Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File:                     PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier:          cZTfprZBbS4sQIZCNVcDfZtzkTF8KCf+2gSeMR36bu4=
Subject key identifier:   60:E3:CC:8D:46:EA:98:49:B3:51:77:D3:7B:92:47:7B:AD:D5:B3:64
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer:       /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial:       0325
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number:          0315
Signing time:             Mon 02 Mar 2026 01:54:29 +0000
Manifest this update:     Mon 02 Mar 2026 01:54:26 +0000
Manifest next update:     Mon 09 Mar 2026 01:54:26 +0000
Files and hashes:         1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: w7jyaQt8oFDCVSTJRN16VkBhOnTR2hV5gkYrtorcwKc=)
                          2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: O3Ls+9YBYFMKkyDDzAoAnYOjitWoJ58mnyLKpWOVBLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
                          rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
        Validity
            Not Before: Mar  2 01:54:26 2026 GMT
            Not After : Mar  9 01:54:26 2026 GMT
        Subject: CN=69a4edd4-276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2d:85:21:57:01:30:71:f8:f5:1c:02:07:ec:
                    b8:d3:7f:ec:ef:41:7d:f7:c8:02:d4:a3:8a:9d:6e:
                    69:25:0e:20:57:0d:58:b2:b8:af:a0:b1:c3:49:f4:
                    69:a5:c7:e2:5c:f5:34:30:a8:f9:f1:10:43:88:ee:
                    5e:29:f1:da:e8:9b:90:10:11:ea:35:a2:48:7d:4e:
                    22:ee:09:6b:03:36:35:e7:f5:4c:3e:b5:1e:ad:65:
                    70:62:fe:df:c4:e2:a7:11:c2:7a:73:d0:f2:2c:53:
                    14:91:a7:97:2c:f9:8b:77:19:8d:87:83:53:2d:01:
                    3f:8a:62:91:51:bd:92:1a:28:e5:76:66:99:30:c9:
                    d5:b8:5a:80:2d:ce:07:40:ea:f6:43:43:c0:f4:80:
                    1f:08:55:34:4d:f8:20:4d:31:be:28:27:73:dc:c0:
                    33:f8:f6:de:1d:ab:31:76:13:8e:a3:9d:c3:c5:d9:
                    93:5a:37:97:e5:8b:fe:47:ae:64:84:7b:cf:4d:98:
                    3e:39:ea:f0:6a:3d:6f:c1:6c:94:ff:81:77:57:77:
                    5b:51:a3:2e:10:ef:b6:74:f5:49:e5:be:8c:e5:36:
                    6a:dd:31:6e:29:fe:31:eb:f3:e9:d1:70:aa:eb:38:
                    bb:f8:40:17:74:0d:ab:b9:4c:44:69:0a:37:c2:4a:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E3:CC:8D:46:EA:98:49:B3:51:77:D3:7B:92:47:7B:AD:D5:B3:64
            X509v3 Authority Key Identifier:
                keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:26:95:7c:52:8e:f6:bf:6b:51:8d:f4:ea:af:98:8c:fa:
         64:43:d8:42:e3:15:c9:f6:22:f1:5c:ec:b5:2f:d1:45:d1:a4:
         ae:75:7b:08:dc:65:53:aa:8e:06:f4:3b:c2:b5:13:a4:bc:07:
         f8:c2:55:d3:d9:71:c4:db:3d:51:71:86:de:ee:08:bc:7b:30:
         37:21:4a:80:4d:39:7a:84:be:e2:a8:81:95:5c:d3:79:b0:c4:
         ef:7a:e7:c1:7b:bb:bc:b9:bb:f4:3e:87:2b:80:49:bb:3e:32:
         f6:cc:a0:70:2c:30:34:bc:ab:c6:fe:d6:58:af:c2:97:bd:1e:
         c3:a9:f6:48:90:95:65:29:53:01:25:c6:ba:be:b9:40:47:2e:
         f7:47:ae:b7:5a:34:c8:35:61:39:17:2b:a2:26:c5:65:1c:27:
         e9:4e:56:04:42:42:01:42:dc:1d:da:82:54:44:1f:ca:fb:3f:
         51:d1:11:61:e8:f6:4d:f1:91:57:20:da:d1:3b:38:b1:c2:41:
         16:eb:bc:10:8a:ed:f1:ab:1a:95:0c:0e:f0:f8:11:61:eb:bd:
         2b:7a:1e:12:4e:18:cc:36:fe:20:36:57:3b:f0:d0:39:41:18:
         3d:71:80:25:72:48:4c:89:fd:b6:c7:dd:52:ea:b4:33:e4:b2:
         c1:ee:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:19 2026 by rpki-client