Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File:                     Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier:          f/BNSbJ+63dMsWxB0Q9sovyb4H8a1fOebbVBKAzUP+4=
Subject key identifier:   2B:61:53:0F:42:9D:47:83:50:84:21:7D:72:52:08:3F:91:0D:07:0A
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer:       /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number:          7E
Signing time:             Thu 23 Jul 2026 09:33:36 +0000
Manifest this update:     Thu 23 Jul 2026 09:33:35 +0000
Manifest next update:     Thu 30 Jul 2026 09:33:35 +0000
Files and hashes:         1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: WzsgPRkVheAnhUxWKOq2UE2x4Ew5GnsznjEfwyBSjqI=)
                          2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
        Validity
            Not Before: Jul 23 09:33:35 2026 GMT
            Not After : Jul 30 09:33:35 2026 GMT
        Subject: CN=6a61dff0-ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:e1:3b:81:dd:4c:c4:15:b3:29:00:50:8d:
                    7b:59:e2:37:5d:3d:7c:ac:cb:dd:9f:54:07:d4:48:
                    bd:f1:86:8f:7f:06:3c:8a:c7:f7:1b:f0:4a:c8:d9:
                    19:fa:df:79:d3:ea:8c:76:ac:6b:17:64:37:18:a4:
                    03:0f:0d:73:78:20:95:66:40:ce:ed:64:e7:5e:1e:
                    89:ac:28:84:d1:21:1d:9e:af:26:96:4d:6b:e8:45:
                    49:2c:65:23:d4:4c:8a:a7:d9:a7:53:3c:de:ee:4b:
                    4d:1c:3b:7f:83:cb:e9:6a:29:fe:6a:5a:89:d3:df:
                    da:ae:d7:d9:1c:00:96:77:6b:36:37:c3:ed:5d:53:
                    53:6b:5f:eb:0c:d6:1f:17:b1:47:7e:3f:f7:e4:e9:
                    47:cd:5c:70:b0:0f:58:a2:3a:aa:af:62:4d:9c:9f:
                    0d:e7:fa:9d:4a:be:d0:0c:b6:22:fa:cc:81:4c:a6:
                    d4:b7:74:bb:3d:bf:90:23:e8:e6:f0:6e:59:30:1d:
                    c5:1f:0c:fc:08:1b:bf:d4:af:1f:4e:06:1d:78:2b:
                    94:e0:34:19:f6:2c:a3:bc:8d:34:09:52:e3:08:b1:
                    ba:e5:34:50:fe:63:4d:c3:52:4c:a4:c4:3b:e8:48:
                    b3:f5:97:f7:4a:bf:39:ae:85:dc:5c:84:3c:34:d1:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:53:0F:42:9D:47:83:50:84:21:7D:72:52:08:3F:91:0D:07:0A
            X509v3 Authority Key Identifier:
                keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:b2:2c:72:de:c5:7b:22:96:dd:61:42:5a:54:15:d5:fa:
         07:3d:a1:02:4d:23:4b:00:19:9c:6a:13:9b:dd:8c:28:bb:3a:
         70:c9:3b:8c:03:3f:37:b8:c9:ac:5c:a5:0e:f0:5f:99:2b:09:
         7a:55:78:72:3d:65:09:eb:db:ba:04:5d:7d:ef:f6:96:b7:b8:
         fd:10:21:92:64:ae:3e:19:0f:ee:dd:ea:36:13:2b:27:ed:3d:
         2b:15:f2:18:92:1b:ef:86:23:48:51:4e:44:40:b6:07:83:09:
         44:87:24:a2:58:25:47:59:f1:a1:54:f3:bf:8d:d1:fa:bb:a3:
         d0:61:5a:a5:5a:4c:55:5d:60:da:fe:1c:36:2c:b5:61:ed:c9:
         98:16:f5:97:0b:00:1e:33:25:fd:6c:b2:36:a6:c4:a7:43:25:
         69:d5:39:01:bf:71:72:cd:d2:89:e0:23:44:76:4e:7d:92:f8:
         bb:66:3d:08:d9:4a:a7:4d:d3:69:16:e1:31:00:dd:67:68:e7:
         59:27:00:c9:f9:7d:9c:60:73:aa:c8:86:f4:c0:79:ea:e8:2f:
         d4:64:56:35:71:35:aa:6f:ab:5b:80:46:22:76:c1:8d:4a:9f:
         05:b7:19:93:f5:9d:12:b2:a4:8e:6e:66:1c:b9:0f:b1:95:24:
         c7:f7:05:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:04 2026 by rpki-client