Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File:                     PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier:          aVsCRXQFiQ8oxhpjJnoNqjl2tZ76FEmYDCmATBMvsjo=
Subject key identifier:   4D:FF:72:BC:5A:35:17:20:FC:8E:20:13:78:D7:43:C0:A0:BF:B4:F1
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer:       /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial:       036E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number:          035E
Signing time:             Thu 23 Jul 2026 01:51:27 +0000
Manifest this update:     Thu 23 Jul 2026 01:51:27 +0000
Manifest next update:     Thu 30 Jul 2026 01:51:27 +0000
Files and hashes:         1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: xMs4FGcWyCZ6FKPTglihHx5a60nFaTnRHHo1+L6nlV0=)
                          2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: O3Ls+9YBYFMKkyDDzAoAnYOjitWoJ58mnyLKpWOVBLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
                          rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
        Validity
            Not Before: Jul 23 01:51:27 2026 GMT
            Not After : Jul 30 01:51:27 2026 GMT
        Subject: CN=6a61739f-e3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:01:c9:d6:bf:fe:e3:01:80:be:b1:9a:9b:
                    14:c5:63:92:bd:7a:22:ae:d1:6a:c1:a0:82:5b:9b:
                    35:5f:f2:ae:9f:21:e0:3f:30:f5:bb:da:44:b4:b9:
                    91:20:30:59:e6:5d:a1:43:23:44:71:3b:20:c3:bd:
                    dc:89:41:cb:42:bd:bb:7a:bf:66:1c:92:45:5e:99:
                    90:c7:87:9a:02:99:27:76:b1:f6:50:f5:64:f3:25:
                    6c:5e:30:fc:99:5b:95:a3:08:2a:98:8d:6d:bd:a5:
                    8a:10:1e:5b:43:5b:a2:0c:f9:1b:f8:58:ae:36:50:
                    64:36:5f:8c:15:cb:46:c0:15:d9:c8:8c:2a:5d:c9:
                    7f:29:e2:09:68:5e:d6:41:43:ce:80:b6:98:c9:55:
                    2e:ca:ed:a3:f7:88:17:4d:ff:cf:16:70:86:42:60:
                    ae:e5:c6:84:44:ac:f7:75:7f:49:69:45:fe:cc:d5:
                    49:12:38:4e:9d:94:0d:9c:cd:b1:43:45:97:81:a8:
                    d9:79:89:cc:12:37:4e:fd:f6:3e:59:d7:d8:40:43:
                    d6:84:2b:d9:4c:ce:5d:1f:2b:cc:4d:ed:a5:d0:11:
                    d6:ed:5b:97:23:40:ea:ab:ae:ea:02:fb:4a:b9:79:
                    da:0c:b6:f8:1d:7e:f0:d0:8e:ec:33:e2:bc:8d:a5:
                    3a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FF:72:BC:5A:35:17:20:FC:8E:20:13:78:D7:43:C0:A0:BF:B4:F1
            X509v3 Authority Key Identifier:
                keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:92:f2:f4:0b:7d:50:20:14:fd:d9:e4:0c:6b:f8:ec:dc:46:
         2f:d2:ba:fe:f5:43:f2:08:12:4d:a8:28:a6:80:fc:1a:08:36:
         16:eb:d8:17:bf:3b:e7:23:0a:b8:45:1d:df:cc:7a:75:7a:52:
         7b:76:a8:7f:e9:31:ce:59:3c:57:43:da:c6:56:b5:3a:bb:c7:
         1e:8f:b4:e9:b4:a2:4e:c5:54:29:46:6f:1d:01:29:2f:14:7e:
         3a:92:9e:1d:ea:7b:ec:c8:60:30:0e:66:62:79:e7:1d:8f:2b:
         88:9e:16:c4:f2:11:10:7b:6b:bb:1b:61:68:3f:e0:64:dd:9f:
         70:77:62:3f:6d:1a:44:77:0b:c3:27:8d:1b:b5:2f:a9:cf:2e:
         fa:70:52:da:b9:2a:12:63:af:24:ae:1b:3b:19:f1:2c:af:7b:
         5c:20:78:85:db:0d:51:22:7d:2e:6f:19:b1:bc:24:63:16:48:
         88:99:cf:7e:1c:bb:dd:7e:d1:f2:9a:40:bc:be:6a:b2:db:17:
         f5:2b:f0:dd:44:f5:7a:93:3d:98:4e:a0:c0:97:c9:bd:50:97:
         ad:c4:2e:97:1a:08:56:28:9c:9f:cb:4e:f1:9f:52:3f:e0:6e:
         42:a2:35:1a:ee:63:a7:ca:3f:6b:2c:28:e5:31:a0:01:cd:23:
         61:e8:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:42 2026 by rpki-client