Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
File:                     PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json)
Hash identifier:          awd1JGUrYuEgk5E22VSt54mucBMVRwvuQkajCFAKOoY=
Subject key identifier:   A2:C1:F3:43:41:B9:B7:05:A0:36:39:AB:4D:3E:02:9C:58:D7:CE:A8
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Certificate issuer:       /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial:       0C31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
Manifest number:          0C29
Signing time:             Sun 01 Mar 2026 23:46:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:46:31 +0000
Manifest next update:     Sun 08 Mar 2026 23:46:31 +0000
Files and hashes:         1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: 1315DDVsrVc1YVWWxUNzLmbLxubKAk54Z6zxu81sZb8=)
                          2: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: lKs57ar3B+Bk7HcoSnOmAncGxHshQS9IzWUKxOnfU4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
                          rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
        Validity
            Not Before: Mar  1 23:46:31 2026 GMT
            Not After : Mar  8 23:46:31 2026 GMT
        Subject: CN=69a4cfd7-86e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:e2:3c:97:45:96:57:27:05:9a:d3:d5:f2:
                    3b:ab:3d:6c:a8:69:97:98:70:a5:85:83:e4:01:34:
                    c0:5d:9c:15:fe:12:c9:49:19:04:8a:71:b3:d4:cc:
                    42:78:b7:c8:40:8f:5a:7b:04:f7:ab:9c:cf:31:d8:
                    06:b1:3f:d6:88:03:83:e9:47:4b:0f:7c:ef:58:d5:
                    56:30:28:d3:1f:39:29:80:d9:46:c3:71:18:09:39:
                    64:bb:1e:02:06:d3:a0:ef:bc:dd:63:28:9f:14:d7:
                    be:c3:86:1b:5e:94:e2:e5:9b:4e:7d:e3:b7:84:e0:
                    2e:25:76:d9:72:77:17:29:56:41:9e:b9:56:a9:9b:
                    7d:a4:7d:b8:d0:f9:97:e0:93:c0:b9:d7:64:58:5e:
                    8f:ea:db:7a:12:7f:0f:ec:d1:e5:b5:c8:bc:61:fc:
                    e7:b1:7d:8f:09:c3:69:e8:4c:4b:c9:6c:ee:28:1b:
                    68:ae:eb:11:74:81:2a:29:6d:8f:30:80:01:12:c5:
                    29:93:87:2e:63:cf:6f:68:fb:80:0e:9e:23:a3:4a:
                    e5:d0:86:20:9c:d3:d6:ad:f1:1b:6e:df:59:44:9e:
                    d3:de:68:fe:0c:90:4d:e9:7c:8c:a4:01:66:2f:ad:
                    6a:ac:8f:9f:96:93:79:e7:1a:b5:9c:48:15:dc:14:
                    db:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C1:F3:43:41:B9:B7:05:A0:36:39:AB:4D:3E:02:9C:58:D7:CE:A8
            X509v3 Authority Key Identifier:
                keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:98:b3:34:d4:e8:81:07:cb:7b:67:5f:11:57:00:10:c2:
         a5:2e:44:fb:29:49:c2:76:5c:fe:d2:0f:f8:c9:db:3c:e0:6d:
         99:54:94:9b:05:09:31:87:8d:88:5e:3f:4f:27:ff:18:3a:92:
         e2:99:f0:bf:af:b1:c6:27:b3:3f:da:c2:b6:fb:32:d4:ba:e5:
         73:61:24:29:6f:a7:e4:c8:ab:fb:8e:43:88:ae:81:be:bf:1f:
         86:c1:b6:0c:9d:47:fb:a1:26:48:22:e5:9e:07:18:89:11:d5:
         d2:94:93:1f:05:4d:e7:54:4e:96:0c:b8:0c:4a:a4:41:1b:06:
         a6:eb:5b:98:1b:03:82:1b:43:1e:fb:cc:d4:b2:71:1e:aa:31:
         e6:c9:6c:4c:8f:12:3b:8a:9a:75:f5:45:28:a5:a6:a1:65:71:
         0e:d0:9d:46:4c:de:e8:c9:28:fc:e9:4a:18:c6:e0:94:88:b2:
         c4:c0:ea:81:e0:35:a9:32:89:d8:45:a5:2a:04:98:b8:56:6b:
         2b:fb:0e:91:84:68:11:d1:c9:42:2d:8a:6c:b8:fa:06:9e:16:
         a7:d2:9c:6d:8a:03:e3:e7:3d:74:e4:45:6d:ec:7b:39:3b:28:
         32:51:98:1c:82:43:3d:4a:ec:0c:05:75:b6:99:ae:a0:6e:a9:
         39:4c:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:55 2026 by rpki-client