Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
File:                     PkPgI8CFNZTq13soKJo_HxDDCR0.mft (raw, json)
Hash identifier:          YKcUW5mMj5zzVy3ETb5GTWXO77EnmCt7UYh7/e+6i18=
Subject key identifier:   10:7F:4B:BE:2C:24:50:15:94:A3:70:B6:C0:53:51:6F:C7:86:21:81
Authority key identifier: 3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D
Certificate issuer:       /CN=A9150B47/serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D
Certificate serial:       3511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
Manifest number:          350E
Signing time:             Sat 28 Feb 2026 15:08:32 +0000
Manifest this update:     Sat 28 Feb 2026 15:08:31 +0000
Manifest next update:     Sat 07 Mar 2026 15:08:31 +0000
Files and hashes:         1: PkPgI8CFNZTq13soKJo_HxDDCR0.crl (hash: YmVtgYxoyarLWGYII26AsFXkw1PQ+erWsrYEyK9kSjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13585 (0x3511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B47, serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D
        Validity
            Not Before: Feb 28 15:08:31 2026 GMT
            Not After : Mar  7 15:08:31 2026 GMT
        Subject: CN=69a304f0-85ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:35:a1:18:71:81:d9:ff:71:49:bf:71:68:
                    5a:99:40:3b:b7:6e:57:af:30:24:c6:2e:ca:eb:55:
                    28:c0:84:33:40:e0:f7:bb:dd:d5:15:b2:a3:47:40:
                    7b:03:a6:86:5b:3a:34:49:e5:1b:a6:dc:58:c9:61:
                    b3:cf:15:ba:ff:65:4f:ad:8f:31:44:aa:0f:ba:ca:
                    13:43:1e:8a:c6:b1:6f:c2:42:8d:99:d8:39:d8:03:
                    85:df:0a:a7:fa:cd:43:f4:16:1c:26:bf:87:e2:d5:
                    43:a1:ce:dd:61:45:9f:2c:2e:5e:19:57:08:56:be:
                    88:2a:16:b7:42:a9:64:c8:f2:04:42:2c:4d:31:97:
                    11:a3:8b:51:e1:eb:b3:8e:75:36:c5:4a:4b:08:ec:
                    73:3f:64:f3:95:f5:70:fe:c8:b3:c3:ef:6c:24:e1:
                    ff:02:f1:d9:c2:c6:5c:2e:d4:9d:73:21:fa:02:33:
                    e6:94:32:00:0f:a4:f9:fa:35:4a:20:21:aa:c9:11:
                    f9:87:71:c0:8b:d0:be:eb:14:13:63:ad:ce:80:0a:
                    e3:43:a5:2d:cd:85:15:01:16:9e:a5:98:6e:2e:7e:
                    05:56:54:a0:0f:5e:2e:3c:fa:f8:b1:12:ab:46:05:
                    0a:35:40:be:8b:2e:02:bd:77:2c:2b:5f:51:a2:7a:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7F:4B:BE:2C:24:50:15:94:A3:70:B6:C0:53:51:6F:C7:86:21:81
            X509v3 Authority Key Identifier:
                keyid:3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:f7:3b:68:85:70:b5:f1:0c:04:d5:50:67:9a:a6:50:6e:
         84:4e:10:62:0c:23:b0:ab:dc:06:a7:45:b6:de:25:96:3e:05:
         a2:08:54:49:10:78:cc:d9:30:2d:e2:bc:63:3e:26:52:51:18:
         90:5c:5a:3c:e8:d0:38:ae:77:68:7a:63:89:51:f9:19:b4:5e:
         22:49:b2:af:01:9a:75:3c:ef:53:5d:8f:f0:65:23:c2:c5:db:
         8d:15:78:a9:c7:b6:24:6d:48:a4:86:cb:77:ff:db:24:30:a2:
         02:90:79:84:75:b7:65:9f:eb:85:2e:44:ae:2e:33:d6:c2:e7:
         7b:6f:51:83:58:13:3a:a4:3e:0a:7a:6f:29:0e:cc:4f:28:41:
         0f:f0:10:f2:7d:9d:53:1e:f7:cc:ca:08:e8:a7:b7:d1:62:bf:
         ca:ca:fd:fa:7d:82:df:c6:0f:8b:d2:4e:9e:ae:57:e5:c1:79:
         6e:5c:ba:56:72:a9:55:1b:a2:68:ef:82:55:fc:fb:d9:4e:35:
         d5:c2:b4:2f:ef:d4:e2:9e:a2:5c:2c:12:87:cb:e0:3e:50:3d:
         99:a3:a3:1b:31:18:fd:c0:bb:0e:6d:99:d8:5e:32:14:18:40:
         e6:97:b1:8c:d3:73:f8:f8:f3:dd:b9:c9:ee:de:45:a6:c2:ca:
         75:1e:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:21 2026 by rpki-client