Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
File:                     PLSpAEGL6dzcXgSgumKoTahf5uA.mft (raw, json)
Hash identifier:          3sRl0Ttle6jmHdfEqwdgqvK98Bwm3wW6mrB974Fchpg=
Subject key identifier:   12:CA:A7:80:2C:E1:29:E5:83:90:86:83:31:74:90:F0:36:D8:6B:13
Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Certificate issuer:       /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
Manifest number:          0154
Signing time:             Thu 23 Jul 2026 06:42:35 +0000
Manifest this update:     Thu 23 Jul 2026 06:42:35 +0000
Manifest next update:     Thu 30 Jul 2026 06:42:35 +0000
Files and hashes:         1: PLSpAEGL6dzcXgSgumKoTahf5uA.crl (hash: uin1hC3irhU6K30kCsBtmm+bqsWmcRB8rU5tYZJM/eo=)
                          2: DFAC1D02816911EFBC73980DC4F9AE02.roa (hash: V/d4B+TAyK61k3RWgyTLNVmvz+WToaWYZNtG+tiyTlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
                          rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
        Validity
            Not Before: Jul 23 06:42:35 2026 GMT
            Not After : Jul 30 06:42:35 2026 GMT
        Subject: CN=6a61b7db-6e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:ed:fc:a7:7b:68:f5:f0:80:75:87:13:ae:
                    0e:f3:b9:fd:ea:9f:0e:75:41:24:35:87:09:40:67:
                    31:8c:52:da:9a:9d:bc:42:28:8a:c8:b3:ac:7c:26:
                    12:5b:33:a2:0c:26:22:29:b0:59:7f:9a:eb:5a:d2:
                    29:f7:3b:9a:3e:f0:f7:30:f1:a9:db:b0:51:86:8e:
                    c9:88:58:91:34:1f:4e:5d:85:e8:66:ed:fb:0b:7c:
                    e8:42:bc:42:71:4a:66:5d:ab:1a:d8:38:26:ba:59:
                    21:91:40:ed:81:b9:ca:0f:24:6e:de:2c:ad:c0:13:
                    77:60:f7:ea:6e:14:74:fa:bb:5e:0f:74:bc:9f:37:
                    17:24:1b:6e:c4:b7:f4:19:77:1d:f5:0c:43:db:ce:
                    c0:97:6a:a8:7a:cc:a3:87:61:28:c2:cc:9d:04:b0:
                    9d:11:a9:84:ac:69:54:2b:66:e6:6a:d9:8e:90:49:
                    af:0a:cf:79:49:1a:fb:d8:5e:31:6d:8e:dd:ae:cc:
                    8e:1b:26:08:bc:dd:7f:77:6c:39:bb:9e:9f:17:66:
                    a2:35:2d:51:8b:02:36:30:4f:c4:85:08:21:33:db:
                    b8:d0:f7:54:b5:b5:14:72:56:00:5e:03:65:ff:19:
                    a3:1e:fa:d0:fd:cb:0b:22:2c:24:8b:30:42:f9:2c:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:A7:80:2C:E1:29:E5:83:90:86:83:31:74:90:F0:36:D8:6B:13
            X509v3 Authority Key Identifier:
                keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:f3:57:4f:6c:44:80:ab:18:34:3c:25:33:cc:d1:4e:27:
         11:db:9a:e3:18:04:e8:10:6d:37:81:89:bb:8c:27:22:58:e9:
         fb:c9:67:86:e3:fe:02:d0:41:80:83:80:52:bb:0d:d2:2a:d5:
         13:88:d7:5c:82:02:c4:88:8d:33:f9:4d:00:fc:cd:c2:93:04:
         b0:71:dc:18:3b:e6:8b:89:da:92:3f:d5:ae:a1:4c:3d:d1:d9:
         3a:df:54:7f:04:69:4b:d7:05:2f:c2:af:5e:0e:f9:c3:c5:c5:
         2b:19:ea:c0:cb:f3:98:36:11:05:06:53:f4:76:28:5a:42:3a:
         97:f5:8c:3f:35:21:75:4a:9e:75:9c:a7:66:1c:8f:d2:3d:5c:
         80:fa:66:f1:9c:89:c8:32:3f:7e:aa:db:fe:b9:ee:8c:af:75:
         00:5e:e5:2e:ea:e1:c3:ab:d0:d7:cc:9c:61:53:cd:f4:38:26:
         2c:c4:0d:90:eb:ae:84:fa:1d:b3:85:10:2b:b8:c0:a8:84:bf:
         67:71:6e:2d:27:21:b1:a4:67:ad:af:88:62:fb:8e:9f:13:6a:
         16:f0:42:92:19:b2:db:7c:e0:b8:c7:0f:30:2f:32:55:58:1d:
         72:3d:0e:90:a5:8f:bd:aa:be:96:73:b6:c8:8a:07:19:01:0d:
         f7:f3:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:16 2026 by rpki-client