Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File:                     PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier:          1RYLQNZBrVlcuoCrOqr6x2myqQclUCi78shAl+IBsXg=
Subject key identifier:   91:29:F1:6F:FF:2B:6B:98:15:47:C8:50:F8:57:CD:DC:84:BA:20:A2
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer:       /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial:       0C22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number:          0C13
Signing time:             Thu 16 Apr 2026 18:43:04 +0000
Manifest this update:     Thu 16 Apr 2026 18:43:04 +0000
Manifest next update:     Thu 23 Apr 2026 18:43:04 +0000
Files and hashes:         1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: WHsLAZAjc0uQkP7R+D5lVxZ4X1kirrDOyxhJ8U7MiMk=)
                          2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: QVQjppxIf7FR3SX2qv9C8LVzY09VQzhRkuQFcU373rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
                          rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3106 (0xc22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
        Validity
            Not Before: Apr 16 18:43:04 2026 GMT
            Not After : Apr 23 18:43:04 2026 GMT
        Subject: CN=69e12db8-a034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:89:81:92:e9:ff:4d:01:a0:ce:2a:a3:41:
                    e1:d0:06:00:70:c8:b0:2c:33:ca:6d:81:7d:6d:c3:
                    ef:4d:88:44:b7:b1:53:2e:6f:4e:91:95:30:bd:39:
                    27:6f:07:cc:4e:a7:5b:82:b1:7c:00:31:7c:0a:a9:
                    c5:a5:72:8b:94:1d:85:cb:97:85:56:03:14:f5:a1:
                    13:3c:08:a1:60:81:58:c2:d2:f2:b8:aa:d0:e9:de:
                    00:3b:f1:36:1d:47:2d:f8:05:28:c1:d6:9c:01:d9:
                    c5:0d:94:56:c2:db:ac:d9:69:31:de:95:ef:08:80:
                    5b:10:3c:33:6b:70:cd:69:83:a4:d2:dc:bc:d1:e6:
                    62:6d:b0:41:08:68:69:50:67:1b:ff:50:e0:7f:92:
                    0c:3e:26:e3:4a:78:0b:f8:d1:ec:21:b5:eb:9f:26:
                    f6:21:01:1c:79:95:0e:f0:f0:f3:16:b2:bb:b5:3d:
                    c7:92:f9:ee:b9:48:7a:2e:1d:ad:2d:d7:9b:c6:d3:
                    2e:df:3c:29:ae:13:4f:b3:a6:1a:e4:09:f1:d8:1b:
                    ad:2e:e8:05:a4:27:4e:40:ad:df:8e:02:ce:ef:be:
                    af:dc:c2:b0:16:c0:53:74:54:0f:bf:4c:4f:6a:32:
                    9e:57:cc:54:d2:f3:75:7c:a1:95:8f:5b:51:30:a2:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:F1:6F:FF:2B:6B:98:15:47:C8:50:F8:57:CD:DC:84:BA:20:A2
            X509v3 Authority Key Identifier:
                keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9b:e9:44:1c:7a:0a:72:36:ac:1b:df:9a:93:e8:82:1e:13:
         07:8b:da:66:cf:f5:d3:39:08:52:c9:ce:af:60:80:80:16:5b:
         60:55:40:d8:9a:ed:79:fc:a3:00:82:63:b3:bb:0f:92:43:b2:
         51:52:34:d7:40:39:e9:9b:fa:2a:20:e5:82:7c:a5:c5:cd:1d:
         00:1c:f9:8c:b1:4f:a0:f2:1a:ab:a6:0d:21:49:46:4f:be:93:
         ee:87:93:35:b8:ca:f3:c7:11:b4:8e:4d:0e:af:6e:bf:ef:15:
         14:02:4b:ff:fa:46:3e:08:fb:61:f2:06:48:b4:69:97:5f:9b:
         d5:1d:54:09:6f:0d:d1:b8:e7:95:b5:b3:52:87:72:f1:9d:4f:
         05:c2:b9:52:5c:b7:fd:48:d1:32:a7:7d:c0:ff:f8:08:fb:a9:
         1b:1e:1d:de:10:d7:cd:a5:56:15:4a:d1:54:e8:c9:a1:73:5c:
         bf:12:d2:64:f9:f8:1d:b4:c1:d6:2b:93:0b:65:1a:0e:3e:fe:
         7c:46:ba:3e:66:91:15:50:35:15:39:08:d4:47:29:66:f9:30:
         9c:2b:2c:90:b4:6a:d3:92:7a:db:93:99:cd:7e:a8:06:35:96:
         7e:76:49:2d:72:51:1b:31:74:76:da:09:86:ac:e3:17:d8:6d:
         12:d5:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:47 2026 by rpki-client