Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File:                     PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier:          iFkBu6c0lsTJ0oQi3jD7MWNX2QFEv1Sx2kNQPneOpXY=
Subject key identifier:   6E:0D:86:BD:7C:69:F5:2F:F5:51:49:A7:A7:F5:84:86:0B:03:84:99
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       05EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number:          05E3
Signing time:             Wed 20 May 2026 23:03:20 +0000
Manifest this update:     Wed 20 May 2026 23:03:20 +0000
Manifest next update:     Wed 27 May 2026 23:03:20 +0000
Files and hashes:         1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: pmnUkMIBH708GurVawnEdICPfEiU60cLuXoZ6YvvkUE=)
                          2: EC7B7E82DFD811F08F00FF64536F56BC.roa (hash: GBcRPAk26rh6dyuaJcennk1M9baT+ZU2RXBW85It44s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: May 20 23:03:20 2026 GMT
            Not After : May 27 23:03:20 2026 GMT
        Subject: CN=6a0e3db8-9f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:09:7f:50:8e:2f:99:33:d4:ca:75:30:c6:
                    42:16:89:26:6e:4d:6b:84:95:76:18:ba:3b:91:ab:
                    fb:36:c0:51:c1:ac:ed:98:27:23:d1:12:d9:89:2a:
                    e4:bc:a3:a4:93:f0:eb:f0:be:24:ac:b3:23:aa:0e:
                    2c:ab:90:6b:05:a8:db:da:a1:5e:73:88:df:6a:a7:
                    bd:9f:00:07:20:b8:bf:c5:19:4e:93:89:ee:cc:46:
                    dc:78:34:3e:d4:de:c9:6b:0b:36:c8:52:dd:3b:b5:
                    3f:74:8c:9d:c1:0f:e8:7d:70:64:4a:83:97:bc:45:
                    66:16:22:d3:11:33:d1:fc:8e:bd:b1:95:37:b5:4e:
                    ad:32:9f:5d:3d:0e:fe:a9:a7:14:62:50:06:88:e4:
                    38:68:b0:b9:53:50:8c:c8:57:78:42:7a:c1:67:35:
                    7a:5e:6f:97:51:55:80:c0:63:04:e1:67:90:a7:2b:
                    0a:24:52:24:7f:61:f1:21:0d:50:92:ec:41:bc:de:
                    f5:79:e7:6f:90:9d:6b:9a:bf:df:81:33:2a:2a:40:
                    93:22:c6:a1:2b:d2:08:30:23:ad:1c:7d:c8:09:71:
                    13:c2:ff:81:cf:00:bc:be:a8:39:5d:54:db:53:9d:
                    7a:b4:8a:ce:c9:3f:d2:70:b7:9d:5f:19:26:fc:5e:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:86:BD:7C:69:F5:2F:F5:51:49:A7:A7:F5:84:86:0B:03:84:99
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:7c:44:e5:df:00:0b:43:90:37:6c:87:c9:3f:c0:ef:21:
         28:ba:49:10:04:7a:5d:51:ad:5e:0f:76:4e:99:68:20:8d:cb:
         5e:41:d5:96:cf:18:f7:4e:1e:76:d5:b6:a5:22:08:2c:dd:58:
         9b:7f:9f:23:b6:4a:84:06:2a:94:44:53:85:45:41:07:94:06:
         02:24:a5:da:1d:ee:44:a7:76:6b:70:fc:f6:99:1a:cd:2f:6a:
         e7:b1:17:43:18:f4:19:09:f3:83:30:82:9f:39:71:4d:75:f4:
         79:34:c9:44:7f:cb:b4:05:1c:01:88:b1:32:45:d7:bd:31:ae:
         c1:43:c0:b8:49:e4:4a:46:ae:45:73:3d:3c:43:6e:43:d3:aa:
         1f:cd:69:a5:0f:42:f7:48:0a:a2:74:60:c0:f3:c7:98:dd:53:
         78:86:72:c5:c2:a2:2f:27:85:31:f9:b4:9b:23:b5:99:bc:3e:
         c4:b8:8c:7f:c0:d4:21:f9:9d:ab:59:63:5e:91:83:92:52:b2:
         8f:e1:6f:bc:f5:76:88:a9:0e:57:4e:a3:23:a1:cc:e0:ab:93:
         51:ff:b9:4f:7c:ef:49:32:d5:83:84:00:5a:f8:c0:08:27:df:
         fe:d4:ae:44:be:e1:77:27:57:7b:29:2a:b5:44:1c:42:a6:af:
         b2:4f:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:39 2026 by rpki-client