Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
File:                     PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft (raw, json)
Hash identifier:          fRoIH5yilqA5sNhxeC+s3VAPyF2swXWnsnvfw3KeW/s=
Subject key identifier:   EA:AA:23:A1:21:89:7B:EF:D5:96:7A:4A:65:FA:28:FF:80:DF:06:DD
Authority key identifier: 3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F
Certificate issuer:       /CN=A91D28C2/serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
Certificate serial:       07AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
Manifest number:          07A4
Signing time:             Sat 26 Sep 2026 21:35:57 +0000
Manifest this update:     Sat 26 Sep 2026 21:35:56 +0000
Manifest next update:     Sat 03 Oct 2026 21:35:56 +0000
Files and hashes:         1: PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl (hash: To6A7LsYABUmsnm0iJ0XnPByFvKlZ8hknVJyoH0QvDw=)
                          2: 69911E0893AB11EEADF5F71BC4F9AE02.roa (hash: jmaFcpaDeiXM/6W+3Dvlo06UYUE1H6LTzGNr5Pw/4po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl
                          rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28C2, serialNumber=3EE5229761306B97BDA7FBE1F24CB4B04D49258F
        Validity
            Not Before: Sep 26 21:35:56 2026 GMT
            Not After : Oct  3 21:35:56 2026 GMT
        Subject: CN=6ab83abd-2066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:de:ab:7d:6a:55:f0:97:af:7e:14:89:11:9a:
                    fc:1c:6a:29:b0:7f:b6:8f:40:0c:8d:cc:5a:e9:d1:
                    17:a7:68:bb:b8:9b:5b:2d:53:ea:71:e9:9f:f6:72:
                    f6:c2:0e:90:c2:56:a3:99:d8:a1:c4:7c:4c:1e:6f:
                    a2:d2:d6:30:13:10:db:27:55:fc:69:b6:1e:e0:08:
                    2f:3f:6a:21:40:60:d6:8b:e9:6e:57:53:95:bc:5e:
                    cb:d7:ba:06:db:c8:55:b0:0d:b0:ff:13:f2:9d:f5:
                    e6:e4:e5:e1:7f:c1:a9:bc:d4:2c:b7:9d:8e:33:f1:
                    b5:83:ee:6b:8a:e7:87:a9:5b:ad:d4:fb:fa:ae:40:
                    48:c7:d7:84:2b:1b:a7:95:92:03:3a:ae:ee:52:55:
                    c0:5f:f0:0f:5a:67:6f:4c:82:6f:77:67:10:7d:4d:
                    66:1e:08:89:69:10:6e:aa:3b:d1:5b:9a:42:ac:9e:
                    02:20:d3:c3:5b:a6:92:c9:c7:b3:7d:92:0e:af:bd:
                    83:6a:2e:03:6f:af:12:a8:da:5b:42:73:60:22:91:
                    5d:04:83:d7:f0:81:88:df:47:c6:b3:e8:3c:5a:a8:
                    2f:90:66:f1:3e:17:83:1b:64:b0:62:f1:49:f4:62:
                    cb:fc:be:5c:96:31:8a:ee:ae:95:49:ab:04:70:ec:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:23:A1:21:89:7B:EF:D5:96:7A:4A:65:FA:28:FF:80:DF:06:DD
            X509v3 Authority Key Identifier:
                keyid:3E:E5:22:97:61:30:6B:97:BD:A7:FB:E1:F2:4C:B4:B0:4D:49:25:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PuUil2Ewa5e9p_vh8ky0sE1JJY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28C2/F69C3BAC669511EB8F423F55C4F9AE02/PuUil2Ewa5e9p_vh8ky0sE1JJY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ea:71:5b:a6:db:dc:be:03:4a:71:b8:42:69:b4:b5:6f:95:
         03:b1:98:9a:55:57:01:51:90:3a:88:31:9b:ed:e6:2a:5d:c2:
         85:a2:4e:99:9e:7b:51:1a:d7:33:4b:6f:b0:73:2e:0d:0f:2f:
         4a:b5:91:c3:e5:4b:d0:f6:df:97:b8:bd:88:1c:a2:2e:1e:0d:
         34:6a:01:0c:a4:ea:70:a8:a4:8f:b1:47:b7:ad:f0:41:26:0c:
         5c:d6:88:6f:b8:63:2f:51:4e:00:fa:c5:b2:74:02:c5:5b:39:
         94:15:68:6e:f5:fb:00:f3:04:20:dd:b1:8b:2d:e2:a7:62:36:
         69:e0:4a:f7:4d:53:ba:7a:87:98:1f:d2:3d:ac:27:0d:68:e2:
         ba:3a:b4:2c:ab:b5:e3:6a:e9:12:f7:f7:22:5a:ac:6f:53:02:
         ed:e9:b1:19:b7:fe:1f:07:89:b3:5a:57:5c:12:d1:16:40:c0:
         90:07:64:06:8b:be:ef:9d:26:69:f4:72:b5:f4:5d:0e:16:b6:
         cf:2f:13:63:9d:1e:25:59:9d:c0:6d:26:81:9c:11:fa:08:22:
         0d:c8:55:5e:6e:90:4d:e3:47:ce:02:7b:49:c7:0e:1c:fd:43:
         a1:58:ab:19:4f:ea:ce:e9:e3:73:db:4a:88:da:4a:7c:ed:04:
         2d:94:08:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:50:21 2026 by rpki-client