Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
File:                     pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft (raw, json)
Hash identifier:          JOtHqqF9dEp5yEXdHQfPv2w+Z6BNfPK63mzpZLyMGF8=
Subject key identifier:   38:84:F6:69:32:D6:84:8B:62:08:85:B7:46:9C:D3:40:1E:29:0E:95
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Certificate issuer:       /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial:       0714
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
Manifest number:          0707
Signing time:             Mon 02 Mar 2026 01:10:05 +0000
Manifest this update:     Mon 02 Mar 2026 01:10:03 +0000
Manifest next update:     Mon 09 Mar 2026 01:10:03 +0000
Files and hashes:         1: pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl (hash: mRV/hxsswPq0BxMY5g/RDHv+w1kIFEuYwZQUvjtmMME=)
                          2: E84DCBC422D211EDAF1F924EC4F9AE02.roa (hash: pwlC3i6Dw77h4VjdOciKa1OoCdf0YqgEjmXujNfwxJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
                          rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131EDD, serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
        Validity
            Not Before: Mar  2 01:10:03 2026 GMT
            Not After : Mar  9 01:10:03 2026 GMT
        Subject: CN=69a4e36c-6802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:b2:cd:0c:87:2d:de:d9:76:e7:83:db:f2:
                    af:0c:5a:3b:1f:07:69:f3:4a:e2:6c:53:f3:2e:f6:
                    7f:c7:f4:e9:b9:28:e2:d4:cc:aa:41:3a:b2:37:10:
                    7b:5b:45:61:20:ee:4a:36:41:18:5e:cd:ff:d5:a2:
                    12:4a:be:8e:0f:97:9b:15:3a:cd:87:7f:7a:b9:11:
                    ef:dc:7c:ee:53:a4:90:f1:f2:c5:a9:7f:18:4e:b0:
                    55:ff:a6:cb:da:3b:95:57:b3:e7:61:73:4f:89:1f:
                    bb:4a:ba:8e:50:22:f2:f9:af:79:9d:25:f0:c6:78:
                    f3:94:34:f2:95:67:5f:e3:01:7f:36:08:87:6e:72:
                    6a:29:8e:11:60:00:59:56:a2:69:43:e2:25:13:d6:
                    75:c9:e5:42:f5:e0:04:79:a0:99:ce:53:f6:6e:69:
                    28:3a:88:ec:8f:6f:bd:4a:8e:6e:25:48:b3:c4:a6:
                    56:f9:9c:b7:1e:d3:34:12:00:6d:41:d1:59:3b:b4:
                    83:2f:47:91:81:cb:81:52:f1:68:b9:fc:4e:c0:e5:
                    d9:80:f0:e5:5c:23:19:a6:1b:fa:10:11:d6:63:0e:
                    30:dc:a7:b3:78:1e:b5:4a:2a:d3:b0:54:5a:f7:2a:
                    5b:32:95:00:cc:61:5d:57:af:bc:5f:9b:0a:b7:c6:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:F6:69:32:D6:84:8B:62:08:85:B7:46:9C:D3:40:1E:29:0E:95
            X509v3 Authority Key Identifier:
                keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:62:12:e4:3f:b4:e7:34:4e:75:a0:f5:cd:b3:f5:d0:79:
         c4:c1:cc:34:a4:9b:57:d1:bf:51:0d:e6:88:12:53:e7:4b:cb:
         0a:b1:48:8f:83:73:e9:c5:b6:ea:7b:de:55:12:dc:8d:d9:8a:
         a3:78:bf:53:ff:3a:38:a6:bd:60:b3:b2:bb:b2:86:4d:26:71:
         23:15:86:fe:ac:8a:a3:39:5b:89:86:64:a3:42:d6:87:7e:46:
         e4:fb:e4:d3:a0:a1:c8:2b:bf:c5:cd:95:31:56:5e:dc:8d:1e:
         41:0f:3d:52:4d:75:90:ea:e0:1c:f5:28:8e:de:34:82:98:f2:
         00:1e:96:91:23:bf:52:78:d8:37:ac:ff:78:86:a3:96:d3:57:
         28:7a:b8:9b:4f:b4:b9:0b:ce:0d:1b:07:a2:93:6d:bd:e9:e0:
         28:48:59:2f:43:cd:9d:be:d4:a8:8f:75:c8:1a:f5:83:c8:59:
         e6:7b:6b:3a:89:11:e2:3e:cd:39:17:a4:5c:53:ed:1e:ef:95:
         2f:c3:12:a5:76:db:fe:b7:9f:c0:0e:c2:b7:04:5a:46:9e:27:
         a3:ef:84:12:f0:e8:a9:76:79:eb:95:2a:52:a3:ca:c1:8b:6e:
         fd:8a:c0:b1:0a:41:75:9f:f0:38:09:fb:a3:1f:b2:ff:b3:7a:
         0e:18:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:56 2026 by rpki-client