Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File:                     PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier:          wEB4h056PonqlX9D8DO0lzgFRNoCIhecyBXKnUF2HRA=
Subject key identifier:   5B:1B:44:FC:A8:BE:B8:B1:07:A3:2B:60:59:1A:84:BF:6D:1C:39:A7
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       0464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number:          0452
Signing time:             Wed 05 Aug 2026 00:53:55 +0000
Manifest this update:     Wed 05 Aug 2026 00:53:55 +0000
Manifest next update:     Wed 12 Aug 2026 00:53:55 +0000
Files and hashes:         1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: 3wO/mKcl0qIfLzOBpwVpY/UpFtci3PBA2GSAmlyB3k4=)
                          2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=)
                          3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 00:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: Aug  5 00:53:55 2026 GMT
            Not After : Aug 12 00:53:55 2026 GMT
        Subject: CN=6a7289a3-e0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:c0:19:f3:62:fd:ed:a6:24:38:3b:ed:62:
                    c9:65:b1:20:0c:b9:0c:55:92:d1:af:ac:83:a0:80:
                    2b:5c:87:a1:d5:b7:4f:b0:3e:32:f1:e6:9a:0d:3d:
                    3d:fb:de:a2:8d:a7:02:b9:9f:07:3d:52:16:cf:37:
                    41:8c:55:8e:1a:07:94:89:5d:ef:e0:6d:75:8e:8d:
                    b4:7d:58:1a:61:52:12:5e:0f:2c:0c:17:6b:dc:d0:
                    71:cf:03:0c:8c:4e:cd:ac:a7:f1:5b:76:8d:7a:05:
                    70:0b:bc:78:6e:50:e6:c3:58:24:53:1d:b7:6f:fe:
                    30:41:23:f8:c0:56:e1:11:45:3f:7e:f7:f7:6f:ff:
                    cc:37:0e:ac:c5:d9:8a:6a:8d:a7:01:08:b5:55:f6:
                    b4:ac:6e:e5:a0:d8:94:09:51:4d:6a:fe:9c:e3:43:
                    5d:a4:da:ec:33:e6:93:28:fb:17:1d:52:34:83:8a:
                    b5:05:65:e1:cc:d2:37:6c:15:14:cc:3c:f9:03:36:
                    ad:a8:15:cc:bd:b9:63:09:2f:69:88:83:9d:88:cc:
                    7d:d3:14:dc:ff:66:6d:2e:90:67:9d:62:b8:f9:6c:
                    d0:f0:3a:a5:71:7a:08:42:50:15:f8:89:c8:28:af:
                    bb:f9:fe:91:4c:a8:a9:f6:08:e8:16:84:e7:a6:c3:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1B:44:FC:A8:BE:B8:B1:07:A3:2B:60:59:1A:84:BF:6D:1C:39:A7
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3c:2c:78:cf:2d:5c:3d:20:e0:ae:38:b3:91:b1:73:8e:31:
         25:59:ad:8c:06:98:54:90:2d:e5:3a:d3:90:60:f6:61:c0:de:
         79:2e:f9:41:62:62:bf:3f:76:88:ed:35:35:de:9f:b9:28:00:
         09:ca:e4:67:1d:35:5a:1f:68:1d:3d:50:59:f4:58:3d:85:96:
         65:59:7d:1f:76:6b:d0:df:06:5f:94:a7:df:e4:0f:b1:d0:99:
         9e:d0:8e:c2:6b:ff:86:85:58:2c:84:aa:27:3f:d0:19:86:90:
         b2:77:fc:b6:2c:ff:23:93:97:fa:ad:45:41:b2:86:0f:26:1e:
         e9:7e:ec:1f:0b:35:87:85:62:12:fb:d1:88:e9:e2:3c:97:c5:
         e8:a2:71:33:28:e2:e2:c2:2b:36:b5:cd:a9:2c:04:e1:6b:ab:
         0c:cd:cd:2e:21:d1:5c:7c:fb:57:d6:9e:98:6e:eb:0c:06:f9:
         90:7c:51:e8:a2:35:20:b0:d2:d1:8c:d9:4c:7c:e9:7f:9f:36:
         68:b0:43:18:63:7e:23:05:c4:33:c3:6f:75:2a:5f:65:c6:74:
         6d:df:0c:0b:67:f2:83:46:8e:59:de:47:f4:a9:76:a5:3a:e5:
         8a:5e:40:6d:0d:31:0c:40:14:79:c0:21:6e:b8:30:69:d1:d9:
         25:f0:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 10:18:25 2026 by rpki-client