Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
File:                     PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json)
Hash identifier:          KPNol38MOihtNewLQqDLRqnNDv5wZfg5vDrlC3C2lyo=
Subject key identifier:   4E:89:13:2C:31:A5:B7:21:B1:94:E0:1E:98:36:8D:D4:B4:04:B5:26
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Certificate issuer:       /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
Manifest number:          AC
Signing time:             Wed 25 Mar 2026 06:25:38 +0000
Manifest this update:     Wed 25 Mar 2026 06:25:38 +0000
Manifest next update:     Wed 01 Apr 2026 06:25:38 +0000
Files and hashes:         1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: HAd0Nbo572Q/jqUGJNIT+xBZrqg91/ThVqIQ9sCLDPw=)
                          2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: 87D6nuf5v49Tli4xwHZuhqMSGj+/KqzNB34sSWREAF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
                          rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
        Validity
            Not Before: Mar 25 06:25:38 2026 GMT
            Not After : Apr  1 06:25:38 2026 GMT
        Subject: CN=69c37fe2-6c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:f8:dc:09:2a:44:9c:73:08:67:5e:b5:4f:
                    f4:94:b7:da:0c:5e:d2:bb:0f:32:f1:38:9a:8e:44:
                    52:ff:de:b9:f3:e9:29:d4:3e:fe:33:be:34:82:bb:
                    33:77:75:82:02:37:18:ed:14:ed:a8:9b:bb:2e:5f:
                    5d:96:36:e0:c6:3b:c2:cf:e8:a5:81:d3:d0:cf:75:
                    5e:79:e0:b1:7e:21:35:ff:00:68:29:fa:04:91:85:
                    7c:69:15:8e:a3:a4:ad:b0:ef:cd:08:87:9c:47:c6:
                    d1:34:59:ab:86:90:23:21:aa:7d:61:e8:31:10:58:
                    fb:60:66:63:46:b2:87:f2:bc:18:e0:31:1a:64:a6:
                    ec:b0:7a:43:82:87:eb:7a:31:4c:97:ef:17:f5:29:
                    8a:3e:06:98:2a:f9:74:22:03:d1:c0:45:fa:df:79:
                    b9:a6:63:05:04:5f:f9:f1:8f:b5:6f:34:a8:f6:47:
                    02:a4:db:6f:c0:50:dc:6a:81:08:c0:8d:5c:44:02:
                    d9:57:a2:64:13:b5:4e:81:0b:41:5c:05:93:d0:b6:
                    d8:03:3e:2c:0b:61:09:49:c5:93:b5:e1:94:65:d8:
                    bd:4f:63:43:9b:6a:47:9e:46:16:c9:15:bd:10:c7:
                    48:65:6f:6d:3c:a0:02:d0:b7:29:cd:ba:f7:ee:a6:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:13:2C:31:A5:B7:21:B1:94:E0:1E:98:36:8D:D4:B4:04:B5:26
            X509v3 Authority Key Identifier:
                keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:98:f5:a9:02:b3:09:3d:b3:8e:52:6e:07:b7:e8:56:71:
         b2:c3:68:6d:cb:b9:bf:57:d8:11:7f:99:eb:86:93:e1:72:b3:
         e0:9f:1a:96:39:59:55:30:15:ef:2a:48:f9:2c:9b:27:fd:39:
         a0:6d:b6:b8:9a:c5:28:77:70:11:60:e9:29:f5:6a:60:58:5c:
         d7:fd:63:60:f8:88:f6:f4:26:76:05:2e:3b:3a:9f:60:ce:49:
         9c:bb:90:99:a2:21:fd:8f:7d:15:90:b4:6a:e1:c9:5e:49:18:
         81:43:42:a0:1d:ec:d0:b2:c7:f2:85:bf:b5:4b:36:10:f9:cc:
         e6:78:27:25:70:b7:67:81:72:8e:83:cc:66:72:51:cb:bf:c3:
         2c:66:3c:60:d6:77:bd:c7:38:56:89:1f:b6:39:3b:58:82:c2:
         11:a1:8c:68:d9:c4:9c:42:20:be:ec:2f:c5:d8:50:91:fe:c0:
         26:e8:02:1d:c5:b0:3c:d5:66:12:7f:17:18:bf:f2:76:3f:ad:
         98:0f:2f:eb:7f:c6:9b:76:cd:51:27:bb:2a:ae:49:55:fd:93:
         fa:d2:17:f0:8a:dc:e1:9e:1c:4e:42:d7:32:de:04:86:61:22:
         e7:ce:4d:94:52:a4:03:ce:1c:86:d7:3a:4e:98:d8:67:91:ae:
         56:30:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:46 2026 by rpki-client