Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File:                     PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier:          gl04VFk0GmpQ2Ph9Ll/z3Spd5dMs3V9EUOXrrMR1ygo=
Subject key identifier:   EA:22:BD:14:70:AF:4F:75:D8:A9:25:68:9C:EE:A2:86:FB:5F:09:3E
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer:       /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number:          0203
Signing time:             Wed 13 May 2026 03:15:26 +0000
Manifest this update:     Wed 13 May 2026 03:15:26 +0000
Manifest next update:     Wed 20 May 2026 03:15:26 +0000
Files and hashes:         1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: u8SttGdHL6n8gHoSzh97arZNcMMIzylxlHW3LbZCs3I=)
                          2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: G97KXaER8oHFpVxJ9Nr+pWkbaSoOX+AJP+0tU8j2jBg=)
                          3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lY4zHcYM+OKzlDFbmIejzsChBG9D4T2+3+SOYmgyPIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
                          rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
        Validity
            Not Before: May 13 03:15:26 2026 GMT
            Not After : May 20 03:15:26 2026 GMT
        Subject: CN=6a03ecce-a8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:f4:98:73:6a:40:53:6d:1f:74:a8:56:2d:
                    1f:2c:22:21:49:dc:38:d6:68:c9:23:92:f1:9d:a4:
                    3f:39:49:5d:dd:59:e4:31:59:a0:46:f0:80:ab:af:
                    64:65:1e:c0:22:9b:7b:fa:f6:10:d9:ef:d5:3a:01:
                    7e:eb:19:80:4e:d1:00:9c:85:8a:fc:ff:a6:1a:6e:
                    7c:26:d8:2e:90:e5:79:7a:04:b8:6d:82:7e:48:19:
                    70:70:15:61:58:14:6f:ef:a4:ce:66:24:f7:9c:91:
                    aa:4d:53:23:80:53:9a:ec:25:9b:1e:5b:89:18:c3:
                    71:3e:43:5e:56:e0:f3:cb:97:15:28:b6:bd:95:d7:
                    4f:06:75:1b:d9:33:84:f1:12:f9:8e:bd:0f:aa:9f:
                    37:9c:b6:82:ae:d6:ab:d8:65:80:d1:ad:8a:19:34:
                    47:cd:4c:eb:a1:6e:51:2d:a3:cb:3d:2b:25:1e:b0:
                    c8:83:27:4a:cf:7a:8d:8c:2c:fc:e7:c8:64:31:66:
                    0d:a5:86:f4:51:08:ce:ff:59:58:53:14:f0:4e:56:
                    66:55:56:bb:f2:44:50:7a:bc:e5:49:c6:86:36:f0:
                    27:a1:ae:d5:06:ba:9b:3a:ff:34:71:b6:a4:30:69:
                    ff:53:d7:2b:60:1e:ca:3c:bc:5c:f9:0b:0b:ea:24:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:BD:14:70:AF:4F:75:D8:A9:25:68:9C:EE:A2:86:FB:5F:09:3E
            X509v3 Authority Key Identifier:
                keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d6:20:a0:4c:b2:e5:26:5b:73:cf:c0:4c:5a:b5:9c:ba:3b:
         86:8c:4a:ba:20:2c:9a:61:67:1e:60:a6:4c:8f:d1:67:bc:54:
         cf:ca:d1:f6:9c:49:53:e8:d6:df:2a:f7:1b:99:8e:f9:10:0b:
         7b:d0:32:84:f5:97:7c:8b:12:c9:e2:10:3f:9b:63:40:38:ad:
         c8:6c:c1:69:23:b2:49:60:40:21:08:1f:7b:27:3c:ce:a2:ff:
         1d:ed:6e:68:4e:07:4f:2d:a5:86:6e:9b:81:b6:39:f4:b4:bd:
         af:4d:c1:20:78:aa:ae:d1:a1:6e:ec:52:12:b5:a6:6c:7a:23:
         cf:8a:f2:0d:9f:a9:bf:f9:8f:63:0a:06:d7:80:1e:b6:55:46:
         5d:19:82:1f:8b:db:3a:ea:aa:6c:08:c8:05:a1:4c:17:82:c4:
         f1:e2:78:df:2d:86:a7:68:36:94:99:74:35:fa:c0:f3:de:20:
         aa:f5:4f:84:43:18:8f:43:0a:f1:3c:2a:9d:3f:1a:8f:23:fb:
         4c:d1:34:c2:af:2d:89:4a:4e:51:48:9c:bb:df:36:e1:79:09:
         d6:1f:af:62:0b:1a:ad:de:d6:8d:7f:fe:4e:bb:ba:b2:72:fd:
         65:30:a9:5f:d7:3b:c5:c6:41:9b:19:6d:e8:b4:36:c4:a6:0c:
         38:fe:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:38 2026 by rpki-client