Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File:                     PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier:          oto8ndfAsIRhG8uWn/L3zro5QX3unOi9DldWc2e3BL8=
Subject key identifier:   3B:E8:C7:AE:42:80:32:28:11:9A:67:C3:97:E8:75:18:95:33:1B:E8
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       05BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number:          05B5
Signing time:             Sat 28 Feb 2026 23:41:02 +0000
Manifest this update:     Sat 28 Feb 2026 23:41:02 +0000
Manifest next update:     Sat 07 Mar 2026 23:41:02 +0000
Files and hashes:         1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: kSIcv+ARY+z4Dask3QEABypnkLLZzV9hqMjyQjAGE2s=)
                          2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: QD91TSR3ZuXrQJclCdD9lmSV7b6jH/GHsZe7m6lielA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: Feb 28 23:41:02 2026 GMT
            Not After : Mar  7 23:41:02 2026 GMT
        Subject: CN=69a37d0e-d5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:b0:25:cf:5e:3a:37:29:1e:0c:fe:98:fc:
                    48:57:a3:bd:0f:78:8b:11:ce:84:8a:cd:2d:1b:9a:
                    6d:cd:bc:9b:8a:15:97:30:48:db:d2:d5:0e:55:cf:
                    7e:83:41:89:56:0e:61:80:77:d6:d1:c2:1e:16:b6:
                    27:f6:19:2a:00:68:28:cc:1b:c2:ba:c6:bd:85:9e:
                    3f:85:bc:0a:f2:a0:cf:6a:32:df:a0:86:36:11:a1:
                    d8:34:9d:5d:a7:e1:7a:01:bf:04:a6:cd:ac:91:cf:
                    58:e5:56:36:24:5d:73:12:f0:2c:19:22:19:5c:c2:
                    7c:d4:e1:d0:38:a7:a9:c9:f1:15:ac:cd:80:77:55:
                    05:19:fa:23:b0:33:92:5a:2b:dc:7f:13:9d:d8:95:
                    99:85:c2:08:90:77:a8:1e:50:ad:10:d8:5d:a2:bb:
                    e7:69:44:a1:4a:cf:4f:39:47:eb:fe:1b:e6:f2:7e:
                    5a:d6:5f:c5:cd:92:2d:49:6f:ab:4a:8f:bc:1f:d7:
                    54:35:12:14:5b:e6:69:5f:a9:db:ff:d6:de:b8:b7:
                    d1:07:a8:a0:c7:31:ee:c2:04:a2:05:8f:67:ff:3e:
                    78:07:c2:30:0a:b3:d8:e7:2d:18:ae:c7:4e:68:71:
                    72:d8:e7:ec:b0:37:12:ee:d4:88:e9:b3:02:39:8a:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E8:C7:AE:42:80:32:28:11:9A:67:C3:97:E8:75:18:95:33:1B:E8
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:74:6f:40:9d:88:ef:13:f8:0e:0d:6b:94:88:a9:1d:07:
         e4:7e:16:f6:2b:47:54:6a:7b:cf:03:e5:b7:8d:cf:bd:b9:90:
         c0:08:8f:2f:12:3c:7d:41:be:72:fb:d1:9f:7e:1a:cd:a1:e0:
         56:68:13:d0:db:88:d3:db:00:61:4b:a9:27:f9:df:87:e0:ed:
         e9:3d:ba:9e:d8:15:3b:c8:55:15:80:9e:58:5a:fa:cd:88:fe:
         5e:88:a6:e7:cb:c6:8d:59:1a:a2:3b:52:97:44:5e:7b:4f:3a:
         f2:54:f3:8f:5c:ce:2a:f5:87:94:0f:84:e8:4f:85:ec:49:ab:
         9e:b6:92:84:46:33:6b:cd:ba:50:ad:3a:2a:54:d2:4a:20:0a:
         e3:2a:82:d0:1a:41:b5:a2:dc:18:8d:48:5a:3e:a6:8b:74:17:
         60:7d:b9:bd:45:06:bf:9f:61:f2:32:ca:1f:31:78:dc:c6:3c:
         f5:c5:b9:ce:f2:c8:11:1e:65:a4:fb:18:0b:38:74:05:d2:df:
         a2:96:c3:31:9c:9b:1d:ed:7a:83:c2:59:3e:93:f4:88:22:62:
         b4:dd:22:f3:5b:69:04:33:fd:a5:d6:88:57:f9:b9:c4:05:41:
         fc:bd:26:36:e9:a8:92:91:7e:2d:a9:6b:79:48:82:57:d1:6a:
         99:a4:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:23 2026 by rpki-client