Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File:                     _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier:          nAEP8QAQq7zAtCI/ha/Bni7kns+voD8bgBCkRbsYQYA=
Subject key identifier:   05:70:D0:3A:79:20:7C:E9:A9:9D:48:78:7E:F8:19:A8:B0:7A:DC:EA
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer:       /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number:          42
Signing time:             Fri 17 Apr 2026 08:12:02 +0000
Manifest this update:     Fri 17 Apr 2026 08:12:01 +0000
Manifest next update:     Fri 24 Apr 2026 08:12:01 +0000
Files and hashes:         1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: 4mpALJVRGdFzulzNER4/LVhEcJRmmYc+ag0NiJB3HMs=)
                          2: 3A5DE11AE17511F084EED35B3E6F56BC.roa (hash: nGjZghgPTQAKj7m8Hrr253DItDRqZimbCIH9cpE2W6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
                          rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
        Validity
            Not Before: Apr 17 08:12:01 2026 GMT
            Not After : Apr 24 08:12:01 2026 GMT
        Subject: CN=69e1eb52-4784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:8f:dd:3a:9a:ef:e9:06:59:dd:aa:96:3c:
                    5a:8a:2e:01:57:c3:26:07:5e:ff:20:31:40:ef:ee:
                    2c:4f:cb:12:60:4e:6a:ee:09:e2:b7:d5:06:ad:34:
                    29:1e:96:69:91:81:e5:34:e4:69:49:bb:fd:b1:a9:
                    8b:81:20:bf:04:62:56:4b:ce:a4:95:a5:0b:1d:bc:
                    89:3b:36:2b:dd:65:00:78:03:b2:77:60:55:85:0a:
                    8f:9a:7e:47:02:13:ad:ea:34:f2:74:d7:7a:d1:6a:
                    2e:88:a0:d5:7e:f6:70:54:f0:a2:8d:a4:f4:50:53:
                    05:db:41:64:fd:cc:00:9a:aa:f8:49:79:bd:9d:69:
                    90:8c:65:5f:b4:f8:3d:77:07:91:44:1c:ff:4e:a5:
                    bf:e0:7f:59:fb:22:b5:64:c7:05:b7:c1:57:2d:13:
                    fd:36:78:5a:34:ea:a8:5f:0a:48:6a:15:27:6a:d9:
                    9e:43:87:79:9f:7c:bc:7c:b1:23:9c:6e:80:e0:23:
                    b5:7b:25:c3:61:79:e0:d5:0d:fc:57:fd:04:2e:b0:
                    0e:93:2b:93:35:b2:fc:0f:4f:62:d3:9b:4d:d4:4b:
                    fd:84:39:4c:16:90:cb:b4:de:b7:d9:81:bd:39:52:
                    b2:12:1a:a8:3a:d9:2a:aa:5e:a5:4d:bc:ce:08:c2:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:70:D0:3A:79:20:7C:E9:A9:9D:48:78:7E:F8:19:A8:B0:7A:DC:EA
            X509v3 Authority Key Identifier:
                keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:17:c7:bd:38:20:6b:b3:af:a2:c7:4a:1c:6d:a5:be:77:
         4c:9f:dc:d1:6c:a0:5d:6f:86:86:1d:ff:bb:6b:d1:49:b6:28:
         fe:5b:77:13:d3:82:d4:a3:31:f3:db:92:82:5e:d0:4c:66:5a:
         53:29:a8:e2:7f:66:42:3c:0f:69:48:82:8e:c7:d3:d3:f9:32:
         ae:61:26:1c:8d:67:9b:19:85:5c:39:bc:b3:7b:99:22:9b:c2:
         75:ad:b2:9d:6d:91:fd:a4:14:6a:d6:1b:7d:3d:5c:98:65:c5:
         53:c2:9c:2b:f6:21:7d:de:90:93:91:5c:f8:c6:98:54:a2:0d:
         d6:47:35:3e:9a:72:05:06:3d:c9:aa:8b:f2:03:ea:3c:08:33:
         f5:85:f2:1a:52:76:57:2e:5f:f4:93:14:1e:ba:5e:32:fe:0d:
         32:00:5a:83:d6:9f:cf:45:c8:3e:0e:5c:3c:f5:a0:c9:ea:e0:
         97:bd:63:c5:2a:00:7d:0a:e2:2e:2f:0e:07:d8:a1:9b:c0:03:
         54:9a:fd:31:71:c2:2f:b7:6c:6a:be:21:08:08:51:a5:b3:3b:
         4f:44:1c:35:c8:10:d3:9f:7c:e8:6f:13:ec:1e:4e:c7:db:12:
         21:40:24:d4:ae:f5:17:13:89:d1:92:93:29:ae:1a:80:5b:f1:
         ec:32:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:03 2026 by rpki-client