Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
File:                     psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json)
Hash identifier:          tkRK0050+JH6kRQbpaJct4ISFiRIDslTh4XvztfOLwY=
Subject key identifier:   13:14:49:BB:47:2E:2F:76:C2:B3:2F:A1:EC:D2:E0:14:46:27:92:BD
Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F
Certificate issuer:       /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
Certificate serial:       1448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
Manifest number:          143E
Signing time:             Mon 02 Mar 2026 02:18:42 +0000
Manifest this update:     Mon 02 Mar 2026 02:18:42 +0000
Manifest next update:     Mon 09 Mar 2026 02:18:42 +0000
Files and hashes:         1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: Tu/mWYQwoW5eWnpcQJRiR+weKPkVe3pwjSQhnymlGkg=)
                          2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: +ZJ1g+2pZPRVqfmAmxvYebAdilEir6PlbHcye0iiufA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5192 (0x1448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F
        Validity
            Not Before: Mar  2 02:18:42 2026 GMT
            Not After : Mar  9 02:18:42 2026 GMT
        Subject: CN=69a4f382-f54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:f5:59:99:a2:03:aa:a2:ba:86:12:b3:c1:
                    50:15:7f:ce:fb:c0:d3:33:57:ac:9b:95:fc:37:da:
                    e4:47:6a:83:3d:4b:8b:ed:f5:bc:1a:c5:3f:75:82:
                    a3:25:fc:30:02:fa:61:0f:f2:bf:bb:1b:c2:d2:b2:
                    95:8b:7c:3e:1f:0f:99:ff:98:c3:42:a4:37:c0:85:
                    3f:86:40:da:c8:85:07:1e:9c:7a:41:fc:7e:2a:b8:
                    25:95:54:e3:27:38:8f:ad:72:6a:1a:08:13:31:a3:
                    3d:40:5b:5d:ce:25:a8:fe:04:fc:5c:bc:3c:d9:c6:
                    5a:f5:2f:6a:90:fe:6c:cf:41:90:d3:80:49:e0:6c:
                    bd:4c:5a:94:1d:08:5e:d1:47:6e:c1:10:8d:2b:29:
                    3f:38:bc:41:d1:b9:ca:b2:11:ed:14:c7:c5:78:3e:
                    7c:e2:d9:d9:98:b7:7f:05:76:6f:c5:db:78:11:45:
                    2e:46:68:bb:13:5f:bf:c5:68:91:cb:81:e5:20:ed:
                    d7:63:db:b1:03:62:38:48:89:4b:31:d5:f0:e3:96:
                    3a:ac:47:44:e5:f8:61:5c:14:e0:bb:54:d1:df:98:
                    18:9c:51:32:16:05:c6:b6:d2:e4:3d:d2:da:94:20:
                    3a:71:d0:b9:43:df:be:56:48:7e:f8:5b:ae:8b:84:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:49:BB:47:2E:2F:76:C2:B3:2F:A1:EC:D2:E0:14:46:27:92:BD
            X509v3 Authority Key Identifier:
                keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e3:64:58:13:9b:68:69:23:e6:1f:97:89:bb:70:19:51:f1:
         74:74:db:87:93:49:1b:8c:43:9e:dd:bb:ae:2a:d8:ee:b2:76:
         c6:fa:4a:68:7f:b8:95:ea:fe:cf:f9:f7:df:19:b5:6d:5c:b0:
         e7:dc:69:c9:02:5a:ac:2b:df:7c:93:71:42:c1:e0:83:2d:5c:
         20:59:e8:d7:54:53:cf:f1:98:2c:e0:51:37:71:7b:c1:fa:2c:
         53:b4:4c:1a:ef:d2:dd:48:bc:8a:0c:77:f6:31:4d:c8:1b:3a:
         f9:72:87:8c:ca:34:28:9f:8e:f1:19:aa:e3:4c:70:f7:13:df:
         f3:e4:d5:cc:55:39:d0:0b:9a:71:57:d1:f2:70:73:ee:84:70:
         e0:8f:eb:53:6a:e9:8a:1c:6b:a1:9a:cd:3e:d8:93:fe:8b:52:
         57:28:aa:ab:6a:55:fd:70:28:21:74:43:d0:df:c1:7a:82:62:
         5c:5a:b7:85:f1:41:31:44:15:cc:27:1d:18:fe:8f:9e:a7:82:
         a0:24:59:4c:27:b2:9e:e4:64:0a:26:eb:2e:51:31:d0:d6:45:
         eb:14:3f:1f:47:87:2b:2f:6c:95:60:55:bc:35:60:da:0d:fc:
         cc:f8:69:e8:ac:47:3c:68:98:09:25:9d:6e:bb:58:ea:f1:5a:
         ac:87:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:26 2026 by rpki-client