Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
File:                     PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json)
Hash identifier:          Hs39i79DFsf/lTvMisOtpxsKBnV2k17alkNDa43P9Mo=
Subject key identifier:   D0:2E:3B:EE:DF:7E:F4:6F:9F:3E:3E:69:00:6A:9C:D7:E6:32:18:C3
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
Manifest number:          0151
Signing time:             Wed 19 Aug 2026 05:50:56 +0000
Manifest this update:     Wed 19 Aug 2026 05:50:56 +0000
Manifest next update:     Wed 26 Aug 2026 05:50:56 +0000
Files and hashes:         1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: uggSfV0igfJ4p4bty1WzPAjS+/eZGd/u9m3dkn1w8OI=)
                          2: 3F0FF378595811F18FC123129D833773.roa (hash: +kkTC+5CaX8V5LXnChQNjqJe+X3RoBoVZ1fsEx/5vtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
        Validity
            Not Before: Aug 19 05:50:56 2026 GMT
            Not After : Aug 26 05:50:56 2026 GMT
        Subject: CN=6a854440-c211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:35:e2:46:e5:42:0f:97:6b:19:88:55:f7:
                    0f:83:1f:8a:96:53:c0:92:77:bd:b5:5f:bc:95:d4:
                    20:23:11:c4:75:56:f5:54:53:b0:9d:a3:8c:6d:a1:
                    f6:8f:b6:77:60:2f:86:4e:77:03:29:5f:d8:83:32:
                    46:51:43:61:ba:ec:05:a3:92:1e:ac:bb:2d:19:34:
                    fd:c0:b3:2d:4a:1e:a3:ab:9c:40:91:0a:2f:fc:4d:
                    62:45:8f:43:7e:02:1a:bb:8e:33:87:79:eb:da:d0:
                    bf:99:79:a4:30:3c:a7:9b:0b:dd:25:c8:fd:22:31:
                    4f:bc:f6:3c:df:5d:ef:1e:20:0d:ce:a0:fc:5e:d0:
                    fa:f7:47:ec:34:7d:87:0a:d5:5c:24:21:38:fd:5b:
                    98:13:67:ce:78:47:72:cd:c8:17:7f:ce:f5:b6:cc:
                    e4:51:81:f7:4a:da:9d:b7:f1:1c:a3:bb:c9:7e:ce:
                    49:5a:42:a6:5c:2c:b0:36:ff:9b:bb:fa:8f:d9:b5:
                    76:6e:81:81:eb:84:83:4a:2b:f2:1a:bc:80:b9:97:
                    38:bb:97:72:f6:12:4e:aa:3b:2c:13:f8:f6:6d:44:
                    80:5d:90:9e:7e:66:cf:2e:df:55:2c:e9:52:2d:95:
                    90:51:9b:b2:bc:38:f3:70:30:b3:93:d5:55:b2:dc:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:3B:EE:DF:7E:F4:6F:9F:3E:3E:69:00:6A:9C:D7:E6:32:18:C3
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:04:29:e7:ac:6a:9c:1a:9e:fa:ce:94:78:86:5a:0b:96:f4:
         02:bc:2e:d1:16:cf:d2:e6:d9:ea:b3:f5:ac:aa:84:fb:7f:53:
         2d:65:07:53:4c:a5:08:a4:cd:93:3a:66:62:e7:28:83:49:15:
         40:6e:2e:f9:6d:fc:61:e5:bc:46:0a:66:46:12:47:8c:42:b5:
         ee:a5:37:0a:47:af:34:2a:4e:a4:41:89:61:4b:08:fe:41:20:
         fb:6e:a2:0f:ff:65:76:b0:67:f0:a0:dd:06:a4:f0:34:23:0d:
         84:6b:2b:db:71:34:ad:a2:21:3c:74:10:6d:b4:93:e9:e6:6d:
         77:1f:8d:b4:10:67:2d:9e:e9:fd:2f:30:3d:ed:1e:df:d9:c9:
         8c:9c:ea:91:5e:1f:63:21:91:5a:f6:7b:5d:9e:73:83:e8:b6:
         6f:41:bc:04:aa:a5:6a:a1:73:52:81:7e:6b:9e:4d:8a:84:75:
         32:61:10:24:e0:54:d8:1f:d8:49:02:11:e1:c5:ab:f7:7c:96:
         48:b2:3d:66:9f:82:11:56:fb:ff:9d:7d:61:dc:57:76:e4:71:
         43:a3:3a:c8:b1:ee:4d:c6:b0:2d:2e:ff:bf:b6:f2:c7:20:58:
         bf:5f:b8:42:b0:89:1c:48:10:4b:01:f1:db:c1:39:80:cb:d3:
         6f:91:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:16 2026 by rpki-client