Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File:                     PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier:          wj8kEutw8zNmivhs+oiKSTGNjtA/mLvcXmmmw8/YEPo=
Subject key identifier:   CE:B9:9F:0B:FC:A0:15:A9:5C:ED:C1:9A:0F:DF:B3:EB:2C:2A:E5:68
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer:       /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial:       0903
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number:          085C
Signing time:             Tue 12 May 2026 21:28:59 +0000
Manifest this update:     Tue 12 May 2026 21:28:59 +0000
Manifest next update:     Tue 19 May 2026 21:28:59 +0000
Files and hashes:         1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: f+eEgykzH9Pwwr83aRNrNns04holM4sQYtbOiRMeoFg=)
                          2: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=)
                          3: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=)
                          4: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=)
                          5: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
                          rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307 (0x903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
        Validity
            Not Before: May 12 21:28:59 2026 GMT
            Not After : May 19 21:28:59 2026 GMT
        Subject: CN=6a039b9b-2fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:17:44:39:94:b8:00:16:4e:87:35:d8:23:
                    52:07:18:a5:aa:a2:4d:3d:34:68:74:89:e9:55:66:
                    c7:bb:14:b6:58:9e:aa:93:70:ad:2c:d9:fe:06:af:
                    a7:cb:91:99:1d:5a:66:f5:28:52:c2:df:a3:cf:b7:
                    86:be:a1:00:eb:33:54:f5:d8:ce:cf:34:fe:b2:e4:
                    01:38:73:7f:80:7a:fc:86:f1:48:64:de:06:6d:fd:
                    e2:ad:75:e3:fb:e3:b1:5c:23:13:d4:a6:de:57:fe:
                    2d:25:35:03:98:d8:b9:e0:8a:a8:ce:b8:f7:c0:b8:
                    a4:ec:1d:d1:e7:cf:36:77:ff:a1:88:35:14:cf:0d:
                    d6:b5:bf:df:e9:52:c4:a6:42:60:53:ae:89:7d:ca:
                    8f:78:02:99:09:9c:65:cc:63:17:17:af:8d:77:ce:
                    15:86:dc:30:ce:fa:6f:64:d6:79:91:d0:6e:e1:68:
                    76:1c:09:0d:a3:73:9c:3c:de:db:f7:9a:89:a2:6c:
                    ca:d4:75:f2:d1:a7:5a:b6:b3:b4:10:bd:f9:50:4b:
                    fb:7b:7a:83:86:0e:05:fd:45:ac:b5:54:2c:e0:5e:
                    86:fb:68:bc:af:a5:96:e4:44:bd:e0:11:94:f5:3c:
                    4d:94:31:47:02:b0:bf:7d:e1:79:5e:a8:95:3c:6c:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:9F:0B:FC:A0:15:A9:5C:ED:C1:9A:0F:DF:B3:EB:2C:2A:E5:68
            X509v3 Authority Key Identifier:
                keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:43:f8:92:3a:68:29:2c:73:d2:35:4d:ef:d0:c6:c4:67:39:
         0d:56:a9:95:e9:93:9c:81:e1:38:ac:4b:33:0f:4e:d3:70:65:
         59:88:00:f7:dc:67:4f:61:aa:ab:18:ac:52:74:7c:cf:bb:86:
         5c:2a:bb:f3:d8:6d:8e:4b:a9:05:1f:e8:df:ec:f5:72:e3:2a:
         e0:9b:0d:0e:ee:cb:93:14:da:17:0a:4f:51:f5:31:b1:d2:05:
         65:1c:83:94:f7:0d:be:31:93:8e:58:88:a1:0a:2d:c7:1f:c9:
         8a:a5:16:93:bd:07:9e:45:df:f8:3d:1e:16:0b:73:63:37:05:
         a7:60:06:a1:5a:4c:8d:78:1c:b1:fe:73:46:12:c9:22:95:a2:
         30:dc:e9:af:05:75:e1:c7:c3:44:f9:2a:0f:ba:4b:21:4a:2e:
         3b:99:57:05:a0:bc:79:17:58:ed:cf:a0:db:e7:68:65:95:8c:
         07:6e:e9:cc:8d:76:34:e7:6c:e1:f7:59:ed:a4:07:a5:1a:0f:
         64:47:34:13:48:d1:03:52:33:fe:90:d8:ce:ae:fe:5b:29:ab:
         de:2f:a9:11:15:74:ed:01:10:6c:e3:d2:b7:9d:ed:e9:c0:19:
         ef:40:d7:96:59:e0:0d:ad:f0:df:f5:16:f2:1f:cd:f4:f6:28:
         8e:97:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:43 2026 by rpki-client