Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
File:                     PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json)
Hash identifier:          gQqRC6ky1Qa/kwtHvtoXUIdW2UgvmPxWiGsxx43Y6hQ=
Subject key identifier:   70:02:4F:75:F8:CC:2F:79:C8:25:64:8D:64:12:F0:3F:15:76:86:A6
Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C
Certificate issuer:       /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
Certificate serial:       1F83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
Manifest number:          1F74
Signing time:             Mon 02 Mar 2026 03:11:31 +0000
Manifest this update:     Mon 02 Mar 2026 03:11:29 +0000
Manifest next update:     Mon 09 Mar 2026 03:11:29 +0000
Files and hashes:         1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: PObRIGioC1hzO+/6doP8wSFPMJyYfY/vPE+vO2YrNVE=)
                          2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: YSudnO+gxDW3KLQoZtaYLWQrz8EP6UlH+aQ5JWb2Q0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl
                          rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8067 (0x1f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C
        Validity
            Not Before: Mar  2 03:11:29 2026 GMT
            Not After : Mar  9 03:11:29 2026 GMT
        Subject: CN=69a4ffe2-8651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a9:c2:6e:ae:3e:c0:59:53:68:1e:a1:38:21:
                    90:df:2e:b7:b0:7b:45:aa:cd:ed:e1:cd:41:1b:81:
                    26:83:93:c2:94:ff:c0:83:a9:00:9a:98:85:61:f5:
                    88:fc:a7:28:f4:fb:f6:45:89:6b:80:8b:2d:f3:3f:
                    5c:d0:dd:50:1c:5e:b6:c9:af:36:fc:9e:30:7e:db:
                    82:bb:8a:0e:67:dc:9c:d3:75:3b:73:69:f9:d2:9b:
                    9c:db:c1:7a:6a:72:ff:3a:d9:75:cc:ce:9e:0e:da:
                    69:87:f4:fd:23:ee:ce:26:1c:fd:51:db:01:a4:f2:
                    3c:21:ea:3c:bd:cd:ce:8c:ba:6f:a8:3a:2f:25:1a:
                    17:7c:00:0f:4f:27:2e:ff:d6:ea:41:3e:e5:4d:4c:
                    38:d3:71:b1:41:83:b5:28:65:21:06:30:dc:3a:74:
                    d0:72:37:12:46:4b:06:f4:0c:7c:9e:6c:c0:37:5b:
                    a9:e8:9a:c9:91:bb:d5:d1:45:6e:f0:d5:4d:cb:97:
                    4d:6f:6d:37:27:85:05:f2:3d:d6:5a:7d:af:ff:79:
                    97:58:f6:3b:b4:b4:e8:97:38:e9:c1:13:0c:29:0f:
                    30:d5:b3:0b:81:8b:21:09:19:77:75:6f:07:d4:38:
                    54:66:b2:d1:c8:2a:6d:9c:32:c3:14:77:15:0e:85:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:4F:75:F8:CC:2F:79:C8:25:64:8D:64:12:F0:3F:15:76:86:A6
            X509v3 Authority Key Identifier:
                keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6e:a6:ee:37:89:eb:1d:ce:df:b5:ea:cd:15:7c:1b:40:14:
         52:be:3b:d7:34:82:e0:b0:ca:66:44:51:2c:7d:2e:fd:a0:c9:
         ba:f9:7e:ca:cf:0a:51:47:2d:fd:5d:45:5e:f0:3e:da:93:ef:
         9d:8d:fd:06:4a:1a:55:cf:bd:ad:4f:49:2a:63:ca:d5:c7:80:
         85:4e:25:10:61:93:81:07:a8:d8:55:70:70:7b:73:cd:f0:5b:
         6d:9b:96:dc:51:22:ae:ba:bc:88:03:bd:25:ec:02:8d:a1:d0:
         f7:9c:ec:06:d5:26:9b:65:6e:11:b7:20:69:81:38:1d:a2:bf:
         7e:a8:6f:18:e9:b8:5d:66:d9:5c:3e:90:29:52:be:e6:a2:37:
         15:19:d1:45:73:0a:a2:be:1d:33:8e:68:f3:0c:05:21:5d:df:
         12:26:49:63:a4:a7:92:a4:05:9e:7e:94:28:73:da:86:aa:66:
         d8:86:91:3d:99:6d:c9:19:fd:54:d4:3e:9a:28:49:72:26:bd:
         b6:60:cf:37:3b:9f:bf:c5:a2:6f:5b:8f:35:4d:a5:22:98:05:
         4c:1f:5d:65:90:42:40:30:d2:4e:8f:85:a7:bc:b2:99:ab:22:
         b2:07:2e:db:c7:3e:e5:fe:72:c8:8b:ba:7a:cb:d5:54:cb:9c:
         ee:2b:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:58 2026 by rpki-client