Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File:                     PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier:          q/wVNiSD6qQTJElDivcBdZrrBgwU29ofGUkvgnVw//E=
Subject key identifier:   65:CA:95:5A:8E:EF:19:5B:01:9D:AF:1C:19:1B:F2:65:BD:6F:F7:89
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer:       /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial:       2DFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number:          2DA5
Signing time:             Thu 23 Jul 2026 23:30:55 +0000
Manifest this update:     Thu 23 Jul 2026 23:30:54 +0000
Manifest next update:     Thu 30 Jul 2026 23:30:54 +0000
Files and hashes:         1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: NC6dOdT1nol667LEy1poMg9KXGXvJbnaSw4l+oaIeAU=)
                          2: DB6B2B08803F11F1AB5A5B056DA30FBC.roa (hash: cn4m4b6sIeF0CcUvFFFFcObaHyEFh3BwO2hFRYMDLIc=)
                          3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: ILtVZce+EeOlerO/s4x6aPfHR6PK7/NY4qOIZJx05so=)
                          4: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4=)
                          5: 89AC5C4686EE11F19E006003A7EE528E.roa (hash: PkydwwTolsEm1C1IlaW9dK4GplSAGjMdSU6I9gbAdos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11772 (0x2dfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
        Validity
            Not Before: Jul 23 23:30:54 2026 GMT
            Not After : Jul 30 23:30:54 2026 GMT
        Subject: CN=6a62a42f-bd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:00:16:1a:0c:70:f8:48:fe:8c:5c:2d:8a:
                    a6:01:97:cf:1b:96:29:d2:de:63:33:ec:41:ca:43:
                    a0:73:2c:ae:1d:91:31:44:35:e5:d8:b3:c5:f0:25:
                    79:25:a7:34:80:dd:31:7a:9d:bf:aa:a5:f8:a9:50:
                    e5:1e:01:ed:3f:c7:b0:20:05:84:17:9e:6d:32:e0:
                    28:4a:f0:6d:d1:b2:87:3a:6b:82:f7:d7:67:84:0a:
                    2f:f7:47:0f:b1:08:47:f5:05:7c:5c:3b:0d:c1:c9:
                    56:aa:2d:4f:a1:03:50:c7:62:1c:5a:ee:b7:65:25:
                    ee:72:b9:5d:2c:21:6d:28:99:67:2a:52:e0:d5:f4:
                    12:b9:c4:55:7c:0d:11:70:37:ea:a7:3c:2c:30:dd:
                    e6:d9:28:2a:41:08:b1:b7:1f:ee:ee:71:2e:24:7b:
                    b1:ff:10:3d:4d:d6:2e:c5:54:5e:de:fc:ea:65:31:
                    c5:26:00:42:8d:1e:08:f1:d5:fe:42:1f:fb:d5:5e:
                    31:c0:c6:0b:84:f5:99:21:d9:f5:3c:b1:88:d5:9c:
                    6a:a9:cd:0c:ab:df:01:85:fb:c4:9d:34:27:18:c2:
                    3d:81:0b:49:4a:63:c9:6e:47:52:3e:22:e3:de:7f:
                    17:11:dc:e8:b1:d7:ca:f9:0a:c5:e8:89:7a:aa:ee:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CA:95:5A:8E:EF:19:5B:01:9D:AF:1C:19:1B:F2:65:BD:6F:F7:89
            X509v3 Authority Key Identifier:
                keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8c:a1:00:f3:15:ee:40:c7:83:d4:6d:09:6a:a5:b3:02:c4:
         e5:81:30:a9:8b:06:f0:5e:29:87:62:01:e0:5a:31:c9:28:40:
         53:1a:b5:78:00:1c:c6:93:18:bd:1d:02:04:f9:39:36:7e:14:
         88:3f:63:41:8f:e0:9e:e5:fc:f6:90:73:39:01:07:8b:fa:c2:
         b8:aa:96:2d:42:6d:ce:80:05:15:6c:c0:30:3a:1a:f6:e4:ff:
         0b:2e:96:1b:6a:59:32:73:fe:8e:cc:f0:29:fa:f0:34:ff:bc:
         2c:3a:50:90:17:16:fa:38:54:bf:91:45:f4:01:54:e4:ae:54:
         28:b8:f4:24:86:97:8c:2d:97:a8:34:af:03:37:b0:f0:b9:1b:
         c5:b8:5a:d7:7f:e9:92:f6:06:fb:16:05:a8:39:e9:50:c2:8f:
         85:1e:4a:af:e2:a3:8c:a8:e4:37:82:42:53:68:2d:51:ac:4d:
         d2:c7:1a:25:33:d3:2b:a9:7c:57:f0:45:c8:b2:12:47:a8:79:
         f3:fb:b1:5e:71:32:cf:98:11:b5:f4:9f:dd:09:20:3b:c5:0f:
         50:f6:37:68:b3:c1:a5:04:3e:3f:aa:56:9f:56:f5:e9:c3:77:
         f6:80:54:8f:09:7d:e6:30:40:18:87:4b:ac:35:8d:f0:86:2e:
         92:8d:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:15:49 2026 by rpki-client