Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          o76vw25/dCO6ZmS9adb3jcX0/UD89LWQvSDyfQxWysQ=
Subject key identifier:   4C:36:13:1E:C6:87:9F:0A:43:2B:9A:96:F3:3F:17:40:52:10:FE:4D
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       355E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          3549
Signing time:             Wed 20 May 2026 15:08:38 +0000
Manifest this update:     Wed 20 May 2026 15:08:38 +0000
Manifest next update:     Wed 27 May 2026 15:08:38 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: qOGsNH56+rYm9Rb/D0iqrq2arlH9BXKwa43AhZ6agXQ=)
                          2: BC3EBE062E5B11F1A895088A9B833773.roa (hash: 7hRmAxI1zCBqDLioBHVfEw+Ax2fyJalt+hg/8ZM+HUQ=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: bpfhYxtir2ry1hugzglFDH+ZPqZEnnOPHqDserf2jPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13662 (0x355e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: May 20 15:08:38 2026 GMT
            Not After : May 27 15:08:38 2026 GMT
        Subject: CN=6a0dce76-2572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1b:ed:ea:31:72:e3:7c:b3:fd:60:b1:12:66:
                    d6:32:c4:16:62:77:de:01:25:bc:46:cc:53:89:86:
                    1c:8e:54:49:2b:31:83:64:68:b6:22:e1:c2:33:d5:
                    06:02:cc:ad:dc:26:8d:88:23:8d:53:54:52:7e:f1:
                    e7:fb:e7:a8:86:51:42:3c:7f:e8:3b:cd:b8:92:4d:
                    6c:2a:2b:f2:48:ab:df:60:e3:23:ee:92:cf:ce:4c:
                    3d:89:bb:91:90:95:2f:d7:4c:cb:bc:ca:7b:62:43:
                    73:87:93:a2:8b:4a:6e:6b:5f:bf:99:db:bd:7d:25:
                    61:58:1f:94:89:0c:bf:8f:17:6b:e1:eb:53:44:df:
                    ef:57:ac:7b:a7:03:c9:5f:cc:48:ef:60:dd:fe:0d:
                    f5:db:4b:7a:cc:07:21:5d:a4:70:92:bf:1d:e2:9d:
                    f8:34:88:85:21:3a:e9:fd:30:0f:67:ce:4b:e0:ab:
                    3c:12:10:62:2d:fa:99:3f:e6:27:1c:7b:a2:d8:3e:
                    fc:77:f1:7c:42:e9:d6:75:36:03:bd:87:e5:b8:c4:
                    dc:73:1d:c9:b0:b4:e9:4f:f1:06:9e:a5:09:4b:a2:
                    d2:96:af:96:b7:15:91:22:16:7f:7a:87:b6:5d:6f:
                    a9:9c:4b:f7:2b:d5:af:6d:78:ef:76:07:2d:5b:7c:
                    19:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:13:1E:C6:87:9F:0A:43:2B:9A:96:F3:3F:17:40:52:10:FE:4D
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:97:ca:fb:39:60:a3:f5:f6:05:9f:fb:c7:2f:08:87:e2:
         a9:79:a9:f0:48:63:db:08:fd:29:ba:61:29:01:dc:4e:a4:3b:
         43:76:15:3b:ca:fe:c7:51:6e:fc:94:2a:ae:21:25:a2:7c:4d:
         63:83:b0:a5:4e:74:e3:48:66:69:68:f6:d8:cd:a6:9d:23:55:
         c9:87:a6:5b:6a:30:23:6f:91:de:c2:75:7b:32:9a:45:e2:f7:
         03:3b:61:d0:e2:9e:80:d3:5f:25:c2:d9:25:64:b3:7c:96:57:
         69:4d:86:ab:dd:01:99:b8:4a:c9:d3:d8:b1:8f:4c:95:f9:d8:
         59:f4:78:fc:86:ef:fc:52:5f:e8:dc:ee:37:c3:1a:dc:ad:d9:
         7e:89:07:01:0f:8b:df:31:7c:10:7a:67:2c:34:b8:67:cb:23:
         10:5d:fe:14:c4:a6:31:c8:11:59:3c:66:62:df:39:7e:85:ec:
         03:a8:5b:fc:35:95:4e:12:b5:f5:a6:f8:6a:af:d2:cd:60:f0:
         5b:f0:4d:bf:28:a2:30:09:38:82:f0:02:ee:ec:8b:86:f0:09:
         48:1f:b5:4f:9b:98:79:d9:c1:82:66:b2:95:ee:a5:e8:5b:4a:
         6c:92:89:35:75:ec:b0:3b:ed:43:bc:95:23:96:1b:a3:a0:20:
         82:b8:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:30 2026 by rpki-client