Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
File:                     Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json)
Hash identifier:          t4JF1nhNZestvArR48GSqOUtaqZ88gjJxDfr9xHurDo=
Subject key identifier:   EF:0C:A5:77:14:06:87:B2:C3:82:63:DE:8F:0A:42:C3:D1:39:4C:75
Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
Certificate issuer:       /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Certificate serial:       0436
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
Manifest number:          042F
Signing time:             Fri 27 Mar 2026 00:05:37 +0000
Manifest this update:     Fri 27 Mar 2026 00:05:37 +0000
Manifest next update:     Fri 03 Apr 2026 00:05:37 +0000
Files and hashes:         1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: dfaq9t6THTOG17eGYczJnN12RwVxWFuE04+JaSvPD3Q=)
                          2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: crOzhXkSx5L+vjk+uogxATh7I9S04wmUq19GJ5qDpWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078 (0x436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
        Validity
            Not Before: Mar 27 00:05:37 2026 GMT
            Not After : Apr  3 00:05:37 2026 GMT
        Subject: CN=69c5c9d1-aaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:71:db:44:3f:39:ee:fe:d9:71:ec:64:dc:
                    88:aa:c5:de:43:42:19:c4:11:47:ce:39:80:2b:42:
                    cc:72:13:29:64:62:1f:3c:cf:ac:00:6d:dd:de:f4:
                    49:5f:ce:7b:cd:7a:2b:d6:e3:8d:ba:89:5f:53:bb:
                    d8:51:6f:d0:81:85:8e:4b:89:2d:68:22:29:ad:d2:
                    d7:d0:3b:fe:2b:86:72:1c:12:9f:62:ad:25:9a:e9:
                    8c:58:c1:fb:4c:bb:61:1d:b3:ea:99:19:ca:64:45:
                    00:6d:72:af:b9:f8:df:87:25:56:d7:ce:dd:ed:94:
                    f3:b3:c3:8d:eb:d7:e2:e9:7a:94:51:ae:d0:10:97:
                    c2:83:69:f0:93:34:c5:6b:03:e8:b4:6c:39:38:7f:
                    ff:f2:0f:b5:70:16:92:61:3e:cb:32:57:fa:a8:a3:
                    af:01:53:44:e6:90:8f:ff:2c:07:2d:12:92:b1:62:
                    ff:1a:79:fa:ae:68:e6:26:3c:6e:aa:09:8b:83:3f:
                    ff:5f:a1:07:97:ec:f0:6e:38:1d:8d:78:34:33:d7:
                    a1:ad:0f:3b:dc:5d:3b:f9:3b:94:6f:3f:74:fe:bb:
                    4d:08:c6:5f:4c:65:0f:43:81:be:3c:5d:b1:71:28:
                    a7:89:be:10:42:11:c8:22:7e:db:6c:de:c9:10:4d:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0C:A5:77:14:06:87:B2:C3:82:63:DE:8F:0A:42:C3:D1:39:4C:75
            X509v3 Authority Key Identifier:
                keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:6b:89:4a:8b:a1:fd:d9:16:f1:76:04:bc:31:8a:e9:10:
         7d:cb:5e:36:58:19:cf:d1:82:47:f5:11:d7:98:55:9e:a0:0e:
         77:37:5c:09:37:c8:ce:03:13:00:46:5f:34:e9:07:e4:0c:32:
         72:da:03:cb:ce:60:d7:0f:b0:24:a4:d3:57:db:68:f6:2b:f7:
         2b:fd:f7:24:37:37:26:ca:7d:4c:38:98:b2:91:c9:6d:ec:a8:
         4c:7d:4c:29:e8:01:bd:e9:ab:98:fa:c8:0d:96:ee:85:62:37:
         33:6d:cc:b5:ca:14:a2:22:e6:ea:a5:49:8b:4c:85:37:4e:df:
         23:2a:76:db:51:9b:c7:27:14:b6:74:b6:64:9e:8b:75:2e:0b:
         9b:4c:eb:45:eb:b7:d6:d2:b7:ee:ef:e9:c8:e0:cf:1b:5f:a6:
         ce:fa:54:4e:cc:2a:f8:26:b9:94:06:c4:ac:21:31:d8:d0:ac:
         76:d2:79:3a:80:3d:19:65:c0:0f:81:4d:b9:0b:ca:56:2d:a2:
         9e:2d:ea:b6:c9:db:35:19:f8:df:b3:3d:c6:19:f0:0f:30:00:
         58:89:15:05:f5:3d:04:1e:7b:a5:92:6a:3e:f7:90:d9:0d:99:
         6d:03:0f:52:a4:3d:ce:d8:fa:84:17:23:b7:fa:eb:87:d8:20:
         46:14:30:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:19 2026 by rpki-client