Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File:                     PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier:          JulQKxBzYG4eV7mcYh6GwHZM5+oukXtwpc4Xq0Si2so=
Subject key identifier:   56:03:FE:7D:39:1D:CC:27:82:D5:D1:03:16:75:C9:38:C3:2C:BD:18
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer:       /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial:       0B5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number:          0B53
Signing time:             Tue 24 Mar 2026 19:01:33 +0000
Manifest this update:     Tue 24 Mar 2026 19:01:32 +0000
Manifest next update:     Tue 31 Mar 2026 19:01:32 +0000
Files and hashes:         1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: mZho1cCJ0/NashhU+7qg+7bugpQw6iryKCKPmV9RZ/Y=)
                          2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
                          rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
        Validity
            Not Before: Mar 24 19:01:32 2026 GMT
            Not After : Mar 31 19:01:32 2026 GMT
        Subject: CN=69c2df8c-6f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:42:d7:d4:c1:16:a0:bb:f8:58:17:c8:8d:
                    5c:d9:9d:c8:5b:be:e6:53:b5:80:75:48:b9:2e:4c:
                    d1:55:e3:1b:d9:ed:0b:55:86:17:0f:cd:7b:ea:89:
                    95:e7:e4:88:dd:54:e7:81:fb:5b:f5:bc:d4:d1:e9:
                    dd:26:b8:db:a8:31:d3:01:76:96:7a:f6:f5:4c:75:
                    ec:09:35:ac:d9:8a:21:44:81:36:37:0a:bd:ee:a0:
                    70:a1:d0:5a:63:ca:95:93:0b:b6:7c:57:6f:c3:f1:
                    b8:8e:85:52:ec:78:fb:d9:9b:74:de:e4:50:3f:fa:
                    e9:6a:67:f0:12:be:86:f5:e3:c1:ca:e5:e4:ce:10:
                    41:0f:16:8c:f0:2a:da:75:36:3c:27:f6:7b:bf:66:
                    77:76:62:93:7a:eb:c6:c5:2e:70:8e:dc:c2:e6:49:
                    59:7b:08:27:e6:4a:66:cc:cd:4f:69:2e:3e:f3:fb:
                    04:16:e9:88:1a:80:85:87:ed:f2:0c:a2:13:eb:eb:
                    fa:8b:85:eb:0e:db:15:27:69:ff:1a:01:01:19:c8:
                    47:b2:6e:cf:10:2c:d8:f1:1f:20:27:1c:9e:21:13:
                    02:ed:29:08:dd:d5:8e:6e:18:d2:42:6f:f2:ca:bb:
                    78:a5:0d:74:45:f9:a4:79:75:5c:a0:f1:3a:a3:be:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:FE:7D:39:1D:CC:27:82:D5:D1:03:16:75:C9:38:C3:2C:BD:18
            X509v3 Authority Key Identifier:
                keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:60:6d:f1:d0:e6:41:fd:d2:ee:ee:4b:49:b3:f2:ad:c6:9f:
         a6:4d:88:d1:b0:ec:b8:48:e6:cf:a4:c2:cd:b6:20:bd:3f:c3:
         d5:cf:8e:0e:de:38:c7:80:e9:01:ab:cb:02:ef:94:4e:e1:3a:
         78:b0:e2:e6:0a:fe:f0:23:ca:42:b0:c7:15:51:ae:b0:47:05:
         27:31:82:68:73:ba:6b:c0:73:65:0c:01:48:79:02:fd:b0:09:
         51:0f:26:a1:d3:30:4a:35:d7:67:16:a9:f4:bb:da:79:41:37:
         40:b3:42:06:03:02:93:54:de:e7:8d:62:6a:ae:11:11:13:b3:
         a1:ce:b1:7a:d1:44:58:b9:9e:b9:50:30:37:77:c4:78:03:fb:
         59:9d:41:6b:ca:d3:5c:80:b2:11:e1:c2:fd:0b:f3:fd:97:15:
         a7:d0:33:74:33:fc:7d:eb:d7:c6:0c:2e:33:3f:3a:84:13:95:
         6b:56:75:02:ce:ac:4c:42:97:56:fd:25:8e:a1:e1:96:30:0c:
         b6:9c:38:06:6b:4e:2f:96:47:de:8f:a3:37:c7:7a:5d:83:9a:
         0d:98:19:9d:3d:01:87:69:26:f0:e6:0e:40:2e:9d:0f:ac:21:
         1d:b1:86:06:0c:58:09:ad:7e:03:7d:06:80:5a:44:8e:42:39:
         ad:19:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:34 2026 by rpki-client