Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File:                     PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier:          ROD0vceANceoIqQySfAqSVL8Z3nl44O7L3dZyeSRAOI=
Subject key identifier:   53:D1:8C:DB:0B:3D:0C:7C:0A:2B:62:E2:F5:B8:6D:21:A9:AE:A1:4D
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number:          05C4
Signing time:             Tue 24 Mar 2026 22:46:32 +0000
Manifest this update:     Tue 24 Mar 2026 22:46:32 +0000
Manifest next update:     Tue 31 Mar 2026 22:46:32 +0000
Files and hashes:         1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: PQAu9NnyeJabwb735ja/hhOCcLRdB973RabjiXx1wvg=)
                          2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: zSiOywbWl0k4o+BoXRQ/u23ZyXMyZjEaX4/Qt8amiLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: Mar 24 22:46:32 2026 GMT
            Not After : Mar 31 22:46:32 2026 GMT
        Subject: CN=69c31448-6ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:a1:f1:4d:61:31:cb:69:2c:50:a2:74:7b:
                    40:c8:75:a2:d4:c9:69:44:b6:3f:00:09:e3:54:cd:
                    f4:5d:85:84:01:32:19:48:99:69:6e:82:59:01:4b:
                    ec:8c:51:0d:3a:39:ff:9f:7c:6e:87:2c:87:71:71:
                    4c:8f:60:bd:9d:91:aa:01:89:11:69:4a:4f:9f:9f:
                    64:fa:d5:3d:52:d7:4b:9c:35:14:00:c6:63:5f:b4:
                    45:1f:70:08:bd:17:0e:01:53:5e:74:0b:1b:5e:3c:
                    37:7b:3b:d9:c4:1e:3a:ff:8c:b1:c9:2b:4f:5b:03:
                    88:b7:33:48:41:3e:a0:f9:90:06:80:1a:b6:c6:43:
                    66:d8:dd:05:35:b1:b0:df:64:6f:20:09:d4:79:f2:
                    17:b0:21:3a:55:40:b1:1d:8c:36:06:25:6c:8e:e0:
                    88:b5:c5:98:06:12:6a:4b:34:b2:b8:97:9c:5c:3f:
                    a0:a5:fc:4d:19:94:d0:10:7c:fc:8e:c1:8c:d7:d9:
                    a0:f7:f9:9b:43:6e:ae:59:5a:dc:70:05:1c:90:af:
                    06:20:19:36:f8:73:46:9a:92:6a:d2:f7:ed:96:26:
                    70:a5:9d:31:e9:09:c4:12:71:49:77:8b:cd:16:43:
                    4c:34:6a:e6:fa:c0:78:cb:e1:f1:bd:bb:b9:ed:a5:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:8C:DB:0B:3D:0C:7C:0A:2B:62:E2:F5:B8:6D:21:A9:AE:A1:4D
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:66:42:d5:cd:c1:b6:cf:7d:35:9a:3b:02:69:4a:93:fb:
         69:ea:ad:d6:72:2a:e9:cf:2c:dc:6e:3c:2f:a5:7e:00:62:76:
         d7:75:65:ce:83:02:30:6b:33:84:2f:bc:d6:92:41:9d:99:a7:
         bb:f6:9c:df:d0:92:9f:e9:b5:88:52:e4:67:f7:77:ed:9b:0c:
         8e:7e:22:7c:df:f5:a1:f8:30:3c:9f:ea:dd:5e:d0:7e:1d:ff:
         b0:53:65:85:4c:cf:bb:26:90:e2:36:df:61:a5:f6:1c:c7:8d:
         63:19:04:b6:8c:d1:f2:67:fe:fe:bd:1c:55:4d:62:49:a1:b5:
         bc:ec:43:49:32:c7:fd:4b:c3:b3:c7:94:68:63:28:c2:de:f6:
         5c:e0:af:47:8d:28:29:8b:3b:c6:61:41:46:c8:3f:ed:ca:4f:
         30:0e:f2:84:44:90:9b:4b:ab:d5:c2:3b:e5:aa:40:ed:52:d4:
         b0:65:3f:17:28:a1:e9:7b:4b:0a:62:39:2a:c6:ba:cd:42:ca:
         26:b5:b3:18:ac:9b:2f:24:bf:62:59:12:5d:17:82:9d:f8:bc:
         31:34:97:b9:a1:87:82:35:00:0e:91:c1:78:d5:9b:59:77:62:
         e4:ba:cb:bb:2f:c1:2c:11:a4:21:02:bd:48:59:7d:84:1f:37:
         60:0c:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:19 2026 by rpki-client