Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
File:                     pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json)
Hash identifier:          Qa5tJbl8Y9rgV8/MKfT3z7f7ViIf1CItszElCjDM+ik=
Subject key identifier:   F7:3C:B6:FF:6F:3F:73:70:23:69:29:E1:A6:48:8F:0F:18:34:96:95
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Certificate issuer:       /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
Manifest number:          0147
Signing time:             Wed 25 Mar 2026 04:30:06 +0000
Manifest this update:     Wed 25 Mar 2026 04:30:05 +0000
Manifest next update:     Wed 01 Apr 2026 04:30:05 +0000
Files and hashes:         1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: IvyLwuqm2uVpMqC/dtA4ShD1jbnPdJDG89eIGwOb5xo=)
                          2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: HG3oXa5WRW8n13BJ73mfkhHNv2TpvyHSb+awWkOaGA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
        Validity
            Not Before: Mar 25 04:30:05 2026 GMT
            Not After : Apr  1 04:30:05 2026 GMT
        Subject: CN=69c364ce-2285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:83:2c:95:65:fc:02:cd:e7:c9:7a:19:54:
                    72:06:30:bf:53:15:9b:23:f3:3d:55:f1:d0:8e:13:
                    8e:a4:2c:99:cc:c6:88:69:bb:40:2a:ba:83:47:54:
                    ef:40:d9:38:11:91:32:02:76:89:09:12:b3:7f:ec:
                    61:73:c9:fd:48:3d:5a:07:e1:84:31:0f:b8:8e:91:
                    cb:55:c4:7f:e0:38:c8:55:9f:a2:d1:d3:c6:1f:1d:
                    c6:c7:66:08:6b:39:b7:97:8a:4e:75:f8:b7:62:f0:
                    c5:60:8f:5d:33:5a:e9:d1:b8:f0:24:60:00:da:09:
                    62:ac:23:12:76:26:1c:a4:1d:94:d5:e8:c1:08:f1:
                    63:aa:c3:3b:e4:73:d1:d5:f4:b6:d0:d3:db:38:7b:
                    7a:fe:60:a8:62:17:e8:16:31:9b:39:23:aa:0d:1b:
                    d8:a6:e8:07:4f:5c:67:9f:b5:95:bb:4b:cb:86:c0:
                    fb:20:52:57:03:fd:95:f4:b4:fc:a2:09:ab:01:79:
                    ad:b2:f8:17:b6:81:54:8b:6f:73:e4:90:33:03:e5:
                    20:04:e9:de:3a:45:2d:2f:47:a4:00:a5:84:0b:1f:
                    df:c0:b7:14:20:38:a0:5c:bf:fa:ac:ec:bf:71:30:
                    ee:84:53:12:a6:cc:a2:51:3e:f4:e0:9a:1d:ee:46:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:B6:FF:6F:3F:73:70:23:69:29:E1:A6:48:8F:0F:18:34:96:95
            X509v3 Authority Key Identifier:
                keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:36:21:dd:b4:5a:d1:1d:ff:a4:bc:3b:4d:f2:82:d4:30:36:
         57:ba:be:be:5b:fa:2c:b9:4a:c2:40:72:4f:fd:04:79:28:63:
         82:a5:ef:12:75:6e:67:74:b9:64:af:61:74:9d:ff:14:a5:97:
         e7:6c:89:d0:36:30:c4:0a:20:97:fa:52:c5:5d:6a:e8:00:ae:
         85:ed:f1:77:06:3a:2f:8d:c4:a4:4f:6b:ad:bc:67:d1:1e:03:
         fe:76:ed:7f:14:f6:f1:c0:50:f4:3f:b4:b6:ef:47:fd:4e:fc:
         e8:51:20:b9:1b:13:be:97:61:46:ec:ee:3f:62:5d:be:aa:e9:
         e4:d7:8d:e7:d1:b0:e9:91:a0:f0:b3:1e:10:b1:26:d1:16:8a:
         7d:37:00:b7:df:3e:6f:a5:6a:59:c4:33:08:43:1f:83:9d:a6:
         46:e0:e1:13:d2:97:e7:69:d1:5c:1d:00:9d:b4:d0:06:ec:77:
         06:16:68:fc:1a:22:f8:d4:72:56:c1:93:0b:e1:52:9b:c5:96:
         cb:eb:60:c7:1d:17:ff:0f:f5:cf:5a:a7:ab:f0:44:25:d4:05:
         6a:f6:fb:34:77:08:5c:7b:70:04:69:b4:d1:e6:93:79:00:0f:
         02:bf:9d:ae:ab:44:a0:a2:28:b8:6a:4d:aa:ef:9c:67:38:fe:
         49:41:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:09 2026 by rpki-client