Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File:                     PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier:          gtgfmBnJtcl9qCBSa3hk2jp31EVgl03yNP18uqJNof0=
Subject key identifier:   CE:D1:5A:78:96:A0:CE:88:74:EB:9E:B2:25:0F:93:D3:9E:39:A0:49
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer:       /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial:       13EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number:          13DF
Signing time:             Tue 24 Mar 2026 16:50:07 +0000
Manifest this update:     Tue 24 Mar 2026 16:50:06 +0000
Manifest next update:     Tue 31 Mar 2026 16:50:06 +0000
Files and hashes:         1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: zNMmEEM7ewG4Koyq2kEb2Rq0AEzJ587unh1o/oTuQOA=)
                          2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: e/sxyJRteUlZkrdIehzRHhMrqCqj1svkbZ25KtJI2TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5099 (0x13eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
        Validity
            Not Before: Mar 24 16:50:06 2026 GMT
            Not After : Mar 31 16:50:06 2026 GMT
        Subject: CN=69c2c0bf-a9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:f2:3d:02:b3:0b:f8:79:08:f0:0a:28:73:
                    7a:69:72:6b:22:9b:35:6d:a6:c9:e6:ae:47:f4:55:
                    1a:e3:c5:27:a6:94:46:04:54:76:c8:06:90:07:af:
                    f3:90:a7:53:53:af:32:c2:7a:1f:60:4e:2f:2e:24:
                    27:66:12:d5:e4:cc:35:7d:ef:5b:6f:e1:ff:c0:c8:
                    b9:79:e0:0c:3d:c3:e8:b1:9b:bc:35:7f:b2:a9:1c:
                    1a:7d:1b:9d:83:43:9d:41:0a:f7:c1:d5:d3:bc:c5:
                    e9:33:6f:4c:83:a1:8f:9d:d6:f3:4e:a3:36:73:9e:
                    c6:8a:07:52:63:6c:a3:19:f4:63:6d:1d:60:94:be:
                    f5:90:76:ee:b0:6b:3f:6a:69:a0:22:4b:eb:8d:bf:
                    2d:ec:8f:7a:31:4e:70:17:59:fb:ae:d2:d5:7e:24:
                    3e:66:5e:e6:cb:dc:88:ae:7f:a5:c3:46:c7:b1:37:
                    ad:93:16:03:f2:eb:0d:e8:6d:1a:63:89:1f:98:77:
                    41:9c:bb:0d:f1:2d:c7:ba:33:82:0a:77:d2:c4:fd:
                    5b:ae:c5:d3:26:1b:80:04:2c:ac:68:9f:72:2e:37:
                    c8:75:c2:59:85:5a:7e:fd:b8:b8:44:e7:28:0f:8b:
                    87:b1:33:16:9c:45:9b:04:e5:b7:0f:01:90:71:8d:
                    4c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:5A:78:96:A0:CE:88:74:EB:9E:B2:25:0F:93:D3:9E:39:A0:49
            X509v3 Authority Key Identifier:
                keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:24:a4:f6:74:0d:4c:83:16:d8:9a:1a:cf:1d:72:c0:27:d5:
         1d:ab:d9:9f:ae:2e:0c:fe:c4:13:1b:4f:a4:bb:3e:b1:35:83:
         bf:a1:39:22:e4:a2:74:9b:28:29:bb:f3:f3:00:33:01:1a:c4:
         d5:23:04:18:84:f5:71:24:6d:81:3e:73:66:8d:84:69:06:fc:
         1b:3a:1e:31:f9:2b:68:8d:21:cd:78:1a:a9:db:ac:d5:7c:eb:
         5f:94:ee:5b:47:75:60:89:04:41:1e:55:f4:b7:09:80:31:66:
         44:c1:3f:c3:4d:3a:1c:b9:35:2b:a9:46:6d:9f:ef:29:f7:db:
         00:98:95:65:e0:0d:d3:be:e7:6f:95:36:52:f9:57:bf:2e:fb:
         cb:cb:e5:02:c7:9e:5f:5f:66:09:f4:5f:f5:b1:a3:63:4c:01:
         1d:61:02:3c:af:0b:32:49:33:58:61:85:28:d2:f2:72:6c:1e:
         83:ac:e1:a3:40:91:bd:1a:43:73:90:1e:e0:de:45:54:c2:d0:
         a6:b8:d1:33:5b:fa:56:4d:0c:01:ab:69:82:63:63:6d:99:be:
         33:90:4c:64:a8:08:fd:e7:eb:d6:d0:f3:30:b9:84:f6:32:d2:
         62:d6:9c:d9:54:e6:40:f0:3f:83:7a:78:4a:b4:2a:e7:13:a9:
         51:c6:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:32 2026 by rpki-client