Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File:                     PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier:          GyW2QgMIuqRORK+DrAaxXTKDCumymDY+OAzW6Y52CJ8=
Subject key identifier:   EC:3D:2C:B9:92:5A:6E:73:2A:E0:F7:BD:56:FB:B0:B3:E4:20:40:AE
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer:       /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial:       0C39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number:          0C28
Signing time:             Wed 20 May 2026 18:47:38 +0000
Manifest this update:     Wed 20 May 2026 18:47:37 +0000
Manifest next update:     Wed 27 May 2026 18:47:37 +0000
Files and hashes:         1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: az5Q74a826jKXQ7ziQ7y1mojHAC1qBJ0IhNfCulUjrg=)
                          2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 9Cctfl5iVCug/kpJi3YvxQHCMlPNU3aYuU5n63QerO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
                          rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
        Validity
            Not Before: May 20 18:47:37 2026 GMT
            Not After : May 27 18:47:37 2026 GMT
        Subject: CN=6a0e01ca-e9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:33:6d:da:20:c4:14:66:74:3a:72:0e:1a:
                    d9:3d:71:29:bd:b4:34:d6:4c:de:ae:1e:a3:00:be:
                    28:69:e9:90:78:b5:b1:17:f1:68:f7:b9:ce:35:ac:
                    f7:1e:6c:bd:2c:68:2d:b7:3e:35:e4:ef:95:cb:31:
                    1d:dd:36:b2:9a:c0:ff:09:24:7f:20:af:1a:b7:b6:
                    25:af:85:91:df:9b:c0:4d:a7:f4:fc:7b:93:55:b1:
                    f6:6e:91:1c:92:33:fe:6c:42:b9:c3:b6:d2:6f:f6:
                    08:a9:9c:9b:0a:02:45:52:b9:97:f3:41:1b:9a:3e:
                    83:2c:ce:01:52:79:3c:df:c9:ee:c8:2f:ea:d2:86:
                    99:fd:22:e2:b9:19:69:db:7f:98:33:e0:a8:96:c2:
                    33:cc:8d:24:64:11:6d:4b:77:ec:46:e6:98:ce:87:
                    5a:0e:a1:54:e3:69:f1:1c:64:74:a5:f8:34:f2:ff:
                    7a:9e:84:26:ab:59:06:2a:13:b3:b8:f8:16:95:22:
                    57:b7:6c:30:f7:0e:c9:07:50:f1:78:c0:21:b2:b8:
                    87:bf:58:b6:dd:b5:84:33:b4:30:ca:61:c1:70:10:
                    a4:23:8d:8f:f1:96:91:57:1f:18:8f:8c:4c:54:fc:
                    db:78:07:43:dd:44:09:c9:e7:b6:81:0e:86:16:11:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3D:2C:B9:92:5A:6E:73:2A:E0:F7:BD:56:FB:B0:B3:E4:20:40:AE
            X509v3 Authority Key Identifier:
                keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:78:b0:35:12:d6:c5:8b:cb:17:e4:15:ca:1b:3a:f9:3b:d9:
         ce:fe:d0:d1:86:cb:9d:69:81:bc:a9:45:0a:ef:38:b2:d0:b7:
         7d:01:f1:30:77:ff:a0:7b:e1:0e:cf:0d:96:89:79:9d:de:8d:
         d8:71:3a:6b:4f:99:a6:b3:a1:8a:d3:29:6c:fc:e5:35:74:a6:
         19:38:a0:df:a3:45:4d:ab:37:6b:64:a8:54:38:d5:fb:a2:33:
         51:c6:34:22:4e:48:a9:7d:a3:f5:4e:2b:f9:2d:bc:35:6a:33:
         07:b8:3f:42:a5:d7:41:75:48:63:f1:00:a5:ab:94:87:52:22:
         c5:3b:e3:3f:fb:db:7b:07:e3:6b:66:83:60:42:4e:ac:8a:ae:
         31:50:61:7e:f8:68:30:ed:23:97:73:36:9a:80:7c:e2:df:b3:
         7c:9d:af:38:df:73:54:cf:51:22:f7:9a:81:5b:f9:25:d9:b4:
         19:9c:17:31:82:1d:f7:66:b9:25:6d:96:26:b1:83:c5:04:5c:
         93:77:77:63:96:b6:37:fb:be:96:ad:23:87:ee:3d:d7:db:fa:
         ff:a8:10:aa:24:f4:01:54:40:a0:1c:2d:da:ba:0f:44:49:85:
         00:8b:4f:89:bd:e1:66:a3:4a:7f:99:cd:dd:45:12:43:86:bc:
         07:e2:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:02 2026 by rpki-client