Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
File:                     PzD_G7sm8QLtikdaS_vJQqHfMoo.mft (raw, json)
Hash identifier:          K5BpHuFIFCA/+LHV8Q+/zhv2OvqIiEIsek3o3tGm97Q=
Subject key identifier:   62:A7:35:8B:E0:31:A0:EE:15:AE:21:BB:82:5E:74:93:31:20:AC:84
Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
Certificate issuer:       /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
Manifest number:          46
Signing time:             Mon 21 Sep 2026 08:25:35 +0000
Manifest this update:     Mon 21 Sep 2026 08:25:35 +0000
Manifest next update:     Mon 28 Sep 2026 08:25:35 +0000
Files and hashes:         1: PzD_G7sm8QLtikdaS_vJQqHfMoo.crl (hash: 8oMNT/ZMpciBWuRFsMHVC16z8JJrX7FBwBEHM/+wGg8=)
                          2: 94B0F0DE4C0B11F1996C5785A4833773.roa (hash: 01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
        Validity
            Not Before: Sep 21 08:25:35 2026 GMT
            Not After : Sep 28 08:25:35 2026 GMT
        Subject: CN=6ab0e9ff-568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:d5:69:cd:94:29:5f:a3:56:75:27:08:fc:
                    75:71:08:cd:25:31:95:ba:4a:7d:a1:1d:6c:12:6c:
                    7a:f4:09:d7:55:ac:da:1e:c7:58:93:98:5f:d7:9b:
                    b1:8f:49:15:fb:fa:1d:a4:83:7d:b0:4c:21:d9:e6:
                    9e:bc:fe:cd:50:93:09:e4:ba:d2:22:22:70:0c:6b:
                    9d:b8:73:ce:15:93:29:59:05:22:0d:35:45:82:22:
                    8d:00:4f:73:e2:c2:f8:60:4c:bf:37:9e:23:87:2f:
                    9f:ca:7b:8e:d6:db:70:5e:87:b4:b1:93:9b:d4:86:
                    ca:d6:58:00:1c:86:c6:5d:d4:c9:2e:04:a7:c4:15:
                    72:9c:15:da:6e:23:6c:20:52:f3:56:35:a9:65:02:
                    36:70:eb:73:6b:97:bd:c8:15:63:51:d5:7c:e0:68:
                    63:99:e6:26:38:06:fa:f7:c3:79:18:43:6d:69:ef:
                    fe:00:09:f6:7c:84:c0:16:7a:ed:10:29:d9:b2:16:
                    fa:60:e3:e0:e5:b7:26:73:db:eb:c5:93:71:e3:44:
                    dc:13:90:6e:18:cf:36:ca:02:04:a3:65:eb:df:da:
                    0a:31:ff:56:6b:e2:be:6f:56:f9:eb:f0:5d:87:01:
                    41:68:37:dd:25:86:9f:31:cb:7f:f9:61:b8:ff:0e:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A7:35:8B:E0:31:A0:EE:15:AE:21:BB:82:5E:74:93:31:20:AC:84
            X509v3 Authority Key Identifier:
                keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:90:4a:db:33:7e:f2:1e:0a:3c:97:4a:51:2d:0a:b1:00:04:
         8f:71:51:d2:9e:5f:28:05:1f:67:06:db:e6:66:0b:8c:92:96:
         63:c4:c6:cf:21:c1:51:06:76:f6:c5:90:59:18:ed:f0:83:66:
         b8:66:fc:cd:86:40:b8:e7:44:9f:49:a3:6f:08:47:d8:d1:6c:
         37:2e:ca:cc:a2:a0:ee:18:29:c2:46:6c:fa:67:a7:07:06:ff:
         b4:31:1c:71:c5:72:eb:fe:3e:2e:d9:f8:51:57:c7:d1:84:f5:
         ad:52:05:3e:81:0d:5f:4f:36:97:79:2d:e3:eb:94:be:2a:23:
         c4:eb:23:9b:d4:f8:c4:32:b0:ba:dc:ca:f1:35:e5:9f:27:88:
         d2:58:85:52:9a:93:53:1a:3d:b4:d9:dd:e1:88:0a:e8:d4:3d:
         20:b9:d0:11:33:03:18:59:ca:e5:69:af:64:75:40:c6:ab:44:
         ae:4d:cc:8a:3c:29:2c:d1:2c:a4:fd:95:b9:a3:ab:16:66:cc:
         15:21:b6:05:c2:60:c6:1c:80:83:df:5e:43:69:e6:da:dd:d9:
         fb:a0:94:11:ac:12:ce:d4:6d:72:65:3b:74:7d:a4:6e:2a:40:
         33:9b:d2:90:12:ed:f1:0e:51:fb:b2:08:6e:52:bf:02:73:09:
         98:1c:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:20 2026 by rpki-client