Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
File:                     PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json)
Hash identifier:          UkfiRFL+XLeYdWmoTZGKFStfGMZnLF3zu5CYS+YXR3w=
Subject key identifier:   C6:AC:31:02:9C:BA:EC:CA:99:B1:5E:DF:6C:4E:62:A6:F0:23:B6:2D
Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68
Certificate issuer:       /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
Manifest number:          01DE
Signing time:             Thu 23 Jul 2026 04:50:59 +0000
Manifest this update:     Thu 23 Jul 2026 04:50:59 +0000
Manifest next update:     Thu 30 Jul 2026 04:50:59 +0000
Files and hashes:         1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: iPAulGBmZBeelPzCb+3UmWy1U2Dc7XzuqR7k/I53S6Y=)
                          2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: I3Aip9lEI/tB1p617YVnjX7fZuimKLHKae3IrKIw1Ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl
                          rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CED30, serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968
        Validity
            Not Before: Jul 23 04:50:59 2026 GMT
            Not After : Jul 30 04:50:59 2026 GMT
        Subject: CN=6a619db3-485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:cf:fd:25:4e:b1:a7:16:fd:74:7f:ea:44:
                    c9:46:60:b6:04:a3:5a:77:79:d9:86:8c:ef:10:2a:
                    cd:3b:04:ac:c3:25:cd:ed:9b:82:be:92:25:1b:54:
                    eb:bc:42:70:5a:ea:6a:f3:29:9d:61:dc:55:ad:0a:
                    0f:22:38:9e:17:bb:a2:f4:1f:1e:ee:a8:00:61:41:
                    d5:c1:da:5a:15:96:45:be:26:82:c1:8c:83:86:3f:
                    b4:65:72:26:6a:fb:ef:53:5e:b6:b3:d9:78:ff:9e:
                    01:d4:0b:fd:77:c7:c8:3b:dd:d0:78:bc:51:dd:89:
                    aa:86:46:a0:1e:40:5b:63:dc:b7:f2:d1:0c:f5:e5:
                    04:3a:7a:fc:37:9a:5b:3e:3a:1d:da:63:4c:81:82:
                    23:08:4a:90:d6:d9:ec:6f:75:8d:73:2d:68:b7:16:
                    1d:22:24:24:28:0c:06:12:02:fc:6a:67:5b:08:b4:
                    80:ad:87:5e:de:91:1c:e5:29:04:44:b9:71:1a:e7:
                    76:6d:fa:99:b0:2b:da:14:38:4c:d9:af:b9:d5:d8:
                    04:52:91:bc:11:a6:f7:29:d6:03:15:bf:33:e3:6d:
                    e7:50:9d:11:26:b4:8c:6f:ad:d9:b2:39:1a:2a:a4:
                    04:3e:d6:23:cc:59:15:9e:af:fc:53:a7:b2:3d:dd:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AC:31:02:9C:BA:EC:CA:99:B1:5E:DF:6C:4E:62:A6:F0:23:B6:2D
            X509v3 Authority Key Identifier:
                keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:86:78:ee:50:75:c9:0e:61:8a:12:b9:e0:e1:61:fc:6b:e8:
         b7:7c:2e:1f:7b:b5:11:f5:2f:de:aa:e0:26:c8:bb:90:8f:4f:
         73:de:70:c4:f2:2a:50:d8:90:7c:3b:d7:a1:fe:6b:78:0e:4d:
         6f:06:aa:95:27:a4:7d:ef:11:67:e4:51:17:36:34:f9:59:c6:
         11:02:53:86:3c:14:a8:44:0c:c7:6b:fa:0e:32:88:49:0e:99:
         8f:8f:9f:da:1e:f8:b0:db:39:bf:00:82:d6:74:da:e7:a3:cc:
         74:02:eb:c5:dc:80:31:bf:59:12:fc:22:16:13:ea:c7:62:ec:
         58:80:93:d1:7f:3f:02:c6:a1:0f:ba:a1:ba:27:4a:aa:31:cd:
         3d:f2:f1:46:2d:5e:b0:c2:b3:29:a4:fc:a5:37:41:6c:29:44:
         fc:02:cb:9d:79:2d:43:3d:68:b4:5f:25:fc:fd:59:9f:6c:6a:
         d1:96:22:96:e6:ce:1b:a5:c9:15:11:e5:e8:62:6f:a1:7e:2e:
         9e:44:96:27:46:31:4a:ff:62:89:b3:b7:b6:f6:2a:0b:90:f6:
         13:ab:4e:b8:c9:8e:75:0a:f1:31:17:af:c6:7f:56:7a:c6:a7:
         94:54:27:86:c4:bd:a0:cc:93:ac:da:ab:97:6d:6f:93:43:e0:
         a3:d7:93:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF
MUQ2NEM5NjgwHhcNMjYwNzIzMDQ1MDU5WhcNMjYwNzMwMDQ1MDU5WjAYMRYwFAYD
VQQDEw02YTYxOWRiMy00ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGjP/SVOsacW/XR/6kTJRmC2BKNad3nZhozvECrNOwSswyXN7ZuCvpIlG1Tr
vEJwWupq8ymdYdxVrQoPIjieF7ui9B8e7qgAYUHVwdpaFZZFviaCwYyDhj+0ZXIm
avvvU162s9l4/54B1Av9d8fIO93QeLxR3YmqhkagHkBbY9y38tEM9eUEOnr8N5pb
Pjod2mNMgYIjCEqQ1tnsb3WNcy1otxYdIiQkKAwGEgL8amdbCLSArYde3pEc5SkE
RLlxGud2bfqZsCvaFDhM2a+51dgEUpG8Eab3KdYDFb8z423nUJ0RJrSMb63Zsjka
KqQEPtYjzFkVnq/8U6eyPd2DLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMasMQKc
uuzKmbFe32xOYqbwI7YtMB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF
MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI
SWgxWWlqeFNZQmpoMWt5V2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ4Z47lB1yQ5hihK54OFh/Gvot3wuH3u1EfUv3qrgJsi7kI9Pc95wxPIqUNiQ
fDvXof5reA5NbwaqlSekfe8RZ+RRFzY0+VnGEQJThjwUqEQMx2v6DjKISQ6Zj4+f
2h74sNs5vwCC1nTa56PMdALrxdyAMb9ZEvwiFhPqx2LsWICT0X8/AsahD7qhuidK
qjHNPfLxRi1esMKzKaT8pTdBbClE/ALLnXktQz1otF8l/P1Zn2xq0ZYilubOG6XJ
FRHl6GJvoX4unkSWJ0YxSv9iibO3tvYqC5D2E6tOuMmOdQrxMRevxn9WesanlFQn
hsS9oMyTrNqrl21vk0Pgo9eTqw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:20 2026 by rpki-client