Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File:                     PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier:          NPcTDyDtrkdA1bW5UgqJqtU0nwc+YM0SI7er+xi1xw0=
Subject key identifier:   91:F1:A5:FD:87:D6:8E:BB:FE:80:62:27:91:D2:80:A6:AC:E2:C8:B3
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer:       /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial:       13ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number:          13E1
Signing time:             Sat 28 Mar 2026 16:52:53 +0000
Manifest this update:     Sat 28 Mar 2026 16:52:53 +0000
Manifest next update:     Sat 04 Apr 2026 16:52:53 +0000
Files and hashes:         1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: ru5ju5sKAj2KwXDyvFWfQHobN19hvrf6vKvHWy0UhiI=)
                          2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: e/sxyJRteUlZkrdIehzRHhMrqCqj1svkbZ25KtJI2TY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 16:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5101 (0x13ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
        Validity
            Not Before: Mar 28 16:52:53 2026 GMT
            Not After : Apr  4 16:52:53 2026 GMT
        Subject: CN=69c80765-0ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:4a:1c:87:73:8d:29:aa:e3:0f:86:22:31:
                    92:78:88:aa:da:94:f0:61:53:54:f4:dc:27:b5:58:
                    87:04:85:d5:00:7d:10:4b:9d:0a:21:d9:7f:73:57:
                    c4:fa:6a:a5:2b:83:87:1c:04:06:d8:54:7f:25:d7:
                    d8:74:f3:58:68:28:3b:27:42:ef:37:87:64:94:c5:
                    ca:bd:40:58:dd:da:60:d6:38:2b:b7:40:54:88:8e:
                    3c:da:77:57:a0:23:e2:72:dd:eb:e9:f2:ca:6a:42:
                    52:e7:20:45:62:d2:52:c5:23:b7:af:10:09:3d:44:
                    04:b3:a7:ed:38:c5:6c:d9:f0:1e:02:55:a7:d9:ec:
                    a9:88:5b:1b:dd:92:e8:88:a0:47:38:a6:72:2f:d2:
                    d4:c5:34:7d:9f:cb:b8:10:28:73:c8:0d:e2:9b:a9:
                    84:89:74:40:c9:44:68:8f:9d:d1:fd:38:a2:3e:91:
                    01:25:00:35:9b:c5:e4:62:c2:d1:3c:9a:ce:4e:ce:
                    46:96:ca:d6:86:a2:d9:db:dd:0d:14:2a:ee:51:04:
                    f6:36:f5:55:bf:69:2c:bb:89:e9:2d:8d:7a:c6:d3:
                    f6:94:1c:e3:2b:e8:42:38:13:12:5b:6e:3c:c5:73:
                    56:ee:78:e9:60:2e:d5:ec:98:13:14:20:f1:fc:70:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F1:A5:FD:87:D6:8E:BB:FE:80:62:27:91:D2:80:A6:AC:E2:C8:B3
            X509v3 Authority Key Identifier:
                keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:68:3d:28:2b:f8:7b:18:fe:e2:bf:95:8e:32:71:a5:2d:
         ba:05:a4:06:0a:2b:8f:c6:87:5b:c5:dd:28:c2:23:01:7a:4e:
         63:0d:29:21:9f:96:b0:cc:0d:8a:56:01:6d:5a:14:a1:ff:d1:
         b2:ae:4c:f1:5e:73:09:c6:84:e4:cc:35:90:36:02:ad:8f:d0:
         2c:88:21:00:08:11:7a:96:a9:19:bd:e5:71:af:58:ce:24:4b:
         42:fa:d6:75:73:97:ea:c2:27:5b:8f:17:3a:20:9b:9c:7d:3c:
         05:9f:49:76:9a:cc:58:73:f9:70:b4:05:17:22:f7:a7:aa:16:
         94:78:97:2b:f0:39:26:3c:fd:63:9b:d6:14:a6:9a:8c:3c:2c:
         4e:48:58:af:97:53:19:94:b0:88:ec:99:f2:99:5b:b0:83:c7:
         1b:ed:32:f1:a1:75:8d:ea:c2:6c:8c:c6:4c:9e:1f:57:9b:49:
         df:fb:a7:0f:b7:1c:de:f8:39:55:91:80:36:aa:fd:36:e9:aa:
         d5:37:53:52:31:a6:83:09:3f:7e:ff:c7:f2:03:3b:2a:94:d2:
         2a:e2:dc:6c:4e:29:03:19:15:96:94:69:a2:90:38:8b:24:da:
         81:27:cc:48:9f:79:4b:54:d3:23:3d:3d:04:3d:ac:16:de:27:
         c9:24:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:51:19 2026 by rpki-client