Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          R9bYKF/UGcwWVhi5jikk+pfAn+pUgqC8/mzCAsvSBSU=
Subject key identifier:   3A:1E:09:9A:EC:CD:DF:B5:D5:32:6B:A3:EE:75:18:A8:F4:8F:26:42
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          0190
Signing time:             Sun 01 Mar 2026 05:14:57 +0000
Manifest this update:     Sun 01 Mar 2026 05:14:56 +0000
Manifest next update:     Sun 08 Mar 2026 05:14:56 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: PbUMV9hqfsVzUyQ7LACN8a2UyLYW3yIJf2ggvaldNPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: Mar  1 05:14:56 2026 GMT
            Not After : Mar  8 05:14:56 2026 GMT
        Subject: CN=69a3cb51-c6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:43:e5:48:19:99:11:c1:a1:11:79:e4:cf:
                    3b:68:5b:0b:44:08:b4:7d:c7:5b:c6:32:0b:a6:7c:
                    09:0a:83:bc:25:14:92:8d:25:43:dd:e9:81:57:80:
                    3a:40:e3:30:5d:d5:79:25:16:42:ac:94:85:f8:6d:
                    ee:04:5a:0b:97:b0:83:7f:b7:00:22:ff:c6:76:e0:
                    29:d8:0a:9a:b4:80:80:34:bc:d1:0b:46:7b:b2:ab:
                    70:ee:92:8a:cb:62:d6:13:84:e7:ff:fd:b6:3e:5d:
                    e2:ca:c2:7c:db:8c:8a:62:b5:e0:61:b6:86:5e:43:
                    ed:55:8f:b2:f6:56:d3:67:53:1f:dc:f8:a0:42:c0:
                    de:d6:4b:96:a3:2d:c2:e0:49:fc:36:4d:54:1f:c6:
                    5d:99:56:43:7d:be:8b:6e:f9:9a:f0:36:a2:b9:30:
                    b7:7b:08:67:86:8c:5a:5d:77:4f:cc:34:81:60:f8:
                    a4:6d:75:1c:2b:64:28:24:fc:8d:73:c2:be:74:88:
                    ed:24:dd:e4:74:aa:08:96:a4:a0:84:ed:ff:54:3d:
                    b7:1f:c9:a3:9e:38:19:52:77:52:21:23:f1:19:3e:
                    9c:a0:9b:2d:70:99:06:b7:c7:d8:e0:76:cf:db:ab:
                    43:4b:29:00:3c:10:0e:82:e2:87:05:92:10:e1:d9:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1E:09:9A:EC:CD:DF:B5:D5:32:6B:A3:EE:75:18:A8:F4:8F:26:42
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:d2:bd:c0:40:e5:35:fa:e9:e8:76:cc:97:79:2a:41:9c:
         30:81:6d:f3:92:c1:59:4d:11:60:67:7b:0f:e9:73:3e:e1:ec:
         0f:a1:44:a8:17:c5:06:69:85:89:07:0c:75:b8:c8:7a:53:a4:
         f1:c5:26:6a:c3:3b:3f:1a:34:c1:93:9c:a2:fc:0c:c0:33:7d:
         f9:ae:1f:e7:f2:cf:9f:da:c3:76:e6:38:8e:fd:6c:ac:17:63:
         61:86:96:de:a6:dc:92:c6:e2:54:fe:4d:12:e3:1d:27:bc:7f:
         b2:b7:da:df:d1:86:90:2d:bc:de:e7:e5:1a:79:a6:cd:4c:ed:
         fc:9a:bf:06:a9:66:5d:92:04:96:86:bf:69:46:1a:6e:d3:da:
         7c:76:bb:1a:ae:3c:5c:ee:d4:25:e1:ac:0c:26:67:c3:12:87:
         cb:08:1d:22:42:4d:06:02:b5:87:df:a1:ae:59:fc:a4:4d:41:
         a9:30:a1:1a:86:a6:88:7c:b6:b2:08:9e:31:42:c6:1d:bc:09:
         14:40:d1:2a:2e:6b:d8:47:f5:76:2e:8d:f3:d6:80:e3:8b:98:
         d5:1c:7b:ec:df:bc:43:fe:d2:ff:05:7c:b6:e5:4a:e4:e1:f0:
         a9:89:32:b6:c9:e2:e4:5a:38:1c:eb:09:10:dc:7d:71:9d:74:
         ea:43:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:12 2026 by rpki-client