Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          LvpjBcNqpRy/6XZsp6kggS21McOXu23qUsLSh0E2+AM=
Subject key identifier:   3F:E9:3F:5E:B9:7E:AC:37:8F:68:FC:9C:34:14:DB:A0:68:E7:DE:3F
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0D35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0D16
Signing time:             Tue 22 Sep 2026 18:16:28 +0000
Manifest this update:     Tue 22 Sep 2026 18:16:28 +0000
Manifest next update:     Tue 29 Sep 2026 18:16:28 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: EXfSmVX52sa8hLk/lP9sfJTkdYqBf9jOjiTiz/zq+Mk=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: HmIlCNViGVQc0Khs8nRBOHgBuzDEV5/tZXqnnM3HNCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: Sep 22 18:16:28 2026 GMT
            Not After : Sep 29 18:16:28 2026 GMT
        Subject: CN=6ab2c5fc-9ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:96:dd:d1:a3:8c:57:bd:c9:df:c4:80:4a:
                    56:55:a3:ee:d7:ce:1c:5c:64:c5:ae:f9:11:d6:f1:
                    a5:6c:b3:81:bc:e9:8c:9a:30:98:f2:fe:97:35:d3:
                    b3:20:f2:4c:cb:33:ff:41:a5:75:b0:fd:a5:3b:66:
                    a1:49:84:2f:89:30:db:7f:ee:43:56:3e:ad:4d:4b:
                    8d:cc:19:80:67:28:bc:2d:bb:c3:d2:1b:eb:f8:02:
                    81:07:6d:8a:1b:e7:07:c1:bc:93:ae:0e:eb:31:34:
                    f1:fe:e7:f2:f8:c6:e9:90:9c:6e:51:52:c6:ea:84:
                    e8:cc:43:07:7e:1f:46:7c:80:9a:86:a7:66:96:42:
                    4f:57:0b:ea:c8:6b:08:11:df:4d:4e:08:10:e4:47:
                    26:ac:d8:f5:35:63:2f:78:de:4c:36:cd:f5:63:20:
                    7e:ac:5d:76:ba:2d:9d:50:ad:f4:23:db:3b:32:99:
                    f9:b4:7a:b3:e8:41:cf:77:33:5f:38:0a:18:b3:9d:
                    86:22:f2:0d:77:b8:37:c9:fc:9f:af:fd:8c:98:b2:
                    18:ed:3c:bf:ad:dd:c0:5a:ba:87:04:fa:88:74:ad:
                    01:a7:5e:eb:ac:b9:85:b0:ef:8f:2a:1b:b4:87:b3:
                    ab:56:34:36:cd:ae:d7:ad:13:b5:86:1e:0f:9e:bc:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E9:3F:5E:B9:7E:AC:37:8F:68:FC:9C:34:14:DB:A0:68:E7:DE:3F
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:73:dd:1a:9b:d3:66:fc:21:02:98:03:09:cf:fc:74:22:56:
         9c:4f:93:0a:46:21:e2:95:d4:0f:f8:db:29:cd:ee:77:c2:62:
         2e:d2:5c:1e:fb:cf:01:ed:06:17:85:3e:0a:db:12:7d:52:36:
         03:d4:ce:06:21:0d:47:7e:2c:40:4f:5f:1c:84:aa:9d:94:f5:
         1a:08:bd:d4:36:ed:2c:18:09:d9:1d:3b:ff:4b:15:bb:63:c8:
         40:cc:4d:87:af:10:81:ff:78:c4:49:ce:b6:a3:0d:95:d2:b5:
         21:60:a3:16:0c:35:53:f2:55:c7:8e:e6:21:ea:74:13:dc:7b:
         ed:a5:88:6b:65:33:07:8c:87:a0:fc:31:c4:1d:a7:b0:7c:9a:
         3f:ff:a0:33:a7:04:41:08:bc:d8:77:10:5b:7d:98:a9:17:28:
         87:ce:5d:ff:c7:43:5e:41:e4:1a:55:bf:55:98:8d:5f:b0:bc:
         10:ef:a8:1c:ca:0f:e7:b1:c7:b0:7c:4c:02:97:9a:bd:ec:85:
         c0:65:67:06:69:5a:c1:ad:5a:a9:ca:23:72:0c:40:1e:6f:9c:
         ea:49:d0:ff:77:35:d4:d9:e8:07:e4:03:f0:89:cb:7b:87:1d:
         d5:8b:3e:48:30:f9:b3:3a:e4:ca:1b:16:43:1a:f0:eb:d8:b3:
         4c:11:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:38 2026 by rpki-client