Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          Fmg283CuFus12Ibb9913spZnE/d/dXG9kdswp+RlpDk=
Subject key identifier:   42:B4:F9:8F:86:E3:66:14:2E:7A:18:2D:15:B9:B0:F4:AD:D7:30:27
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       05B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          0595
Signing time:             Mon 27 Jul 2026 00:13:32 +0000
Manifest this update:     Mon 27 Jul 2026 00:13:32 +0000
Manifest next update:     Mon 03 Aug 2026 00:13:32 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: iShSh5ry/ih0WYrWGGU4n5D2SQg3aTSMYG2Bl0i+pGg=)
                          2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=)
                          3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=)
                          4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Jul 27 00:13:32 2026 GMT
            Not After : Aug  3 00:13:32 2026 GMT
        Subject: CN=6a66a2ac-f89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:f8:56:f0:f6:46:a8:f0:a4:11:46:36:45:
                    54:8b:c0:08:52:d8:c0:ce:89:8a:f3:dc:cb:ca:a1:
                    23:da:f4:ff:75:9d:8d:bd:d8:80:50:67:eb:11:b7:
                    83:79:b0:3c:2a:25:22:03:14:45:2e:66:83:b4:f0:
                    c3:74:d5:53:e7:ef:b3:4f:df:fa:42:bd:a8:2b:a0:
                    80:01:cd:a3:2b:9c:1b:3c:1f:b0:f5:73:f3:4a:36:
                    12:06:5c:70:40:96:b9:04:68:9e:93:a1:4f:c3:5e:
                    da:dc:8e:b5:ac:a2:ca:e7:b6:37:21:9c:66:03:c7:
                    cd:65:a4:21:b5:11:45:99:88:d7:92:96:ab:75:ef:
                    92:2d:2e:a8:df:a7:75:0d:ab:84:32:62:b0:1c:bd:
                    14:63:07:97:3a:63:b6:53:6e:37:bc:0e:44:71:d4:
                    75:6c:8b:d0:ea:0e:e9:d0:0c:6b:58:34:07:0a:4a:
                    fa:46:d2:b8:fd:78:28:70:14:eb:ef:2c:61:f7:39:
                    ef:f7:bf:bc:67:30:47:fa:3e:10:29:44:bc:13:54:
                    ab:d4:40:9d:c6:81:8b:10:d6:ae:0a:25:3e:d3:79:
                    74:b9:09:3c:00:9e:6e:cc:41:17:66:21:4b:c4:f2:
                    f2:61:ef:a2:0a:1a:36:55:5a:b1:5e:2c:9e:6d:97:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B4:F9:8F:86:E3:66:14:2E:7A:18:2D:15:B9:B0:F4:AD:D7:30:27
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:28:d3:08:ac:2c:a6:a4:ad:e9:18:29:d0:2d:dc:e2:29:2a:
         89:6c:91:82:f6:68:ec:19:dd:4e:8a:d5:1a:4d:48:ae:4a:26:
         9b:43:db:ec:43:9c:b2:93:47:f6:34:a0:60:01:c2:44:82:b6:
         d6:fe:aa:52:03:be:ca:40:95:0e:80:3f:34:af:26:1a:0c:e0:
         b9:77:1f:25:57:e5:0e:cf:d8:45:e5:7a:a7:b6:e5:a3:b6:cf:
         74:bc:7c:f4:e2:95:a2:81:8c:07:94:cd:74:78:52:7d:35:1a:
         f9:5c:fc:13:9d:81:ed:7f:4c:2a:2d:45:3e:86:19:9b:e2:55:
         ad:a6:ad:11:b9:33:a0:9c:7b:44:f7:f3:90:11:4c:81:40:34:
         42:af:66:61:42:ca:22:af:fd:9b:3d:93:ce:8d:ec:b4:92:e1:
         40:e4:99:eb:57:08:e2:2e:68:e4:97:a3:b4:c0:a3:a9:b3:0c:
         d3:dc:be:6f:0c:97:72:f1:f8:fa:16:bb:4b:5a:22:f6:dc:d6:
         ab:cd:95:2c:31:8f:f7:09:c4:3f:ea:23:14:5b:31:e4:16:f7:
         d2:c0:95:d5:e6:53:5e:60:8c:92:dc:b4:74:a8:58:08:9a:eb:
         ff:56:71:58:31:20:e7:4f:ed:47:72:e8:f8:dc:7d:44:30:8b:
         3e:df:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:47:18 2026 by rpki-client