Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          xCs13cxUXMNkb7PMEDexveim0qckZshF8QqaI20+Cd8=
Subject key identifier:   F1:48:DE:C5:C9:64:E0:BC:67:92:32:E9:42:B1:11:62:E1:78:C0:33
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0CDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0CBD
Signing time:             Sat 04 Apr 2026 18:20:50 +0000
Manifest this update:     Sat 04 Apr 2026 18:20:49 +0000
Manifest next update:     Sat 11 Apr 2026 18:20:49 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: IF4BFDQNOJ0BHEIcg69VoxX/aRE+NJl9jcmkf/yROz4=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: yKBY5dtVMLpQRhUTcp2VZm6caZpNLzephZvZ/kuQQbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3291 (0xcdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: Apr  4 18:20:49 2026 GMT
            Not After : Apr 11 18:20:49 2026 GMT
        Subject: CN=69d15682-258b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:48:b4:22:d8:13:90:27:98:98:61:14:a8:
                    a5:95:cc:95:93:af:70:15:63:89:11:a6:0b:86:ae:
                    44:ee:08:0a:e1:e4:93:7a:db:4f:4d:fa:48:58:a9:
                    a2:fc:b1:5c:77:11:2a:76:90:34:e7:0e:e1:49:f6:
                    75:e9:32:9b:9b:51:e5:3f:0a:9c:30:e3:bd:7f:a4:
                    df:6c:1e:10:15:79:bc:92:7f:d0:57:f3:ae:58:b1:
                    98:c4:b0:e2:ef:07:61:96:7d:a8:32:ae:b0:76:ad:
                    eb:56:98:d9:28:07:e7:32:1c:8c:5e:d9:e2:37:c9:
                    da:eb:87:51:bf:cd:88:1d:c7:e1:d8:34:f7:a9:d9:
                    14:e3:ab:e4:d5:e4:45:ce:67:0d:0f:8e:ca:91:81:
                    0c:37:5e:2d:d1:01:aa:41:0c:f3:a1:0b:05:fc:94:
                    31:77:73:09:64:9f:a5:ab:f1:1e:a7:2b:6e:4b:54:
                    c0:cd:80:92:bf:dd:ac:c8:cd:08:dd:7f:6a:33:5b:
                    69:1c:c0:28:58:72:3b:c3:af:06:ff:da:ca:bf:f9:
                    d7:8b:4b:33:f7:ba:42:77:7e:a3:fc:20:e1:1e:7d:
                    73:e7:44:cb:a1:e9:fa:75:cf:e6:53:41:a6:51:8f:
                    8a:0c:d2:6c:8d:df:5a:73:95:6a:09:fb:8c:30:04:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:48:DE:C5:C9:64:E0:BC:67:92:32:E9:42:B1:11:62:E1:78:C0:33
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:09:87:ac:87:82:89:87:e8:ae:fa:ff:f0:20:5f:5b:af:68:
         15:b2:45:00:a9:a6:9f:9d:a9:92:73:4e:74:b1:b2:8a:99:34:
         4d:c9:08:de:dc:1a:9d:18:01:d9:cf:92:7c:2f:03:41:33:0f:
         81:c8:b6:5a:c1:69:89:1d:0f:4c:83:de:dc:1e:af:72:af:7f:
         da:cc:39:0d:0b:95:fd:bc:d3:2b:6e:78:f1:33:58:0d:9d:bd:
         71:ce:40:63:7e:e7:f0:93:9c:f8:07:e2:7e:6c:f6:cc:59:68:
         65:95:a1:01:bd:72:78:6e:91:cd:c4:cf:7a:8f:b2:69:d4:21:
         35:99:e5:b6:ec:f7:54:31:27:a4:4a:a5:b5:31:bb:14:e1:bd:
         b2:c8:fa:9b:a6:27:17:0c:71:a6:e2:36:45:bb:2a:fa:be:31:
         e7:fc:31:2c:9a:c8:53:0a:15:9c:cd:b4:de:48:f7:81:72:d4:
         af:41:7c:e7:97:e4:2f:bd:e3:8a:f3:26:55:0c:9e:22:7c:9e:
         ee:4e:ea:c5:38:44:64:79:f7:95:0f:d8:e4:6f:3e:5d:ab:85:
         35:a6:7f:e2:62:42:bd:13:12:6f:e0:40:88:50:46:b6:4e:26:
         9c:23:13:38:7a:aa:55:df:ac:82:dd:37:bb:9d:23:e8:e7:10:
         42:39:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:35 2026 by rpki-client