Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File:                     PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier:          ALh+P4eqrTy6B352ZWKyvn93H0mzTGIXf5mZVFCqC2k=
Subject key identifier:   87:76:66:99:8F:F8:ED:8D:80:84:B3:9E:8C:58:C3:34:90:E7:16:0F
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer:       /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial:       1407
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number:          13FA
Signing time:             Tue 12 May 2026 16:56:11 +0000
Manifest this update:     Tue 12 May 2026 16:56:11 +0000
Manifest next update:     Tue 19 May 2026 16:56:11 +0000
Files and hashes:         1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: 5gaCaUvhoDSWxcLPqYllExguH0cUTSUyfZkCZtHILGs=)
                          2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: bvI+3O/21LbUUnC/n4lGe7S/cmDY+HdMZcKJadF3/rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
        Validity
            Not Before: May 12 16:56:11 2026 GMT
            Not After : May 19 16:56:11 2026 GMT
        Subject: CN=6a035bab-0105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:9c:1f:2a:4b:09:da:1b:70:6d:56:e2:81:
                    f7:10:f6:13:b7:f1:79:9a:2f:e7:2c:fe:a0:8d:52:
                    11:b1:23:22:7b:25:05:fa:5c:7f:d0:80:46:1c:5e:
                    24:36:e3:21:60:c5:c2:1d:52:26:bc:d9:8b:99:4a:
                    c9:be:c5:e4:59:b1:72:fb:a9:3c:3f:7f:9a:23:29:
                    83:ab:d5:0f:cc:40:5a:51:21:7c:f0:dd:26:41:bf:
                    f9:90:56:b5:28:5e:22:08:5b:d7:6e:62:40:1b:dd:
                    9f:a6:e1:f3:3a:a4:76:c5:5f:58:57:2c:03:9c:d4:
                    03:7c:24:32:7e:6e:56:ca:db:68:db:c2:a8:f9:09:
                    18:5a:0b:a5:c2:fc:69:7a:6b:87:51:ee:5a:6b:06:
                    34:49:4c:4a:b5:de:49:c9:60:d8:2f:3b:ea:5e:52:
                    2e:ba:59:c4:66:5c:81:3c:1f:90:8b:b4:ee:4f:61:
                    35:89:a1:ad:2a:d8:f8:33:c2:94:8d:11:5b:ee:bf:
                    a6:11:21:76:31:a7:06:d5:0d:d2:f9:2e:f5:ff:c7:
                    e4:84:92:41:39:bb:6e:a3:af:79:5c:22:84:98:fa:
                    20:97:0d:8e:bb:91:71:9f:30:1d:06:45:12:be:d8:
                    8d:f2:af:3b:10:89:cd:0f:c7:e0:4e:be:bb:5e:91:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:76:66:99:8F:F8:ED:8D:80:84:B3:9E:8C:58:C3:34:90:E7:16:0F
            X509v3 Authority Key Identifier:
                keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:f7:7a:cd:cc:6a:37:2e:61:f8:5b:8c:13:15:23:b6:4d:
         97:0d:e7:72:e4:be:63:92:e2:04:c0:78:ad:a3:a3:45:79:6e:
         45:18:db:66:ab:ff:98:27:ad:fa:93:a1:99:15:4b:dc:6e:37:
         7f:46:d2:09:41:06:97:97:df:b3:19:b8:db:d9:00:ac:58:41:
         e9:c4:df:da:03:ab:0e:c5:a5:37:0e:c4:08:68:a7:c8:f6:8a:
         2d:dd:a4:97:0e:df:51:4f:a0:a4:21:7c:34:91:1a:2d:aa:f1:
         1b:18:5c:47:ec:0e:3a:75:14:79:3b:87:2f:80:5a:2b:0d:f3:
         99:53:69:93:f2:16:c3:70:32:d4:95:ae:f3:6c:1e:d5:a6:df:
         41:0d:6b:6a:a7:cb:1a:90:e6:01:b7:78:5a:39:c4:73:eb:37:
         f9:8b:87:df:50:2c:9d:73:e6:0f:98:1a:70:5b:f1:66:7f:06:
         49:4d:8f:68:94:fe:fc:c3:c6:7f:68:4e:42:17:13:e8:fb:ee:
         d0:1d:00:42:96:d7:c4:e4:04:d4:6d:2f:eb:d8:e0:3b:09:20:
         ff:0b:e4:d6:98:c2:30:fc:86:c1:c9:ad:11:24:52:5f:7b:52:
         71:df:78:94:35:09:38:7a:b9:87:c8:7b:07:1c:d1:c8:ab:d6:
         ae:39:20:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4
MkU3RTM3MTQwHhcNMjYwNTEyMTY1NjExWhcNMjYwNTE5MTY1NjExWjAYMRYwFAYD
VQQDEw02YTAzNWJhYi0wMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1UGcHypLCdobcG1W4oH3EPYTt/F5mi/nLP6gjVIRsSMieyUF+lx/0IBGHF4k
NuMhYMXCHVImvNmLmUrJvsXkWbFy+6k8P3+aIymDq9UPzEBaUSF88N0mQb/5kFa1
KF4iCFvXbmJAG92fpuHzOqR2xV9YVywDnNQDfCQyfm5Wytto28Ko+QkYWgulwvxp
emuHUe5aawY0SUxKtd5JyWDYLzvqXlIuulnEZlyBPB+Qi7TuT2E1iaGtKtj4M8KU
jRFb7r+mESF2MacG1Q3S+S71/8fkhJJBObtuo695XCKEmPoglw2Ou5FxnzAdBkUS
vtiN8q87EInND8fgTr67XpFftQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFId2ZpmP
+O2NgISznoxYwzSQ5xYPMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1
QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP
RVRCcWhfSHZKUEtDNS1OeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHA/3es3MajcuYfhbjBMVI7ZNlw3ncuS+Y5LiBMB4raOjRXluRRjbZqv/mCet
+pOhmRVL3G43f0bSCUEGl5ffsxm429kArFhB6cTf2gOrDsWlNw7ECGinyPaKLd2k
lw7fUU+gpCF8NJEaLarxGxhcR+wOOnUUeTuHL4BaKw3zmVNpk/IWw3Ay1JWu82we
1abfQQ1raqfLGpDmAbd4WjnEc+s3+YuH31AsnXPmD5gacFvxZn8GSU2PaJT+/MPG
f2hOQhcT6Pvu0B0AQpbXxOQE1G0v69jgOwkg/wvk1pjCMPyGwcmtESRSX3tScd94
lDUJOHq5h8h7BxzRyKvWrjkgsg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:22:18 2026 by rpki-client