Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File:                     PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier:          D7OGV/uGQ8AVMBcaEgeqJ3SwFY+Lnf0eUtpJz2AzEb4=
Subject key identifier:   A0:72:9B:80:43:3D:EE:05:71:42:4A:F8:4D:F2:60:53:36:C1:6E:A4
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer:       /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number:          018A
Signing time:             Sun 01 Mar 2026 05:29:22 +0000
Manifest this update:     Sun 01 Mar 2026 05:29:21 +0000
Manifest next update:     Sun 08 Mar 2026 05:29:21 +0000
Files and hashes:         1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: DBoBXdUc7Y3xYEAt6K2WkcCeWrG7B2rprPBzD7Da2B0=)
                          2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: idAFhUmAkJaKGqP8j1ITDESnMkqFyJap6af21HGHAgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
                          rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
        Validity
            Not Before: Mar  1 05:29:21 2026 GMT
            Not After : Mar  8 05:29:21 2026 GMT
        Subject: CN=69a3ceb1-ff10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:37:b7:55:50:2d:0c:8a:88:56:d8:38:9c:
                    6d:91:53:be:ac:e3:fc:a8:99:f9:8b:7d:ef:9a:3b:
                    40:0f:57:db:94:2e:43:80:00:97:83:bb:6d:76:2b:
                    8e:a2:74:90:cf:b0:68:6f:e9:fa:f5:e1:28:b9:10:
                    3a:35:79:67:37:5a:40:81:97:72:8f:9f:63:ef:27:
                    37:30:4a:a3:a8:fd:fc:90:63:c6:09:66:10:7e:9b:
                    b3:b8:ae:c0:28:d7:ec:4e:62:40:5d:27:e3:a0:c3:
                    f4:b7:ad:84:b0:52:8b:11:f9:e9:9e:ea:eb:42:0f:
                    b9:56:72:d6:2f:3f:44:0d:56:5f:a4:37:c4:d2:1a:
                    51:73:ac:ff:79:de:d6:e4:90:6f:5b:0c:8e:32:23:
                    b6:26:c2:82:8a:e4:fa:d7:ce:62:c6:8e:4c:01:eb:
                    35:56:26:47:1c:35:2c:c6:1d:2b:06:e6:a3:0c:65:
                    82:da:00:c6:29:1c:aa:60:06:90:21:b1:3d:01:18:
                    28:7d:eb:b5:f8:5e:1a:45:86:54:5c:de:c8:e6:16:
                    02:a3:6f:e5:08:e8:17:e3:f3:fc:7b:86:0d:e4:c8:
                    e4:97:76:89:94:06:aa:db:76:ab:a8:0c:82:2e:e4:
                    e6:e0:8f:1d:b6:cd:4d:77:52:9d:0b:c5:45:1c:14:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:9B:80:43:3D:EE:05:71:42:4A:F8:4D:F2:60:53:36:C1:6E:A4
            X509v3 Authority Key Identifier:
                keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:98:b2:7d:03:7b:cf:08:28:7a:9b:1f:7a:eb:fc:09:c0:5d:
         97:49:85:2c:a9:33:7d:8c:02:7e:16:66:0e:66:91:77:40:b4:
         1d:38:b7:b4:d5:dc:cd:1c:b1:a8:d8:9c:ef:0f:49:21:bf:ae:
         73:77:60:ac:32:bb:ab:77:f0:c7:f8:9b:7b:09:fc:f8:75:d7:
         2f:dd:13:3b:fa:27:58:43:b9:77:4d:3a:9b:d7:37:13:fd:8d:
         cf:0c:00:b3:f6:a2:7e:c5:07:42:ab:fb:cf:0e:dc:6a:f0:2c:
         19:36:9d:00:a6:79:ab:52:ec:2b:04:dd:f3:8a:76:11:e0:de:
         0e:84:bb:89:a2:b2:8f:75:b7:ce:98:8f:37:7c:47:65:61:bd:
         9a:62:33:ca:9a:b1:f6:42:e3:e4:60:b9:ee:73:e4:f0:4c:36:
         8e:a1:da:ea:c8:37:fc:fa:ba:51:74:b9:e9:08:f5:39:80:e1:
         3b:6b:76:b7:5b:7d:62:e9:59:aa:b7:78:16:91:c5:74:a1:fe:
         5d:e8:78:13:5a:8a:78:70:6b:bb:09:fd:df:47:42:e6:e6:55:
         0b:1d:3b:22:81:33:e9:01:13:46:8f:26:1d:a3:e1:a3:a3:84:
         9b:3b:9a:f2:ed:87:b9:ce:8b:04:28:f6:f6:87:ce:ac:87:93:
         ed:e7:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:33 2026 by rpki-client