Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
File:                     plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json)
Hash identifier:          XDbnFRcBafGGv2RqawXZB+7kugmmyAXLdics764QdF4=
Subject key identifier:   D2:21:38:D3:E7:6A:98:C4:68:41:84:16:D0:58:F9:76:52:84:02:5E
Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
Certificate issuer:       /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Certificate serial:       290D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
Manifest number:          28F9
Signing time:             Wed 22 Jul 2026 15:39:34 +0000
Manifest this update:     Wed 22 Jul 2026 15:39:34 +0000
Manifest next update:     Wed 29 Jul 2026 15:39:34 +0000
Files and hashes:         1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: T40a7bh+LAHBNW8juRuTCBuKv1cWRhy6WQO9ZSz66vg=)
                          2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: LoCmdUsK6L+TshugdKCnyVfyQSooI4RUEUwWon0yLJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10509 (0x290d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
        Validity
            Not Before: Jul 22 15:39:34 2026 GMT
            Not After : Jul 29 15:39:34 2026 GMT
        Subject: CN=6a60e436-c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:e3:7f:e8:ed:7e:89:8f:7e:5f:e1:0b:fd:
                    14:3b:19:3c:0a:78:d5:be:f7:62:61:bb:73:02:1a:
                    7a:19:6d:97:a4:36:8c:e2:50:f4:fd:39:48:0b:dc:
                    3c:46:af:bd:a9:62:ac:47:3b:31:19:2b:74:dd:5e:
                    f9:19:61:f4:9d:61:ce:dc:ee:23:8e:44:70:36:5a:
                    dd:6f:a3:7b:e7:a3:5d:19:6d:61:da:6f:f1:85:4e:
                    15:3f:77:cf:09:28:d8:46:bc:72:36:41:f4:79:6c:
                    6b:51:27:04:db:8e:49:ff:a4:dd:c7:60:ba:18:b7:
                    e2:ac:c5:0d:c3:df:fe:78:7e:8a:78:c7:9b:88:a0:
                    b4:53:a9:4e:15:14:26:f5:35:f7:db:7e:e3:8a:38:
                    72:6e:57:e3:da:17:8e:ac:a5:c6:19:ba:dc:53:c6:
                    81:33:8f:c4:ca:91:31:e3:0b:61:29:0a:ad:32:82:
                    dd:b6:a4:f6:31:5c:e2:ab:e6:93:7a:7c:67:08:b0:
                    2c:e2:4c:32:2e:9e:90:21:ed:eb:81:8d:fe:0d:af:
                    ac:16:51:48:fb:8c:17:8d:3d:6b:6d:fc:89:24:4f:
                    b4:29:3c:b0:64:57:96:f0:a8:11:5b:81:50:58:4d:
                    91:8c:c8:4b:b5:a2:0b:26:a4:93:93:40:31:aa:85:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:21:38:D3:E7:6A:98:C4:68:41:84:16:D0:58:F9:76:52:84:02:5E
            X509v3 Authority Key Identifier:
                keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:7a:db:fb:41:69:dd:4d:32:e2:02:d8:46:d8:e2:f9:bd:
         35:ac:30:6b:4f:2a:aa:75:e8:0e:9c:3b:f6:4f:96:40:b5:4a:
         4d:ca:46:8c:01:e9:41:70:c5:e7:96:d7:19:c5:c6:ef:70:3b:
         18:01:51:ed:89:07:39:06:16:48:4b:c3:9e:db:9c:dd:42:d0:
         0e:69:33:d6:ae:21:a2:98:9d:00:51:14:92:5c:16:2b:ac:dc:
         fd:cd:ca:a4:78:85:d1:d0:c9:d8:c5:26:7f:97:21:4f:48:50:
         19:4b:e7:c6:b4:b2:44:d6:e2:fe:07:cf:fb:4e:be:40:c9:7b:
         3f:80:65:2a:6c:e8:06:d9:7f:fa:fc:27:f7:75:4a:2c:5c:e4:
         4b:18:92:a2:d7:62:92:2c:f1:05:ad:a5:25:1c:e4:5f:6f:f9:
         9d:7d:04:2b:5f:d6:84:e8:07:40:9b:b8:60:62:1a:04:c8:95:
         08:d3:eb:52:39:4a:83:ab:02:e5:52:2c:0b:1b:a5:d4:c5:e5:
         bc:3e:6b:71:4a:5d:91:1f:0e:08:4d:b5:e7:6e:c8:90:8c:72:
         c1:e9:8e:af:ce:7b:f9:0e:b7:09:27:32:f1:ff:9f:ae:8d:c2:
         d5:6e:41:fa:ee:9b:eb:4c:1a:d1:f5:59:e0:8b:5c:c2:df:aa:
         e9:38:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:00 2026 by rpki-client