Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          LjkDaKilgqZ5BAO0yIREKhFaAT0oVywgcLRo5chPaJ8=
Subject key identifier:   2E:73:66:69:59:23:9E:7D:0F:2A:D9:9C:97:A2:76:A0:80:21:49:A2
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          59
Signing time:             Fri 17 Apr 2026 07:50:03 +0000
Manifest this update:     Fri 17 Apr 2026 07:50:03 +0000
Manifest next update:     Fri 24 Apr 2026 07:50:03 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: Ejkix7W/sRKiQtwXsOaR1k8Af28PAKCgDIj0uZbwM+I=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: RKJiWEFRRxfC255nnKMBMyY+0j0SvD2OXb6aSU3b+vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: Apr 17 07:50:03 2026 GMT
            Not After : Apr 24 07:50:03 2026 GMT
        Subject: CN=69e1e62b-e6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:4c:d8:6b:3a:b1:af:3b:5a:01:96:0a:95:
                    fa:9d:ee:43:53:82:51:bc:d2:87:0e:46:8c:e3:92:
                    d1:0d:b9:37:46:96:93:e0:f6:2a:e0:e1:59:91:4f:
                    8e:9f:26:7f:0a:d9:b5:b5:6e:91:72:00:2e:a8:48:
                    43:b2:29:38:6d:fc:86:e5:df:f1:7f:c4:04:2c:8a:
                    6c:29:40:35:e4:29:04:76:05:13:d1:48:6f:ab:b2:
                    e4:d1:c0:05:ca:9f:dc:65:0a:59:c2:b3:31:51:8e:
                    b8:00:cd:7d:04:87:0a:9c:83:e6:26:3b:be:0c:e0:
                    db:44:cc:26:ce:0b:3c:32:74:53:fb:cd:1f:f4:ad:
                    97:b8:73:b5:61:cd:b7:ee:87:9a:9b:58:68:cc:4b:
                    ce:d0:a6:cd:62:67:ba:8e:55:dd:6f:52:d6:f9:3e:
                    fd:6e:c7:62:ef:fd:ff:b9:7e:43:7a:c0:4b:39:95:
                    4c:1d:30:98:c9:a3:6b:e0:42:2e:ce:ed:bc:7c:68:
                    86:c1:08:c9:35:48:0d:4a:78:9f:45:9c:86:2b:ac:
                    ac:89:bc:34:e0:3c:9d:c0:78:1e:46:a3:c2:f1:ee:
                    19:1b:1b:e7:0f:32:d5:c1:0d:77:2f:3f:cd:a3:f8:
                    fc:93:ad:a3:b7:0e:01:ec:2b:d1:18:e0:c1:8a:f7:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:66:69:59:23:9E:7D:0F:2A:D9:9C:97:A2:76:A0:80:21:49:A2
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4e:a0:ca:a9:f6:f6:fe:3a:d4:6b:9c:63:46:f0:27:2d:34:
         69:16:49:ee:7b:2c:68:d1:f2:b3:00:4a:4a:e3:17:da:90:66:
         71:15:38:16:ca:4b:8a:db:13:d8:73:0b:e5:a8:aa:4d:a7:0c:
         18:1c:7d:69:25:78:17:4b:0a:8a:54:53:3f:c3:35:15:d2:4b:
         91:02:1e:86:67:2a:aa:2b:2e:e1:3e:eb:7f:64:d3:89:a1:ec:
         f8:31:e2:af:38:b1:91:a2:89:87:3d:d2:47:9b:72:cf:37:70:
         a4:b9:fd:28:f1:cb:f6:78:f0:a0:64:a6:40:17:c5:d9:bd:e3:
         35:4d:65:ff:5e:3a:14:14:48:ef:f3:36:de:a0:4b:f4:2e:8a:
         94:9c:fd:98:14:20:2d:62:d4:3b:df:97:88:e7:de:58:63:b3:
         e5:a5:7a:b8:83:3d:93:66:fa:6b:38:ef:09:7f:fb:38:7c:2f:
         bd:3b:35:a3:09:b1:4d:19:cf:e3:8f:11:56:f6:61:91:a0:15:
         6b:80:c5:32:28:82:3c:90:af:27:ee:c6:f5:e9:0f:25:5b:5b:
         7f:dc:25:7f:51:5b:ae:dc:03:d3:00:8b:bf:2c:60:63:85:6d:
         85:e8:d0:78:be:d2:9e:4b:e3:5b:73:f6:12:83:6f:27:77:3f:
         59:ba:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:33 2026 by rpki-client