Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File:                     PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier:          n3OKZps7r6wUhsRwOO3k/I30HI55n04eHu3T98poJL4=
Subject key identifier:   3E:BE:49:51:4C:D7:D9:94:3E:DF:E2:94:E7:90:1E:A8:23:12:DB:15
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer:       /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number:          024D
Signing time:             Wed 25 Mar 2026 01:52:14 +0000
Manifest this update:     Wed 25 Mar 2026 01:52:13 +0000
Manifest next update:     Wed 01 Apr 2026 01:52:13 +0000
Files and hashes:         1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: Ik9qRAQUYo3QkKe7RZQklDEwwVOSloSo4hM3CRGZGeE=)
                          2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: jtFTS9OP/+u/oNYJ/JAlDkEQWUYXsmjAi8mzzAzLUmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
                          rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
        Validity
            Not Before: Mar 25 01:52:13 2026 GMT
            Not After : Apr  1 01:52:13 2026 GMT
        Subject: CN=69c33fce-3882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:23:8e:a6:12:80:d1:3d:c4:b6:14:8d:23:
                    ff:f5:13:64:31:69:29:54:ab:86:9c:71:15:b5:6e:
                    90:47:ae:15:1f:94:09:ae:77:cf:4a:80:7f:4c:3c:
                    aa:9d:59:77:8c:2f:27:ec:fa:27:ad:59:b4:65:71:
                    09:81:dd:9e:5e:8e:ff:2e:44:54:0d:6f:67:63:2c:
                    ea:fc:b4:c9:c3:a7:ea:16:12:c2:f5:a4:65:60:27:
                    4f:c1:84:6e:d2:84:11:03:31:aa:ad:9c:2f:d7:6a:
                    9c:52:ea:c3:95:0f:aa:5d:f0:33:8b:70:e8:c0:fb:
                    20:1c:4d:9d:c5:5a:81:a6:32:28:40:bf:98:2f:a5:
                    de:a1:85:20:a9:bd:87:08:82:89:e3:b1:78:92:51:
                    7a:53:8e:c1:6e:42:9f:5f:c0:69:4c:f8:d5:58:d0:
                    a7:80:64:a5:a3:4d:55:c8:38:cc:04:cb:90:65:3c:
                    5a:41:09:d6:7e:82:4d:2d:13:56:d0:97:f4:14:b6:
                    36:a9:19:6b:5e:72:7c:77:d5:46:b9:56:0b:50:34:
                    6a:9b:e2:9a:11:e0:94:96:28:a5:a8:e4:0d:4f:80:
                    48:e9:87:a7:b3:e7:93:6a:59:1b:8f:5b:7c:5a:e8:
                    28:ac:11:6f:a6:a8:df:74:c8:0e:fc:3c:4a:cd:55:
                    19:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:49:51:4C:D7:D9:94:3E:DF:E2:94:E7:90:1E:A8:23:12:DB:15
            X509v3 Authority Key Identifier:
                keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:36:8a:e7:06:c1:1c:53:0f:57:d5:7a:f4:70:70:2a:3a:
         fa:a3:6f:61:34:05:5a:28:b6:77:44:4d:23:4c:b7:52:e8:7e:
         e5:9b:ce:f2:61:d9:b7:ee:8e:98:da:06:fc:66:dc:7b:c1:48:
         13:0f:ad:45:9c:ca:0b:ec:30:10:81:7d:15:02:b7:41:8d:77:
         c4:fd:0c:bd:c8:40:3a:5a:4c:7e:26:d1:f7:85:05:3e:6d:66:
         70:9b:8d:9a:ff:4b:7e:23:73:de:d6:50:7f:52:b1:c4:b7:66:
         e8:6c:38:7c:36:1b:e1:60:5d:d1:58:1b:3b:d0:32:4e:b2:ae:
         d5:68:23:22:77:e2:6e:b5:e4:dd:40:4b:f1:55:2a:e9:17:bb:
         77:65:f8:f4:e6:17:b4:e4:0f:2c:5c:58:78:c0:e0:f6:39:db:
         ac:c5:f0:6b:46:8b:5a:2b:9a:74:41:5c:c7:f6:8a:16:d9:3b:
         3b:a9:5f:de:44:26:89:67:90:51:bc:74:2c:5a:9b:62:d2:3f:
         1b:8b:18:ca:20:e8:e8:0d:c1:b4:76:fd:43:b8:2e:44:78:19:
         f1:dc:9a:17:93:1c:5a:ef:86:7d:98:80:f3:20:ba:98:b3:1d:
         df:9c:2e:23:ee:a2:d4:be:f3:02:d0:da:e1:21:64:0a:26:30:
         d6:84:38:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx
QjQ4RkI3QzUwHhcNMjYwMzI1MDE1MjEzWhcNMjYwNDAxMDE1MjEzWjAYMRYwFAYD
VQQDEw02OWMzM2ZjZS0zODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlsAjjqYSgNE9xLYUjSP/9RNkMWkpVKuGnHEVtW6QR64VH5QJrnfPSoB/TDyq
nVl3jC8n7PonrVm0ZXEJgd2eXo7/LkRUDW9nYyzq/LTJw6fqFhLC9aRlYCdPwYRu
0oQRAzGqrZwv12qcUurDlQ+qXfAzi3DowPsgHE2dxVqBpjIoQL+YL6XeoYUgqb2H
CIKJ47F4klF6U47BbkKfX8BpTPjVWNCngGSlo01VyDjMBMuQZTxaQQnWfoJNLRNW
0Jf0FLY2qRlrXnJ8d9VGuVYLUDRqm+KaEeCUliilqOQNT4BI6Yens+eTalkbj1t8
WugorBFvpqjfdMgO/DxKzVUZOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6+SVFM
19mUPt/ilOeQHqgjEtsVMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB
NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDJFMS9EQTg2QjYxNkJBNkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdq
VU5Icy03cG15cjBiU1B0OFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATis2iucGwRxTD1fVevRwcCo6+qNvYTQFWii2d0RNI0y3Uuh+5ZvO8mHZt+6O
mNoG/Gbce8FIEw+tRZzKC+wwEIF9FQK3QY13xP0MvchAOlpMfibR94UFPm1mcJuN
mv9LfiNz3tZQf1KxxLdm6Gw4fDYb4WBd0VgbO9AyTrKu1WgjInfibrXk3UBL8VUq
6Re7d2X49OYXtOQPLFxYeMDg9jnbrMXwa0aLWiuadEFcx/aKFtk7O6lf3kQmiWeQ
Ubx0LFqbYtI/G4sYyiDo6A3BtHb9Q7guRHgZ8dyaF5McWu+GfZiA8yC6mLMd35wu
I+6i1L7zAtDa4SFkCiYw1oQ4Ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:48 2026 by rpki-client