Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          dzMvjaghseljGmWm7OBC5SuO8xU6oHns1KPq+XRUMxs=
Subject key identifier:   3E:70:69:90:A9:54:46:7B:4F:A6:CE:41:9C:43:E5:2B:74:DB:5A:4B
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          41
Signing time:             Sun 01 Mar 2026 09:51:51 +0000
Manifest this update:     Sun 01 Mar 2026 09:51:50 +0000
Manifest next update:     Sun 08 Mar 2026 09:51:50 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: gPaKaMydpQkuCRPeQ9Kly9fmhBcjeB4+9EwWkQz6Ndk=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: RKJiWEFRRxfC255nnKMBMyY+0j0SvD2OXb6aSU3b+vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: Mar  1 09:51:50 2026 GMT
            Not After : Mar  8 09:51:50 2026 GMT
        Subject: CN=69a40c37-1f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:29:23:06:19:8e:11:6f:c5:c8:ff:ab:29:
                    04:64:cd:7c:cb:c9:f8:db:1f:39:4b:01:17:2e:1a:
                    0b:e9:b7:c7:1e:07:7c:69:2a:26:7e:43:60:c3:8a:
                    27:db:d9:d1:9e:3d:54:c1:af:9a:cd:65:bb:e6:04:
                    b4:3e:3d:52:63:13:37:4d:19:c7:7c:25:16:5b:d4:
                    4f:c0:9a:b1:8a:52:ab:f6:d8:ff:88:ec:72:e9:19:
                    59:dc:81:e6:72:40:6a:66:83:58:81:c6:26:73:ca:
                    fc:81:2f:86:ed:4b:61:55:de:cb:ac:11:de:5c:2e:
                    5f:b4:ff:47:3f:55:98:2d:95:6c:b0:31:79:f6:1a:
                    13:f5:51:8f:86:86:a0:9f:af:a7:b9:b6:27:6f:8a:
                    c3:2a:32:97:a4:b7:85:28:bd:4f:a1:73:ef:ad:38:
                    28:34:77:f6:8e:f3:68:b1:29:f4:b9:7d:e6:44:b8:
                    62:c9:9a:30:76:e9:63:c1:18:fb:03:5f:9a:57:c6:
                    c3:0a:9e:c0:e8:14:e2:97:f8:ea:36:a0:f1:cc:c8:
                    e8:23:13:ab:9a:7e:be:a4:6d:d6:cd:29:2e:90:39:
                    e2:45:72:bc:70:21:77:fd:24:84:78:87:28:1f:b2:
                    cb:91:af:03:af:cc:8e:2c:b5:fa:d1:98:5a:a6:7d:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:70:69:90:A9:54:46:7B:4F:A6:CE:41:9C:43:E5:2B:74:DB:5A:4B
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:b8:8f:11:50:d3:48:04:40:47:30:ff:36:c1:59:53:1e:
         37:6d:c4:5b:09:46:88:01:17:75:2f:1a:b6:10:14:dc:3c:6a:
         1d:81:ae:af:d6:cd:8a:01:59:cf:2a:db:eb:c4:e7:28:69:01:
         87:5e:21:45:1d:07:bd:bc:10:00:7a:05:6c:cb:7f:94:74:00:
         33:dc:51:39:36:c3:61:2b:84:3c:30:cd:1f:f8:70:34:22:49:
         c9:80:7f:d4:30:15:a7:9f:3e:1b:74:6f:a5:e8:52:3a:51:0c:
         53:a3:88:96:57:6a:69:09:38:41:05:20:62:68:84:b9:e8:df:
         42:13:7e:df:e7:ce:80:ab:f0:a5:0c:b4:be:60:da:2f:02:43:
         1f:69:9f:f8:c6:91:7f:bc:f2:26:88:9a:02:08:08:09:4a:d1:
         26:95:42:2c:be:6a:bd:2f:18:c7:0c:20:15:c1:36:c9:54:fe:
         3c:a4:3a:41:b2:54:be:85:36:d6:a0:58:44:a6:af:03:b3:1b:
         96:78:ab:32:66:f1:ff:5b:84:ea:86:3a:3c:3a:a6:6c:31:c9:
         6d:d1:d9:df:a4:59:72:8a:00:5f:78:5c:ae:2e:7c:69:87:26:
         3c:c1:9a:89:21:85:9a:c5:0d:f5:e6:32:b8:42:60:a6:b9:3f:
         83:5f:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:32 2026 by rpki-client