Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
File:                     PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json)
Hash identifier:          z2GvHae5muYi0aDNBrzbkZV2HDV8pt8J+XSz40EvfDg=
Subject key identifier:   B5:CA:66:D0:81:9D:93:94:43:45:65:2C:31:20:F9:BD:A2:5E:94:DA
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Certificate issuer:       /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
Manifest number:          0197
Signing time:             Wed 25 Mar 2026 03:37:38 +0000
Manifest this update:     Wed 25 Mar 2026 03:37:38 +0000
Manifest next update:     Wed 01 Apr 2026 03:37:38 +0000
Files and hashes:         1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: scRJ1xSCi88gD2RrFmJD54W6QyrZqQq/2EXgbIpIEUQ=)
                          2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: 6A3uQ575OB8LX3eqmYdyVlzTZlW6pTp9MJ+vD3i9Vf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
        Validity
            Not Before: Mar 25 03:37:38 2026 GMT
            Not After : Apr  1 03:37:38 2026 GMT
        Subject: CN=69c35882-f351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:9f:24:d4:25:dc:f9:53:02:23:84:12:86:
                    b6:69:f4:a8:f6:d8:4b:34:11:53:01:e6:1b:92:54:
                    1f:fd:4a:c1:28:2e:52:91:fa:22:9c:29:72:65:24:
                    f3:2b:de:80:ce:f6:ef:dc:ce:b2:b1:fa:09:96:07:
                    40:8e:b3:08:63:ff:bd:bf:b4:a9:9d:0f:6b:35:22:
                    92:0f:94:27:2e:58:53:31:f0:bf:01:86:11:00:eb:
                    c3:8e:03:54:f2:5a:98:2c:2c:36:6c:1c:92:d9:e2:
                    dc:ed:b9:f9:50:01:36:c3:39:4f:4c:bf:8a:1c:17:
                    86:92:b8:78:7f:42:4b:61:45:6c:51:e0:2c:cc:a0:
                    cb:d6:ba:ac:4b:be:24:5b:be:89:d8:7f:77:92:06:
                    af:5e:ef:70:28:89:68:72:a0:fe:e2:86:71:fa:96:
                    8d:e5:c2:38:6a:bb:7c:74:d2:a1:0d:01:43:a2:d2:
                    50:57:f6:a2:57:7f:c9:6b:d9:13:20:9c:04:0d:bf:
                    21:c3:58:28:e5:02:15:52:4c:11:74:2c:f2:8f:17:
                    dd:f7:a3:93:18:ef:9c:ca:f4:89:d5:8e:b1:6d:3d:
                    cf:cf:ed:29:1d:6a:fd:23:96:8c:5b:ad:1c:bd:b5:
                    ed:a1:77:e1:35:f0:77:bd:bd:be:11:ba:4a:91:5e:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CA:66:D0:81:9D:93:94:43:45:65:2C:31:20:F9:BD:A2:5E:94:DA
            X509v3 Authority Key Identifier:
                keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:2e:88:b6:84:4a:6a:81:5d:7d:86:45:fb:42:15:55:6d:
         c7:49:23:60:a2:69:38:64:5a:c3:3f:be:69:0d:0b:66:b9:fc:
         e5:ef:b3:02:cc:20:41:5c:5f:85:66:a0:ce:3c:6e:7e:2f:b8:
         f1:db:6d:8c:1b:cc:08:89:f1:8a:99:6e:21:30:d9:72:d9:30:
         f4:47:0d:17:ff:c7:0b:f1:68:18:95:fb:73:82:88:a3:35:0f:
         b7:ed:06:08:20:12:b2:39:6f:04:7f:86:ca:32:b8:fa:2f:34:
         fc:0c:4b:04:3b:3a:02:b6:0a:70:c3:40:6a:6b:09:d5:06:a2:
         b4:12:bb:7f:47:eb:62:a3:2d:b9:45:b9:16:cd:81:a5:73:0c:
         aa:12:79:2d:b1:c7:30:58:be:1b:3f:8e:8d:fb:17:6f:1c:11:
         5e:83:b1:42:0f:ae:cd:89:f7:5b:4b:8e:54:6d:56:e3:71:5d:
         25:a7:0c:da:c3:af:15:1f:4d:ea:cf:3c:8f:39:e9:e5:1c:d3:
         75:ac:ae:32:86:a1:dc:f7:5b:47:bb:f9:0c:24:52:7a:c9:67:
         15:e4:75:9c:40:c9:db:1d:43:84:79:5b:e6:18:33:57:a9:b6:
         f7:05:1a:23:a0:d4:6a:be:aa:f3:58:ba:5b:ff:92:4b:26:83:
         5b:1f:11:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD
QkQ2RDJGNTYwHhcNMjYwMzI1MDMzNzM4WhcNMjYwNDAxMDMzNzM4WjAYMRYwFAYD
VQQDEw02OWMzNTg4Mi1mMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWKfJNQl3PlTAiOEEoa2afSo9thLNBFTAeYbklQf/UrBKC5SkfoinClyZSTz
K96Azvbv3M6ysfoJlgdAjrMIY/+9v7SpnQ9rNSKSD5QnLlhTMfC/AYYRAOvDjgNU
8lqYLCw2bByS2eLc7bn5UAE2wzlPTL+KHBeGkrh4f0JLYUVsUeAszKDL1rqsS74k
W76J2H93kgavXu9wKIlocqD+4oZx+paN5cI4art8dNKhDQFDotJQV/aiV3/Ja9kT
IJwEDb8hw1go5QIVUkwRdCzyjxfd96OTGO+cyvSJ1Y6xbT3Pz+0pHWr9I5aMW60c
vbXtoXfhNfB3vb2+EbpKkV5txQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXKZtCB
nZOUQ0VlLDEg+b2iXpTaMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG
MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv
aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn+wuiLaESmqBXX2GRftCFVVtx0kjYKJpOGRawz++aQ0LZrn85e+zAswgQVxf
hWagzjxufi+48dttjBvMCInxipluITDZctkw9EcNF//HC/FoGJX7c4KIozUPt+0G
CCASsjlvBH+GyjK4+i80/AxLBDs6ArYKcMNAamsJ1QaitBK7f0frYqMtuUW5Fs2B
pXMMqhJ5LbHHMFi+Gz+OjfsXbxwRXoOxQg+uzYn3W0uOVG1W43FdJacM2sOvFR9N
6s88jznp5RzTdayuMoah3PdbR7v5DCRSeslnFeR1nEDJ2x1DhHlb5hgzV6m29wUa
I6DUar6q81i6W/+SSyaDWx8RdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:46 2026 by rpki-client