Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          hk+aERYwbI1SQQKJfLpQhbAiAwcSDKkxE5ej2hF2mOg=
Subject key identifier:   75:C8:EB:D7:88:D7:4B:5E:14:53:90:84:99:1C:B7:F0:F0:49:65:BE
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       06FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          06EC
Signing time:             Tue 24 Mar 2026 21:52:15 +0000
Manifest this update:     Tue 24 Mar 2026 21:52:14 +0000
Manifest next update:     Tue 31 Mar 2026 21:52:14 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: O77KkfV5BoqwcBoi5BHuL8iK764jEmtFTGVwg48sOmg=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: Lifzj9tbD2A196PkebyEAFBgjuplwdZQ8VmvKwqYLdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
        Validity
            Not Before: Mar 24 21:52:14 2026 GMT
            Not After : Mar 31 21:52:14 2026 GMT
        Subject: CN=69c3078e-7113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:bc:6e:0f:1a:6c:52:6f:00:50:95:32:c4:
                    10:c6:df:dd:eb:fe:0f:b3:5e:43:59:66:b4:7e:ba:
                    02:c9:1b:ae:8c:80:dd:d8:97:79:0a:ae:83:a6:3d:
                    7a:4c:16:71:51:1f:39:63:7f:76:52:e9:34:2c:ef:
                    54:05:17:e3:ff:75:5b:84:28:18:e2:30:76:be:34:
                    2a:72:61:b1:88:f3:a3:c8:50:a8:e2:f1:96:df:d4:
                    0b:6f:cc:a7:84:e7:6c:91:68:01:b8:3a:8b:44:5d:
                    d1:f9:ff:55:3b:d7:f1:02:72:c4:31:6e:aa:be:62:
                    27:f0:e5:54:1f:2b:9c:0e:50:cb:2a:11:8c:83:f9:
                    c7:e3:70:26:d9:22:4b:2b:b8:40:16:40:5f:9b:8f:
                    5a:1c:81:9d:d1:34:dd:60:3e:0d:51:3b:3d:5b:58:
                    3e:d3:89:05:f0:59:e1:6c:ea:a6:32:6a:08:53:1a:
                    70:c7:b8:b8:c8:ac:07:5d:d3:fe:2c:20:30:27:f9:
                    ab:9b:fe:1a:5c:c8:b0:8b:4a:8e:9e:2b:2b:6b:26:
                    a9:49:2a:25:8e:ac:84:b4:76:44:68:f6:02:82:7a:
                    fa:83:bf:22:c4:1a:9a:98:2f:28:5d:b6:d8:15:7e:
                    4f:d4:b6:7e:06:9e:e5:1d:a5:8f:f2:83:70:a4:51:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:EB:D7:88:D7:4B:5E:14:53:90:84:99:1C:B7:F0:F0:49:65:BE
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:bd:22:60:0e:ee:25:19:ec:cf:1c:71:f8:2e:1f:5e:25:
         cf:d0:fd:3c:ef:a8:14:6d:83:0e:2a:ef:79:e4:30:d1:2d:ac:
         bf:2f:eb:5e:df:66:f8:59:a8:7a:2a:cd:eb:5d:f1:f6:5f:3b:
         bc:6f:78:16:a7:b1:0e:cd:e3:b6:a0:34:45:4a:22:b7:89:6f:
         37:f5:40:e8:dd:40:2c:85:12:3b:7c:c0:48:b4:77:44:02:78:
         f0:c4:bd:2d:31:84:40:75:d1:45:a1:cd:5c:a6:00:52:d7:c3:
         5b:b4:36:29:4a:ad:48:2b:94:f9:35:0d:bd:16:77:c8:17:53:
         c8:ce:e2:ec:5f:7d:c8:4b:8c:41:74:ae:f2:9b:c1:2e:f8:c0:
         bc:8c:63:a4:d6:9a:3b:bf:06:d2:41:4f:bc:b7:87:71:09:44:
         b6:00:71:95:b5:d0:e1:c0:58:98:9b:c0:96:fa:89:97:fc:37:
         c3:b8:a7:05:af:7d:dc:61:58:cd:08:dc:b8:72:6a:a6:7b:a7:
         88:99:f6:d4:f4:33:6a:5f:21:de:cd:1f:a3:09:06:44:ea:2c:
         db:9c:b8:81:a9:5a:17:df:27:97:0c:4a:de:c6:58:61:2f:ea:
         8c:0d:c6:2c:af:57:70:45:32:fd:d5:00:c6:b6:4e:ee:87:e0:
         1c:de:a6:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC
RjRDQjJFNkUwHhcNMjYwMzI0MjE1MjE0WhcNMjYwMzMxMjE1MjE0WjAYMRYwFAYD
VQQDEw02OWMzMDc4ZS03MTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnOG8bg8abFJvAFCVMsQQxt/d6/4Ps15DWWa0froCyRuujIDd2Jd5Cq6Dpj16
TBZxUR85Y392Uuk0LO9UBRfj/3VbhCgY4jB2vjQqcmGxiPOjyFCo4vGW39QLb8yn
hOdskWgBuDqLRF3R+f9VO9fxAnLEMW6qvmIn8OVUHyucDlDLKhGMg/nH43Am2SJL
K7hAFkBfm49aHIGd0TTdYD4NUTs9W1g+04kF8FnhbOqmMmoIUxpwx7i4yKwHXdP+
LCAwJ/mrm/4aXMiwi0qOnisrayapSSoljqyEtHZEaPYCgnr6g78ixBqamC8oXbbY
FX5P1LZ+Bp7lHaWP8oNwpFHPfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXI69eI
10teFFOQhJkct/DwSWW+MB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE
NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkJCQS9CREZFQ0RDMjhENzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWho
MEtlMW5HMGJzcVdfVExMbTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASLe9ImAO7iUZ7M8ccfguH14lz9D9PO+oFG2DDirveeQw0S2svy/rXt9m+Fmo
eirN613x9l87vG94FqexDs3jtqA0RUoit4lvN/VA6N1ALIUSO3zASLR3RAJ48MS9
LTGEQHXRRaHNXKYAUtfDW7Q2KUqtSCuU+TUNvRZ3yBdTyM7i7F99yEuMQXSu8pvB
LvjAvIxjpNaaO78G0kFPvLeHcQlEtgBxlbXQ4cBYmJvAlvqJl/w3w7inBa993GFY
zQjcuHJqpnuniJn21PQzal8h3s0fowkGROos25y4galaF98nlwxK3sZYYS/qjA3G
LK9XcEUy/dUAxrZO7ofgHN6m/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:40 2026 by rpki-client