Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
File:                     PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft (raw, json)
Hash identifier:          BfDZxtEs7T3Ji6IjT1gClQlumwJzzILfqQAiGSGmxtA=
Subject key identifier:   5B:5D:A3:8E:6B:A4:5F:B4:B8:DF:05:E2:F7:BF:9B:29:26:1E:27:C1
Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5
Certificate issuer:       /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
Manifest number:          0241
Signing time:             Mon 02 Mar 2026 01:31:28 +0000
Manifest this update:     Mon 02 Mar 2026 01:31:26 +0000
Manifest next update:     Mon 09 Mar 2026 01:31:26 +0000
Files and hashes:         1: PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl (hash: 9D8RbspfqswvndXsReRBWfawrjC9J3idbcMYTIL1yTE=)
                          2: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (hash: jtFTS9OP/+u/oNYJ/JAlDkEQWUYXsmjAi8mzzAzLUmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl
                          rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5
        Validity
            Not Before: Mar  2 01:31:26 2026 GMT
            Not After : Mar  9 01:31:26 2026 GMT
        Subject: CN=69a4e870-e475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:8a:54:d7:6e:db:21:65:e5:32:32:e6:64:
                    41:e9:eb:4e:b2:eb:20:d5:6a:02:84:92:e5:b6:82:
                    6d:dc:5e:b9:a2:35:f4:92:4a:07:60:03:86:49:8e:
                    72:e7:55:b8:cd:8a:7c:ae:65:90:77:fc:86:c4:1b:
                    fa:16:3d:e0:d0:40:25:2e:98:bb:8f:64:d8:4b:c6:
                    21:65:04:58:24:54:6d:cb:5f:af:20:d1:59:73:1d:
                    c9:50:e2:d6:ec:c6:3c:b4:91:ca:53:31:f1:0d:44:
                    ac:70:44:3f:de:53:d8:9a:0d:f0:e2:a5:67:b5:68:
                    76:68:a5:da:01:23:a8:03:58:99:36:24:07:07:01:
                    5f:40:1d:46:b6:93:d2:64:0f:9c:f6:cf:13:5b:6e:
                    55:e7:c0:24:5f:5b:d8:e9:52:5d:f3:0c:8a:c4:00:
                    d5:d4:99:c2:cc:7f:62:75:ee:b4:e9:c2:00:f5:60:
                    64:be:d3:08:22:06:ca:20:a8:f4:b8:91:62:cf:ec:
                    5c:be:ea:42:be:89:2e:f5:af:13:91:6f:1c:47:09:
                    38:f3:d3:78:ca:df:da:5e:6b:b7:72:25:a3:19:ac:
                    a1:36:0a:13:34:73:79:f8:aa:ff:95:c0:a2:53:54:
                    ec:3c:34:9e:6d:de:83:77:b3:0f:72:63:c0:80:47:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:A3:8E:6B:A4:5F:B4:B8:DF:05:E2:F7:BF:9B:29:26:1E:27:C1
            X509v3 Authority Key Identifier:
                keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:37:32:44:8c:18:1b:cb:fd:15:15:60:7e:39:2e:09:b2:97:
         37:ad:88:4b:ec:2f:b6:a0:56:65:2c:a5:d5:c8:06:ec:90:71:
         4e:ab:32:cd:32:78:ef:16:8b:f2:5a:c3:62:0b:0d:0c:43:c3:
         cc:38:8d:15:0a:7f:7c:39:e7:af:8a:5b:6c:68:c4:54:d2:89:
         83:ea:8d:9e:5a:af:b7:f1:1d:28:49:36:87:50:b2:80:55:c2:
         33:db:71:63:ea:97:06:08:04:04:0d:68:85:c0:03:a8:0f:8b:
         89:e0:89:cf:10:a8:b9:70:28:d6:c3:ed:c9:83:c2:6e:fe:ee:
         ae:79:6d:2f:d1:c1:b3:b6:f8:55:70:76:7e:c4:41:18:6c:d1:
         76:4b:38:e2:f0:15:9d:3b:ec:78:9c:cf:cd:64:dd:33:31:08:
         13:45:f2:13:2d:1e:00:0a:3e:73:af:e3:c5:80:79:75:c6:da:
         55:81:04:1d:36:d1:e4:55:6b:09:39:9a:6e:ba:80:2c:6c:21:
         98:e5:1c:37:ff:bb:6a:ad:b3:a5:2f:c7:14:92:e1:4b:85:aa:
         50:af:6d:b8:3a:f1:d9:70:ac:90:c0:d3:e2:4a:bc:86:78:4d:
         2d:2f:f1:76:eb:fb:8f:f2:ab:1a:04:22:3b:9a:34:7b:ab:a6:
         36:8f:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:35 2026 by rpki-client