Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
File:                     pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json)
Hash identifier:          r/8pVagusuN7BOk+HwvnEKW0qbCp3So6eR8Ssb0957g=
Subject key identifier:   67:C9:1B:DE:B9:5F:05:91:DF:2F:B9:E0:D0:4B:73:55:45:20:DE:E3
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Certificate issuer:       /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial:       356C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
Manifest number:          3568
Signing time:             Wed 22 Jul 2026 14:37:39 +0000
Manifest this update:     Wed 22 Jul 2026 14:37:38 +0000
Manifest next update:     Wed 29 Jul 2026 14:37:38 +0000
Files and hashes:         1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: XXfnehRE1nCEYcKvTPNwKdZt0jKPV0osimdl/Fd34O4=)
                          2: C264EF40348611F1AD86C498AC833773.roa (hash: UCNqkXsLDv2zmllrc+fMw9VjxTkEQBJi+aRxDGtZ/P4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13676 (0x356c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
        Validity
            Not Before: Jul 22 14:37:38 2026 GMT
            Not After : Jul 29 14:37:38 2026 GMT
        Subject: CN=6a60d5b3-f052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:31:5b:70:e6:b4:69:91:ad:f4:bd:ed:c0:
                    97:5a:3f:de:99:90:7f:61:4d:21:62:39:bd:83:23:
                    35:aa:d4:0c:73:c3:71:4d:f6:04:cb:10:bb:b2:9d:
                    54:74:77:68:54:1d:c6:09:7f:38:f2:38:e6:f0:b0:
                    38:26:9a:0d:8d:54:d7:35:f4:10:54:cf:1f:b6:e2:
                    81:cc:04:b8:5a:1f:dd:84:b5:73:35:2f:2b:4d:a6:
                    9f:54:19:11:da:3a:c9:6f:7b:e8:0d:b6:50:3c:aa:
                    71:eb:7a:ff:f4:85:95:90:e8:0e:48:f2:7e:af:f0:
                    26:31:11:76:82:aa:39:b2:12:18:f4:32:73:20:80:
                    f0:39:9e:bb:75:d6:0c:25:8e:21:6e:b9:09:a4:5f:
                    1b:80:e7:6a:33:cb:54:bb:a6:da:a3:f3:3d:57:e9:
                    ad:9c:a6:cd:2c:2e:02:53:c4:f6:9c:0f:ad:3a:a6:
                    f6:84:e5:2b:73:04:53:22:1b:c8:4c:6b:0b:5c:e3:
                    bf:5c:09:0d:56:89:4b:03:a9:92:65:69:82:db:9d:
                    47:64:fa:85:3f:00:f6:59:97:f3:ec:64:7a:ba:33:
                    43:c7:30:9e:c8:47:b7:91:46:18:ff:fa:c5:5d:ba:
                    72:b9:d2:02:b1:7b:b1:c4:69:88:87:6b:c1:80:5e:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:1B:DE:B9:5F:05:91:DF:2F:B9:E0:D0:4B:73:55:45:20:DE:E3
            X509v3 Authority Key Identifier:
                keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e2:2d:16:2f:fa:ca:0d:4a:63:7e:b7:0f:a8:a8:ed:f4:9b:
         5f:9c:59:45:b4:c6:01:e6:43:35:dc:47:cf:53:76:7f:ba:b8:
         ae:ae:0a:f0:49:a8:f3:2d:a3:bc:b5:16:d1:9c:ea:8f:87:a1:
         92:47:6a:0e:42:9a:98:ad:25:ea:4f:68:c9:ec:b5:f2:ee:9f:
         82:f9:ad:78:f0:14:0f:8a:d9:d5:cc:9c:7e:3b:df:03:fe:fc:
         91:68:d4:5d:6b:94:0d:02:b0:79:33:38:a7:aa:d1:6c:3f:6d:
         a2:d7:5f:b1:e5:be:53:7f:70:f8:21:4e:01:40:1f:47:e2:ca:
         1c:9e:5c:4f:06:6f:b7:61:f5:a4:cc:3c:c1:36:9d:96:a2:4b:
         ac:a2:38:fd:b8:e9:43:81:89:33:24:eb:95:6e:59:07:a5:a3:
         17:f4:d3:4e:c4:0b:18:c5:02:7e:97:3c:c7:94:97:6d:79:a1:
         36:a1:1a:03:71:02:ff:95:b9:18:fb:ef:8f:a1:1c:2b:d4:eb:
         12:53:b5:53:60:3a:66:96:42:39:30:01:79:3c:27:04:36:8f:
         42:4b:4d:4e:86:1d:7f:ec:58:b9:62:80:0c:e7:40:13:53:9a:
         1d:c7:2a:07:bb:e4:69:35:cd:c6:86:85:c9:43:d3:50:0c:a9:
         b9:6e:46:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB
NzM0QTkyQkQwHhcNMjYwNzIyMTQzNzM4WhcNMjYwNzI5MTQzNzM4WjAYMRYwFAYD
VQQDEw02YTYwZDViMy1mMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUoxW3DmtGmRrfS97cCXWj/emZB/YU0hYjm9gyM1qtQMc8NxTfYEyxC7sp1U
dHdoVB3GCX848jjm8LA4JpoNjVTXNfQQVM8ftuKBzAS4Wh/dhLVzNS8rTaafVBkR
2jrJb3voDbZQPKpx63r/9IWVkOgOSPJ+r/AmMRF2gqo5shIY9DJzIIDwOZ67ddYM
JY4hbrkJpF8bgOdqM8tUu6bao/M9V+mtnKbNLC4CU8T2nA+tOqb2hOUrcwRTIhvI
TGsLXOO/XAkNVolLA6mSZWmC251HZPqFPwD2WZfz7GR6ujNDxzCeyEe3kUYY//rF
XbpyudICsXuxxGmIh2vBgF46JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfJG965
XwWR3y+54NBLc1VFIN7jMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE
OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr
cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm
UW9VU2E3RGNTLXFuTktrcjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALOItFi/6yg1KY363D6io7fSbX5xZRbTGAeZDNdxHz1N2f7q4rq4K8Emo8y2j
vLUW0Zzqj4ehkkdqDkKamK0l6k9oyey18u6fgvmtePAUD4rZ1cycfjvfA/78kWjU
XWuUDQKweTM4p6rRbD9totdfseW+U39w+CFOAUAfR+LKHJ5cTwZvt2H1pMw8wTad
lqJLrKI4/bjpQ4GJMyTrlW5ZB6WjF/TTTsQLGMUCfpc8x5SXbXmhNqEaA3EC/5W5
GPvvj6EcK9TrElO1U2A6ZpZCOTABeTwnBDaPQktNToYdf+xYuWKADOdAE1OaHccq
B7vkaTXNxoaFyUPTUAypuW5GlA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:26:36 2026 by rpki-client