        Subject: CN=6a1cf55d-53c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:e7:8d:92:3c:6c:40:91:e4:44:da:59:44:
                    26:52:9b:83:d0:48:f3:6c:f7:5d:9c:31:3c:b1:94:
                    b5:cb:24:56:57:8b:28:54:bf:92:c4:be:bf:bc:be:
                    b9:a3:9c:c2:84:eb:6d:f5:e4:34:3d:a6:89:de:af:
                    4d:2f:9a:bf:fe:8a:00:db:c7:b4:fb:ec:6f:79:4c:
                    ad:47:f6:80:11:4c:43:14:a5:c9:b3:17:f9:ab:26:
                    34:57:aa:10:25:46:11:56:50:0b:12:28:28:da:eb:
                    12:50:68:8a:59:7c:d6:38:b2:4c:e2:ad:49:d0:43:
                    5f:c0:b5:bc:ed:44:49:91:f1:b1:ef:ff:a2:81:fb:
                    e7:30:43:48:7c:f4:18:b0:58:f7:f4:c5:d0:06:9d:
                    42:dc:89:7d:e1:9c:72:75:1d:ec:32:18:9a:80:00:
                    fc:2a:18:83:32:22:71:83:1c:bd:86:c8:6c:9e:40:
                    b9:ea:de:6b:27:fd:47:a0:af:ac:15:88:e4:1d:5b:
                    13:83:62:b0:4e:db:93:04:6f:30:b6:0a:e5:74:ad:
                    74:63:71:bb:dc:c4:15:99:5b:af:a2:7f:ee:fa:88:
                    3c:e7:eb:37:4f:65:c8:ee:6b:5f:03:95:42:d2:3a:
                    7c:d8:15:28:a1:ae:6a:17:83:67:22:2e:09:05:28:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:71:29:63:48:F4:CF:20:6D:A5:7A:8A:06:79:BD:A1:73:41:62:2C
            X509v3 Authority Key Identifier:
                keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:39:04:5f:de:a2:17:05:8b:b2:93:de:26:94:b0:fc:34:
         e8:00:5d:e7:a6:da:70:db:e8:0b:cf:f7:26:04:a3:73:a3:56:
         2c:f7:25:9b:59:55:53:ff:48:58:e9:f3:b9:86:51:8e:85:3a:
         a5:b8:33:41:34:3f:25:6b:6a:cb:1a:3f:34:ab:9b:67:f8:da:
         20:34:43:e7:b1:37:04:bd:73:f5:4e:30:19:f2:e6:ce:67:d0:
         65:46:c7:90:7b:f1:c5:08:3d:aa:09:f2:50:2e:5d:da:76:48:
         ff:a7:13:dc:7e:65:ca:b7:ba:9c:49:e0:b6:5b:69:d2:d3:3a:
         37:2d:9f:79:92:f5:2c:03:b2:da:8d:37:2e:c9:85:84:20:72:
         38:45:e0:0c:7c:3f:63:80:87:33:30:93:2d:12:81:69:1d:79:
         b6:02:79:ee:72:6e:2b:cf:47:70:99:52:40:d5:96:a5:ff:12:
         22:6f:3a:0b:53:f8:db:49:00:7a:dc:a6:1f:d8:45:ca:53:df:
         9d:f8:5e:1c:20:c5:f5:7b:b5:2d:ac:ed:31:fa:f3:fb:dd:ee:
         c4:73:1a:fa:82:08:bd:d1:cd:9e:f5:f8:c6:e2:95:18:75:8f:
         db:44:52:d3:50:fe:05:dd:a1:cc:61:c4:b9:56:d7:09:82:85:
         9c:7f:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:08:19 2026 by rpki-client