Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File:                     PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier:          aPR4vwIVoQUNYY/opB/Gqp9WbQM9SCz9SjbDWrwsPzQ=
Subject key identifier:   A6:45:49:1B:B5:37:61:A2:35:C9:4D:65:F8:5B:64:E5:AB:C4:54:32
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer:       /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number:          4A
Signing time:             Wed 25 Mar 2026 07:28:33 +0000
Manifest this update:     Wed 25 Mar 2026 07:28:33 +0000
Manifest next update:     Wed 01 Apr 2026 07:28:33 +0000
Files and hashes:         1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: KrXyHDo4sKWg4xJnJN98kcUQKNibCaX8LgLygGr857A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
        Validity
            Not Before: Mar 25 07:28:33 2026 GMT
            Not After : Apr  1 07:28:33 2026 GMT
        Subject: CN=69c38ea1-b025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:6a:dc:84:5e:d3:27:ad:bd:46:f4:d8:c5:
                    6d:50:62:44:d1:c6:42:67:b3:79:8b:d6:5e:dc:1d:
                    96:49:ac:64:5e:1f:ff:3d:37:53:b7:24:a9:3e:61:
                    92:0e:a0:70:99:68:22:34:cf:33:8a:e0:18:36:4c:
                    90:21:34:e2:49:92:3d:3c:d1:f0:f8:ae:9b:e0:bf:
                    af:bc:62:f2:d5:cd:c4:9b:b9:25:7f:c4:a0:fb:2d:
                    e5:b3:a9:11:a4:a8:61:d1:d1:42:b9:aa:24:70:2d:
                    e8:e3:1f:a2:0f:cd:84:b9:c1:9c:46:50:94:45:7e:
                    88:04:26:97:c4:4c:2e:05:78:9c:dd:8d:5a:f7:7b:
                    dd:38:5e:77:6d:bb:d1:e6:04:52:bb:1e:c5:dc:c1:
                    5c:73:c6:2c:6c:df:1b:92:d1:0a:86:21:c7:ab:7e:
                    a2:40:36:7b:f8:a4:3b:02:ef:0f:88:4b:af:30:51:
                    c8:47:f4:f1:f4:c4:5f:d9:58:c0:80:9a:db:d7:f1:
                    86:26:c6:4f:f0:e9:f5:6c:31:aa:a0:cf:f6:22:79:
                    a3:7f:f0:da:c1:8c:7e:6c:84:42:24:39:82:ba:39:
                    31:0a:f7:94:cb:77:65:9f:e3:fe:3f:63:f3:87:f1:
                    c1:f0:a2:a7:eb:8c:0a:53:ab:93:af:db:05:50:69:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:49:1B:B5:37:61:A2:35:C9:4D:65:F8:5B:64:E5:AB:C4:54:32
            X509v3 Authority Key Identifier:
                keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:15:9d:a2:d7:a9:cc:a0:f0:c2:b7:15:bf:7f:33:1f:0e:
         00:13:78:a6:20:a6:b5:1a:78:17:fb:41:c3:80:ce:d0:c4:07:
         b4:5d:d7:10:a5:08:7b:88:a1:d5:31:fd:75:71:ac:86:2b:78:
         e8:c0:03:9b:6b:aa:95:69:da:52:7d:54:7c:25:bb:f9:cf:47:
         e5:2d:f9:26:2c:d5:08:d3:ae:12:9e:23:40:b9:67:ce:00:42:
         dc:61:65:91:46:ae:5c:e4:75:2b:f7:4a:56:3b:1b:3e:66:6b:
         f8:5f:27:47:7b:bf:41:5c:6d:bf:ea:bd:73:47:df:03:14:d3:
         d0:ab:04:36:8e:5c:8f:43:8c:05:22:ea:9a:9a:b8:a4:66:2b:
         f9:b3:75:9c:d4:48:29:c2:90:6b:3a:4c:a5:d5:f5:29:0d:e2:
         ea:c4:d0:2f:90:d6:a1:e4:85:b0:5c:75:5b:03:b0:42:ec:cc:
         34:5c:89:ab:59:2e:84:d5:66:57:6c:1f:4a:e2:11:34:c4:45:
         5a:bc:d7:39:e5:45:2b:45:3a:d2:dd:68:70:ea:4d:43:7d:5e:
         70:6d:4a:7f:4e:cb:34:64:77:59:66:82:cd:7e:0d:3f:d6:78:
         26:f0:cd:9b:6d:f4:f3:73:53:8b:f0:2e:e3:af:5e:1f:23:da:
         e6:02:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:22 2026 by rpki-client