Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          S9cbAPoiqaiDJ9OCBnIsbpqLJDQmFto1mmAupii9zjA=
Subject key identifier:   FF:B6:C5:66:CB:F3:C6:9C:C8:A4:03:D3:7B:83:AF:D2:C6:65:27:E3
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0CE1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0CC3
Signing time:             Thu 16 Apr 2026 18:25:06 +0000
Manifest this update:     Thu 16 Apr 2026 18:25:05 +0000
Manifest next update:     Thu 23 Apr 2026 18:25:05 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: QjBzZzjzbnMhZeEHR6Q5xrxQoo+OhgZqMtGJ1P1Rt4s=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: yKBY5dtVMLpQRhUTcp2VZm6caZpNLzephZvZ/kuQQbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3297 (0xce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: Apr 16 18:25:05 2026 GMT
            Not After : Apr 23 18:25:05 2026 GMT
        Subject: CN=69e12982-9527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:b7:a5:15:93:5e:74:bb:a0:a3:6d:f2:da:
                    e4:5a:0f:e7:fe:a4:08:a8:88:3e:96:31:99:ab:3c:
                    b0:54:4a:3b:e1:7b:b3:cc:8f:7b:55:af:90:f7:b9:
                    1a:f6:6a:c5:56:96:d1:77:8b:d4:11:86:01:e6:32:
                    8d:87:2a:5d:b8:28:73:eb:7c:f4:74:fb:61:2f:b8:
                    08:90:6f:40:bc:1d:fa:5e:fe:6e:48:b0:b5:11:7d:
                    92:f1:44:16:d5:2b:0f:28:4d:69:89:38:1b:72:79:
                    49:61:64:48:c5:7a:4d:b3:58:ff:2a:ed:d0:4b:f8:
                    de:3f:fe:fa:c1:1f:62:39:8e:78:8d:0f:64:91:9e:
                    5c:3b:85:4a:f2:88:f0:03:e0:a1:71:ee:e1:ab:7e:
                    67:fb:55:95:ea:23:3c:44:16:68:3c:b6:92:c6:5b:
                    25:fc:7b:e1:b9:98:d9:3c:c8:ca:1e:51:8c:a9:2a:
                    37:8c:65:2e:f8:88:c9:08:a3:49:8d:24:6e:58:82:
                    a9:58:17:3f:0d:49:d0:4b:30:36:03:d7:b3:54:ae:
                    09:48:ac:32:f0:6c:9d:3b:d9:a1:52:74:00:fe:a8:
                    e1:ef:b6:5b:1e:06:ae:41:a4:d4:18:91:62:33:85:
                    cb:7d:8d:b1:ab:74:a0:25:32:21:67:cd:b0:70:53:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:C5:66:CB:F3:C6:9C:C8:A4:03:D3:7B:83:AF:D2:C6:65:27:E3
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:3b:30:c8:8f:70:0f:cd:50:e3:4f:4c:c2:9b:75:be:e2:
         79:34:42:c0:b2:47:c4:25:29:07:2f:cf:89:17:4e:94:b5:c8:
         aa:96:c5:b3:fa:39:14:7e:fc:13:8c:d9:2c:d3:94:4e:a8:63:
         31:8e:a9:74:a8:3d:85:10:e6:d6:86:81:6a:bd:cc:b8:36:84:
         8a:44:4f:60:06:ab:5d:fe:46:1f:69:21:57:68:3b:93:73:4a:
         d5:4c:86:33:1b:b0:18:25:97:8a:8c:39:c4:6e:2d:f7:82:08:
         fc:49:95:4a:bd:2b:6d:f2:73:ab:68:1d:75:2c:70:d6:5c:16:
         d5:90:75:eb:09:f1:39:0e:b0:b6:4c:5b:fc:c1:48:15:83:e5:
         fe:2e:09:bb:96:1e:4a:8f:85:e6:5d:83:ff:75:39:e6:94:48:
         e1:80:18:3c:82:b5:dc:18:c1:e6:9d:e8:54:82:64:be:10:54:
         a0:80:0a:2d:31:62:38:4d:19:df:5f:d8:d5:86:be:57:dd:78:
         4f:7d:71:fc:04:fb:7b:28:fb:ec:f9:64:7b:b5:60:1a:79:c9:
         5d:ca:e3:67:c8:bb:82:d8:bb:51:5c:fa:09:50:9d:31:a5:cc:
         1a:2a:ef:f7:48:9a:77:b8:15:19:49:b1:12:5c:44:10:97:df:
         0c:d1:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:55 2026 by rpki-client