Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
File:                     pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json)
Hash identifier:          CYTaA6UixI72Oo49zJAxFlj/gbQtETSQrD6p0hHDGW8=
Subject key identifier:   14:70:12:FE:12:C5:B2:D5:0E:97:65:38:13:2B:47:7A:DE:48:84:4A
Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05
Certificate issuer:       /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
Certificate serial:       05EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
Manifest number:          05E6
Signing time:             Thu 16 Apr 2026 22:51:26 +0000
Manifest this update:     Thu 16 Apr 2026 22:51:25 +0000
Manifest next update:     Thu 23 Apr 2026 22:51:25 +0000
Files and hashes:         1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: l6l+fa8A8gdp6TRjXrM+5dhAsvI+iNu0HFBAAbqJp7Y=)
                          2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: aqvU+UiVz5EiQm3aVLx9pIrD5pXO9qkeQ5aR6UKmmFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl
                          rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105
        Validity
            Not Before: Apr 16 22:51:25 2026 GMT
            Not After : Apr 23 22:51:25 2026 GMT
        Subject: CN=69e167ee-d376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:3f:82:ae:f9:91:49:06:88:bf:6b:bc:11:
                    db:05:57:8a:ee:e1:b4:8f:aa:7b:b8:ce:cc:60:38:
                    e6:71:82:38:23:2e:5d:71:dc:87:7c:c0:08:b3:16:
                    8c:d9:62:04:5e:d1:5a:68:48:76:14:dc:86:3d:06:
                    db:c0:ff:c3:a6:d1:1e:b6:6c:4c:5e:3a:fe:d4:23:
                    c7:b9:2c:89:c7:f3:ff:1d:f9:98:4a:08:ef:82:02:
                    63:ac:43:2b:eb:93:0b:7c:a9:2b:46:8e:15:18:56:
                    66:54:14:a4:d1:e5:ae:b9:d0:8e:ee:9b:fe:3f:ed:
                    9d:7e:54:2e:86:1f:12:35:38:5b:3a:9d:32:a1:f1:
                    a7:eb:c6:8e:b2:be:88:cf:c0:65:fa:0d:dd:a3:5d:
                    b3:34:3c:6a:26:dd:f0:07:e0:e5:a5:66:d2:3f:99:
                    87:17:0b:f6:69:2f:95:fd:0c:a0:97:0f:12:f7:62:
                    e6:1f:49:78:1c:17:0c:43:75:fc:ad:77:f9:4d:cf:
                    7b:7e:a4:d3:6d:7b:a0:75:fc:6f:4c:70:62:8d:0e:
                    bc:df:22:9c:2a:48:b3:9e:89:cd:ba:1a:d2:e4:b9:
                    5c:6b:c3:62:9f:f6:18:ad:26:b9:31:e1:d8:55:e0:
                    a4:45:57:fc:82:b4:62:d3:03:fb:1b:d3:e0:10:1a:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:12:FE:12:C5:B2:D5:0E:97:65:38:13:2B:47:7A:DE:48:84:4A
            X509v3 Authority Key Identifier:
                keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:46:64:f8:f9:fa:43:f3:f9:e8:fc:4d:45:ea:99:10:8a:7b:
         60:13:07:ca:6a:11:1c:2b:0a:75:cc:42:80:27:fe:39:11:20:
         3f:1f:52:76:6a:26:6d:4d:c4:94:39:64:24:9e:22:1f:d2:a9:
         7f:61:00:bf:37:61:8b:45:84:4e:56:3d:f2:35:5d:94:c8:67:
         d6:91:0d:81:15:6f:0e:c4:f9:6b:99:17:a9:ed:59:82:9c:c0:
         9b:90:bf:d9:1c:ce:80:82:80:85:62:85:4f:8d:2b:c2:d9:31:
         02:aa:c3:a1:4d:53:60:c6:9b:d7:3c:bc:e4:13:9f:b3:70:11:
         8c:8a:cd:b0:02:2f:b3:dc:2a:dd:ea:9b:ae:23:c0:6c:54:77:
         79:1a:8d:46:57:dc:60:70:8c:65:8b:57:69:0e:08:6a:c2:fe:
         19:b3:1b:a1:db:7b:72:3c:9f:2d:ac:d4:84:54:49:51:60:70:
         a5:c2:03:cf:54:ec:a7:96:2d:a4:c0:9b:d4:a0:85:ad:96:db:
         ca:fc:0e:1b:29:c4:d3:cf:5b:51:61:e6:0c:63:a6:3a:05:9d:
         2c:cf:c5:8c:90:78:76:c4:35:a5:95:c2:85:4d:ed:ba:69:cb:
         53:be:b3:15:f0:d5:34:c5:76:40:88:ab:69:27:5c:9f:41:c8:
         ca:f1:ac:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz
RjgxRjgxMDUwHhcNMjYwNDE2MjI1MTI1WhcNMjYwNDIzMjI1MTI1WjAYMRYwFAYD
VQQDEw02OWUxNjdlZS1kMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3M/gq75kUkGiL9rvBHbBVeK7uG0j6p7uM7MYDjmcYI4Iy5dcdyHfMAIsxaM
2WIEXtFaaEh2FNyGPQbbwP/DptEetmxMXjr+1CPHuSyJx/P/HfmYSgjvggJjrEMr
65MLfKkrRo4VGFZmVBSk0eWuudCO7pv+P+2dflQuhh8SNThbOp0yofGn68aOsr6I
z8Bl+g3do12zNDxqJt3wB+DlpWbSP5mHFwv2aS+V/Qyglw8S92LmH0l4HBcMQ3X8
rXf5Tc97fqTTbXugdfxvTHBijQ683yKcKkiznonNuhrS5Llca8Nin/YYrSa5MeHY
VeCkRVf8grRi0wP7G9PgEBoAFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRwEv4S
xbLVDpdlOBMrR3reSIRKMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz
RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt
UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE0Zk+Pn6Q/P56PxNReqZEIp7YBMHymoRHCsKdcxCgCf+OREgPx9SdmombU3E
lDlkJJ4iH9Kpf2EAvzdhi0WETlY98jVdlMhn1pENgRVvDsT5a5kXqe1ZgpzAm5C/
2RzOgIKAhWKFT40rwtkxAqrDoU1TYMab1zy85BOfs3ARjIrNsAIvs9wq3eqbriPA
bFR3eRqNRlfcYHCMZYtXaQ4IasL+GbMbodt7cjyfLazUhFRJUWBwpcIDz1Tsp5Yt
pMCb1KCFrZbbyvwOGynE089bUWHmDGOmOgWdLM/FjJB4dsQ1pZXChU3tumnLU76z
FfDVNMV2QIiraSdcn0HIyvGslw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:55 2026 by rpki-client