Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File:                     Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier:          616zPty4TsEAxjPEMGRAqiCdz1dXMFGSb2FURPOOMow=
Subject key identifier:   0B:14:91:D0:5E:23:49:A1:46:89:65:F5:E0:B1:4A:F6:33:7F:60:25
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2C93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number:          2C71
Signing time:             Sat 28 Feb 2026 15:32:40 +0000
Manifest this update:     Sat 28 Feb 2026 15:32:39 +0000
Manifest next update:     Sat 07 Mar 2026 15:32:39 +0000
Files and hashes:         1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: 439Nc4c6iLDnBiCcYiHJOcR80UQ2qqZVWiAq7S1kUjc=)
                          2: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: JeRljMwzQH3/92nSWVH5RymJInEM50zHuR37MlUO73U=)
                          3: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: T0b8C7d4bWsc3EyPhNVtAAt07MQZYtmIX9CE+cnW0sk=)
                          4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: wKTcwQ/I5JRFgJ3BEd5QarAu/YHgWoWcx44Njrdtc4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11411 (0x2c93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Feb 28 15:32:39 2026 GMT
            Not After : Mar  7 15:32:39 2026 GMT
        Subject: CN=69a30a98-f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:e5:31:be:24:ad:cd:3c:03:0a:2a:08:fc:
                    26:13:80:08:f3:30:b2:44:bd:e1:c5:16:93:ca:ee:
                    db:d7:99:d4:4d:04:09:8e:a6:8d:f8:96:c5:a9:1a:
                    ce:e6:6a:45:e9:4c:74:e8:b7:80:8b:2c:40:71:31:
                    6e:d4:89:9c:69:82:c4:06:d8:af:83:f2:49:69:50:
                    f9:6e:1c:ab:b2:8e:d1:5b:76:2e:cd:02:fe:0d:46:
                    cf:64:10:2b:b3:2f:51:5a:5a:cc:40:08:39:ab:3a:
                    b5:ea:3b:dc:e4:ce:86:58:38:b8:f6:b8:d4:bc:18:
                    31:6c:4b:7e:10:8c:a7:6e:5a:11:9b:1b:7a:85:bb:
                    5b:4b:62:a3:3b:06:22:77:02:e0:46:b1:b4:e1:ac:
                    2f:99:ac:5e:8f:f6:84:ca:97:9e:c2:04:a0:bd:83:
                    b2:2d:d0:ad:06:7f:58:76:6d:58:98:71:c6:34:b0:
                    38:a1:c7:36:af:0c:a9:39:36:0f:39:e0:2d:fc:62:
                    08:f8:75:f1:35:ba:73:c2:06:ca:59:56:f8:29:2f:
                    c9:79:37:f1:f3:e4:5a:49:68:8e:13:64:85:b5:3a:
                    af:84:f7:41:c1:63:3c:28:79:25:50:5f:46:47:2d:
                    b3:08:28:6e:8c:b3:55:90:82:de:e4:ab:f3:d1:67:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:14:91:D0:5E:23:49:A1:46:89:65:F5:E0:B1:4A:F6:33:7F:60:25
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:6d:46:4b:6d:5b:69:eb:4a:ff:37:d6:4d:90:57:5d:0c:
         90:63:6a:b7:87:13:b8:17:36:54:3c:d5:fc:31:7b:db:ac:eb:
         f3:1e:13:11:62:fb:05:cc:19:e4:69:db:05:34:19:d4:a7:f8:
         48:8c:70:20:7b:e3:29:d0:22:db:c0:fe:ad:47:4b:74:1a:b5:
         f3:20:f1:01:b1:d2:37:11:9f:c2:38:50:fa:b6:7a:cd:74:3a:
         df:ea:2d:a9:c0:bc:7d:7f:93:ae:50:1f:74:0e:3b:90:af:b9:
         df:f6:e1:68:f0:4b:70:62:33:06:9b:cf:5c:50:64:ab:44:8d:
         9e:09:d3:5c:07:50:a9:6b:12:2e:15:78:0e:a4:96:29:33:2d:
         44:57:97:56:3a:dd:d7:db:64:03:34:b4:a9:62:61:e1:fc:57:
         21:db:cc:da:a9:5c:f3:b4:de:3c:41:2f:12:df:a0:8f:b2:de:
         b1:f3:0d:74:02:42:ad:c2:60:0b:03:88:43:eb:1d:dc:15:b2:
         fd:a9:9a:1c:c7:c5:00:bc:0f:0d:f1:13:25:8b:44:8c:7f:94:
         74:50:4a:13:5a:a8:46:b9:00:c2:a9:c0:90:1e:2b:4e:58:d0:
         dd:44:c3:9c:07:13:34:07:2b:91:af:f6:5a:31:60:77:f6:6a:
         07:57:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:07 2026 by rpki-client