Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
File:                     pslhETDFFnRVE26Fq_I2qqqTe60.mft (raw, json)
Hash identifier:          +5V5ilmaSy0dvf2jUq7PsyuY78rVZ2eqWoAn5hf+Sog=
Subject key identifier:   09:04:0B:44:C0:60:3E:99:06:B7:38:02:4B:AA:B7:31:D1:3D:62:B7
Authority key identifier: A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD
Certificate issuer:       /CN=A91C3DC8/serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
Certificate serial:       0CFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
Manifest number:          0CDE
Signing time:             Thu 04 Jun 2026 18:29:02 +0000
Manifest this update:     Thu 04 Jun 2026 18:29:01 +0000
Manifest next update:     Thu 11 Jun 2026 18:29:01 +0000
Files and hashes:         1: pslhETDFFnRVE26Fq_I2qqqTe60.crl (hash: SBRf5RQnoLxBWf1uoJ9KBnZqu8OgNSMA8DTafAK0g8A=)
                          2: D29DE1E6C98611ED8D5AE04CC4F9AE02.roa (hash: HmIlCNViGVQc0Khs8nRBOHgBuzDEV5/tZXqnnM3HNCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 18:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3325 (0xcfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DC8, serialNumber=A6C9611130C5167455136E85ABF236AAAA937BAD
        Validity
            Not Before: Jun  4 18:29:01 2026 GMT
            Not After : Jun 11 18:29:01 2026 GMT
        Subject: CN=6a21c3ee-314c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:42:b9:96:a9:aa:51:45:1f:12:e5:0b:20:
                    e2:b3:5c:e9:8e:2a:e9:5c:69:5b:f1:2f:1e:fa:dd:
                    c1:67:7c:71:3b:95:13:dc:32:df:9b:1d:6e:f8:5c:
                    c8:f0:4d:35:34:7e:ca:1f:e8:60:e8:ac:c2:65:2b:
                    cb:cc:bf:47:e6:ef:c8:11:62:e0:d6:5e:b1:bf:f2:
                    66:fc:d9:aa:55:ee:df:51:f1:e9:4b:eb:0d:14:46:
                    04:33:da:ee:5f:0c:60:67:d4:26:a4:79:fe:84:c6:
                    f8:39:06:f1:bc:b8:c1:b6:18:a1:c9:65:8f:f5:ac:
                    97:e8:57:e7:ff:d0:92:15:87:fb:88:ba:25:29:2e:
                    b8:d1:ee:df:1b:e4:b2:7d:97:db:a6:f0:c5:e1:45:
                    9e:95:7e:71:4d:56:19:f3:ca:16:6a:36:aa:0a:29:
                    9f:f1:c8:39:2e:f8:1b:bd:9e:2c:44:11:61:10:a8:
                    ca:55:5a:d9:d2:ef:f6:8f:c5:9f:01:a3:93:48:3f:
                    d9:5c:62:b2:05:50:6d:cc:e0:3b:64:b9:f5:54:41:
                    44:ac:43:0d:f2:8a:ed:d0:be:98:3b:ca:64:9e:52:
                    1c:04:50:ba:b9:89:18:30:5b:a1:b9:e2:3e:e8:26:
                    c2:85:d9:e9:82:fc:bf:4f:e1:54:9c:ed:1b:ce:8a:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:04:0B:44:C0:60:3E:99:06:B7:38:02:4B:AA:B7:31:D1:3D:62:B7
            X509v3 Authority Key Identifier:
                keyid:A6:C9:61:11:30:C5:16:74:55:13:6E:85:AB:F2:36:AA:AA:93:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pslhETDFFnRVE26Fq_I2qqqTe60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DC8/E5CAF93E11D811EAB7167C4FC4F9AE02/pslhETDFFnRVE26Fq_I2qqqTe60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:b0:3b:ad:02:ba:c9:7a:03:bc:f1:14:ed:d6:89:bd:65:
         47:21:c0:d3:80:fd:10:83:93:c4:18:6a:ab:cc:e3:27:7f:27:
         45:fe:1c:ce:2a:c9:c6:cc:8d:c3:10:90:96:dc:87:01:2d:57:
         f2:d3:ac:4d:46:89:d7:ed:71:b7:ca:22:13:d6:00:39:2d:b4:
         6e:1a:d4:e8:08:e7:e6:cc:b7:30:53:db:b7:11:28:f4:0b:6b:
         38:ae:24:2f:3d:9b:71:06:16:fb:ef:ca:fb:75:8f:f1:fb:7f:
         43:86:f3:a3:2c:98:b3:2b:a9:25:33:48:2d:ad:2b:c7:d9:1f:
         28:5c:d2:f9:a6:b5:ff:ee:09:33:59:35:41:a2:d9:ab:71:75:
         85:e8:b2:6e:cd:1b:ed:8f:00:e3:21:53:ec:1a:d3:99:66:0b:
         8c:bc:34:3d:66:45:95:cc:79:5a:8c:e8:65:48:40:bf:e6:8a:
         47:7f:ec:f0:67:47:91:fb:45:4d:30:d8:1c:de:9e:47:c7:d6:
         61:26:c0:de:c3:0d:b6:76:5f:d5:37:39:09:98:14:c3:ec:d5:
         45:da:25:0d:52:97:bf:2e:9a:bd:16:42:b5:1e:90:29:79:bf:
         8a:0b:2e:bd:08:4f:1b:67:0f:9f:93:b9:19:62:11:41:7c:42:
         7a:2c:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:10:57 2026 by rpki-client