Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          yBJkPfsb9kauCKCKSLI7nbdxHH7RWA1xUYI9MTMbi00=
Subject key identifier:   49:87:04:E6:83:2C:3F:06:C3:8F:83:BF:04:9C:28:22:CE:11:31:E3
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       05A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          057E
Signing time:             Thu 11 Jun 2026 01:29:05 +0000
Manifest this update:     Thu 11 Jun 2026 01:29:04 +0000
Manifest next update:     Thu 18 Jun 2026 01:29:04 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: KoDUZDGk3Mz0zOuRJFitHiVPAjpn3DqwPAUMeIjPrx8=)
                          2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=)
                          3: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=)
                          4: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Jun 11 01:29:04 2026 GMT
            Not After : Jun 18 01:29:04 2026 GMT
        Subject: CN=6a2a0f61-2b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:e6:56:4a:fc:71:db:86:d4:f4:1d:f8:2c:
                    67:fe:67:44:61:36:5e:bf:92:17:61:f0:66:b3:b2:
                    3f:f6:4f:19:c8:90:f8:ba:7c:de:3d:cc:57:8b:61:
                    28:7e:8d:a4:f9:47:23:a4:1d:a5:9c:e4:d8:b8:4a:
                    94:1b:80:03:17:f6:e2:6a:a4:93:9a:5a:b0:a3:3a:
                    6b:32:99:bc:6e:a1:73:4e:0a:8c:74:29:81:34:28:
                    fa:4d:a7:6f:1a:39:d3:25:89:47:cb:15:cb:ce:ef:
                    68:46:ee:6e:e1:5d:e9:6d:a2:e2:c3:b2:cf:31:11:
                    ec:50:93:29:3a:73:1b:ac:cc:da:59:6f:ec:e6:82:
                    37:a8:18:2a:12:4e:73:89:3f:4b:38:24:60:72:55:
                    c5:fa:2a:57:29:46:b5:3a:ea:a4:c5:7d:38:b3:98:
                    26:19:47:fa:c0:a3:1b:22:03:3e:29:00:5e:8e:5f:
                    b1:30:5f:ae:20:c6:ae:f2:ba:14:78:b7:6d:a4:51:
                    e4:42:fc:e4:f9:e7:ad:10:9a:05:e7:54:b4:89:a2:
                    8e:d7:9b:e4:d2:e7:3b:d9:79:29:3e:65:29:0b:f0:
                    df:02:0a:9c:4e:eb:0b:7b:7e:65:94:d6:34:5e:a9:
                    ad:7d:89:64:f1:01:1a:fc:17:51:04:e3:e6:18:76:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:04:E6:83:2C:3F:06:C3:8F:83:BF:04:9C:28:22:CE:11:31:E3
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:02:01:1f:12:7d:5c:4d:90:64:eb:1d:db:11:1a:03:55:
         04:b3:e1:52:2e:41:e1:a5:17:e1:80:22:06:8b:15:6a:35:34:
         27:37:ea:6c:c0:a1:ed:c0:8f:7d:49:6d:e8:5e:5c:04:2a:56:
         eb:63:11:50:18:b7:0b:93:38:3e:d5:0e:95:3e:0c:16:d1:21:
         de:b1:12:b5:50:cc:ab:20:be:82:50:60:68:69:cd:86:e3:f1:
         a2:5a:2d:bc:22:73:7f:93:87:8c:00:cc:c4:1e:e9:1e:b7:64:
         ed:85:53:71:4e:cd:b2:0c:61:a0:6c:55:c5:f7:4e:9e:e7:e2:
         07:b1:f3:bd:18:57:8b:ae:5e:de:55:41:c5:37:ec:40:f1:a3:
         cb:dd:1d:11:5c:07:5a:89:23:1e:76:7f:a1:91:7a:f9:10:4a:
         34:26:f3:90:d0:14:39:0f:5e:31:f4:af:cd:5e:06:f2:60:cc:
         15:e8:f9:b2:45:ee:df:a3:5a:45:d6:09:0a:bb:67:4f:bd:f5:
         0b:01:96:ec:3c:11:9f:cb:1c:21:3b:0b:5e:5a:7c:27:ba:b2:
         13:c0:10:de:95:dd:e5:64:8a:e2:29:48:bf:56:59:4d:03:23:
         5c:10:dc:30:8d:0c:1e:29:68:4d:16:42:15:ae:26:36:e6:c4:
         75:68:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:00:13 2026 by rpki-client