Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
File:                     PgyjPXanW6ZPDdawakQr5pWGRBo.mft (raw, json)
Hash identifier:          Mb9921AOKjBuKLc4Ab4xGOKFxQfRImfv4eLfVDitOhQ=
Subject key identifier:   E0:F7:8A:C9:F6:9B:E7:67:36:FC:BD:7E:10:F7:8B:F2:4B:53:E3:5E
Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A
Certificate issuer:       /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
Certificate serial:       352E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
Manifest number:          351E
Signing time:             Sat 28 Feb 2026 14:27:00 +0000
Manifest this update:     Sat 28 Feb 2026 14:27:00 +0000
Manifest next update:     Sat 07 Mar 2026 14:27:00 +0000
Files and hashes:         1: PgyjPXanW6ZPDdawakQr5pWGRBo.crl (hash: f2R2qMifn25McxYTqQyLUOCO0TE2xfwblHQ/2qexbeg=)
                          2: D69F6688CD8511EBB5252063C4F9AE02.roa (hash: o45AFhO6SSMQiWqggKeTKMzwcSJwvQDsZ1NlO/kkLkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl
                          rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13614 (0x352e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A
        Validity
            Not Before: Feb 28 14:27:00 2026 GMT
            Not After : Mar  7 14:27:00 2026 GMT
        Subject: CN=69a2fb34-423b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4d:8d:51:ad:97:4c:5a:e7:1c:b1:f0:c5:05:
                    81:0e:0a:87:c6:3b:59:af:55:60:dc:80:95:f7:f5:
                    21:d7:60:89:a4:18:0d:7d:81:6a:c0:12:e1:29:6b:
                    54:0a:da:c7:2b:da:90:9d:35:57:b6:28:37:d1:c7:
                    b8:4d:37:cc:02:4f:08:39:79:98:77:66:12:a2:55:
                    3c:20:9f:48:33:42:d2:19:93:d0:01:a3:e9:63:2a:
                    b6:85:55:33:b1:89:07:57:61:76:f2:3a:33:4e:9b:
                    99:e8:07:72:0e:87:c1:aa:0f:56:10:7d:5a:0f:53:
                    20:dd:e3:6e:14:4b:6d:f6:80:c5:4d:55:cc:e9:28:
                    cc:a7:dc:0a:4b:7e:cf:dd:c1:72:c0:3b:62:2c:44:
                    50:3d:3f:0e:ec:a2:09:c9:b4:b6:ac:f1:72:62:87:
                    fa:e5:4e:22:a8:ce:93:21:f8:8c:63:0b:89:ff:2a:
                    1d:23:8d:af:54:a3:7b:21:6a:b2:31:a2:ae:41:7e:
                    9b:21:b5:5d:15:52:a0:0a:63:21:d0:9b:9c:cd:9e:
                    8e:10:75:41:df:56:59:84:da:d7:bc:21:08:e2:34:
                    45:f1:10:00:80:90:60:d8:33:b6:41:f3:fb:40:15:
                    68:cd:5e:4a:f2:8a:03:ed:80:6b:ee:3d:be:95:bc:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:8A:C9:F6:9B:E7:67:36:FC:BD:7E:10:F7:8B:F2:4B:53:E3:5E
            X509v3 Authority Key Identifier:
                keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1d:10:98:dd:4b:ef:8f:c5:9f:a3:97:23:18:b8:1e:ab:64:
         df:3c:70:84:9f:4a:0b:35:f3:6f:7f:bb:46:69:48:ee:6e:6c:
         a0:17:33:57:90:76:a6:42:ea:87:9e:91:aa:12:6d:27:ee:75:
         b5:7f:5e:bb:de:62:5a:b0:b8:93:2a:ed:22:83:e6:ec:97:c8:
         ad:26:05:07:b2:35:69:c2:e3:dc:85:98:4f:35:48:8d:51:18:
         05:b1:c9:be:5a:0f:31:07:c1:cb:e6:9e:d8:20:90:f4:5f:43:
         c2:6e:27:cf:e6:65:b8:25:58:e6:ac:07:c5:d4:53:64:d8:2c:
         ed:70:ac:33:5c:15:fa:fb:17:67:62:19:27:8c:a2:71:3f:f9:
         a1:aa:da:30:96:f8:b1:81:db:ed:78:13:bb:d7:71:56:33:b0:
         4e:37:31:90:9b:12:53:07:56:d4:c8:cb:69:fe:a6:fa:81:f4:
         f9:ad:99:8e:a7:c2:3b:03:77:c1:bf:e0:d8:76:32:10:c0:7a:
         d7:a7:a5:eb:e0:2d:1c:9b:80:a5:f5:1d:e4:02:26:21:68:0e:
         20:99:fe:98:69:7e:e2:b7:c2:71:c9:6a:5a:cf:f9:70:fc:cb:
         a9:df:f3:60:f3:97:03:bd:f4:b7:c1:98:36:9c:27:0b:ad:e2:
         39:6e:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:52 2026 by rpki-client