Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
File:                     PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json)
Hash identifier:          +hF/Tu4D6hR9rty/IW1G0eSmt5ZRv6ZIip6XTPEFgWo=
Subject key identifier:   5B:DF:02:8E:A9:55:A9:4F:92:E8:A6:A5:69:64:2B:1C:65:04:99:29
Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8
Certificate issuer:       /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
Manifest number:          013E
Signing time:             Sun 01 Mar 2026 06:27:56 +0000
Manifest this update:     Sun 01 Mar 2026 06:27:56 +0000
Manifest next update:     Sun 08 Mar 2026 06:27:56 +0000
Files and hashes:         1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: AbVqFokJp6GH4+c84+FJ6CDT34tuEdYQKHwSlNITAnU=)
                          2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: aewA7Recxf1QEkAlzyh8eNS8lnCo6hOfpjo3yvsUTtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
        Validity
            Not Before: Mar  1 06:27:56 2026 GMT
            Not After : Mar  8 06:27:56 2026 GMT
        Subject: CN=69a3dc6c-d48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2f:c7:b1:51:b6:f8:0a:f6:5a:8a:b5:f0:0e:
                    9d:fa:4e:0a:13:8b:84:2d:b0:57:50:27:8b:8f:c8:
                    85:8f:a8:c6:9d:ed:97:53:ee:c5:1e:d2:79:78:f2:
                    0e:73:82:46:95:e3:3b:b8:3a:26:6d:86:02:06:24:
                    82:14:8d:ea:27:cc:e3:80:eb:f1:f2:9c:2b:5f:56:
                    73:7b:9a:b4:4b:35:ec:78:66:a4:1a:b0:b3:f1:75:
                    fa:6f:55:cd:63:54:e6:96:2f:ff:89:89:b2:aa:a6:
                    05:7f:45:a0:7b:ef:0a:4b:53:72:3e:2b:5a:4b:98:
                    45:82:a0:d7:d5:4a:e9:e1:af:6e:a9:04:b4:7b:d9:
                    22:ec:64:29:fe:ec:24:e1:52:ce:91:81:89:38:3d:
                    05:dd:b3:ea:e8:1e:3e:9c:93:9e:54:d9:7f:79:5d:
                    7d:68:df:ca:11:0e:11:1c:5d:06:11:da:1c:f2:96:
                    59:4d:e8:73:85:93:73:18:7b:20:d9:2a:60:2e:3e:
                    49:45:b8:88:c8:61:cb:19:13:c5:4e:7f:d8:4d:f2:
                    fb:0d:7b:81:4b:53:e4:71:f5:46:17:c7:22:9b:62:
                    c2:00:76:33:f5:28:0f:c1:67:76:61:7c:0c:4c:c3:
                    4c:a9:71:65:0e:4e:f6:d1:4e:7e:65:d6:92:34:22:
                    87:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DF:02:8E:A9:55:A9:4F:92:E8:A6:A5:69:64:2B:1C:65:04:99:29
            X509v3 Authority Key Identifier:
                keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:dc:81:2e:40:b8:1b:31:49:f4:03:86:91:90:21:7f:51:56:
         05:d5:a3:0e:c8:3b:ac:f9:36:25:b5:69:6f:1e:af:3d:18:8b:
         66:03:57:69:11:36:fd:e7:18:b6:b7:3b:95:0f:a6:18:62:ee:
         90:b8:5a:fb:08:d9:28:5d:da:34:c4:fa:24:66:b0:7e:9d:bc:
         a2:c2:24:d5:f5:58:b1:9e:aa:46:b3:dd:18:9e:84:4a:d7:69:
         22:35:f1:9e:97:f4:8c:5b:d8:81:00:01:f8:94:03:28:98:7b:
         76:8a:03:5c:9f:e0:5f:d5:1c:1b:29:31:5d:d3:04:a2:50:98:
         7c:23:14:50:51:af:d3:60:35:1f:76:4d:7f:09:13:6e:68:1f:
         3c:b1:9d:64:07:3a:3e:c5:7a:e9:50:97:1e:5c:a8:62:65:f3:
         3a:27:56:46:ce:86:99:f8:dd:fe:38:69:61:c1:49:ea:68:1a:
         55:f6:e2:c8:ee:d7:63:29:fb:bb:95:6f:f6:40:fa:a2:7e:41:
         2d:d0:d0:43:77:a3:dc:79:93:21:3a:80:80:86:91:99:9c:a5:
         9e:97:d8:11:e9:f5:74:1d:25:47:ab:59:18:ad:85:bd:08:1b:
         09:73:f2:f6:79:6e:24:99:a9:89:e4:a9:ea:ea:6d:7d:10:72:
         51:45:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:50 2026 by rpki-client