Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File:                     Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier:          +fHSN3qiQRKPOt+AwKhetJaTvTDR0I2LQakjox2cvmQ=
Subject key identifier:   D6:37:D5:D6:1F:B4:BD:27:A5:FD:93:38:E5:A1:44:03:DA:A3:E7:11
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2CB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number:          2C8B
Signing time:             Thu 16 Apr 2026 15:29:46 +0000
Manifest this update:     Thu 16 Apr 2026 15:29:46 +0000
Manifest next update:     Thu 23 Apr 2026 15:29:46 +0000
Files and hashes:         1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: 1R97H5dVDV9xFzxBwa/TkbANz01ceMko0+7Zjqm8nzg=)
                          2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: NfSF2/24Lac2ri9eqQMgbAEvGH5Aq8vrSCMGSdoJ7ko=)
                          3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: QG3CWQn3Z6K4Pfd735nOcWyRkk04Fo8yzoUj1zOBam8=)
                          4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: piVYIMzYyeRdoeWa2qt5VAi4HtgHwmt42QAX33j5VNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11440 (0x2cb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Apr 16 15:29:46 2026 GMT
            Not After : Apr 23 15:29:46 2026 GMT
        Subject: CN=69e1006a-be41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:bb:9b:b7:23:7d:24:09:00:37:25:8f:bb:
                    27:74:cc:68:c2:02:94:aa:44:b4:ab:5d:5c:06:d0:
                    b4:e4:2c:f9:8e:48:f5:9e:3a:3b:5a:78:10:04:d9:
                    c4:18:f4:57:ba:c7:10:9b:3c:4e:07:84:de:6b:4f:
                    9c:65:03:51:2b:36:0e:48:c7:c1:6a:a8:ba:14:3f:
                    4a:e2:60:ef:19:b6:53:cd:1f:82:e2:57:22:53:7c:
                    18:83:a1:bb:88:fd:ad:10:1d:ac:f7:37:76:d1:f3:
                    fa:73:9f:74:9f:04:4e:94:71:b5:72:af:91:3a:48:
                    f9:3b:4a:5d:0b:c4:25:ad:df:de:3f:cb:b2:2e:32:
                    6f:0c:5c:73:8b:fa:5a:6c:d1:11:6d:b3:83:6a:1c:
                    c7:70:e1:0c:0f:e1:e8:42:96:da:73:87:29:4f:d7:
                    81:0c:69:98:03:03:93:a6:c8:73:ee:c8:36:19:f5:
                    50:07:18:f5:a5:4a:33:12:f4:66:ae:97:47:42:24:
                    0c:4e:ff:5f:d8:8f:8a:46:49:5c:c3:fc:63:5e:3b:
                    61:46:99:3a:dd:aa:bc:67:a6:aa:dc:46:d2:82:76:
                    ad:22:d6:67:11:74:89:7e:a0:ac:55:29:f3:87:f9:
                    43:8a:22:27:40:f0:17:0f:5b:2f:d8:2e:01:ea:12:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:37:D5:D6:1F:B4:BD:27:A5:FD:93:38:E5:A1:44:03:DA:A3:E7:11
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:fc:50:0d:70:83:47:46:d3:79:b1:3f:1f:2c:c0:c7:c6:
         d6:79:2c:6e:ea:66:fa:d2:e2:d4:7a:ec:84:3b:d3:95:7f:01:
         ce:e4:7e:5d:28:03:73:7e:13:74:4f:10:a4:0c:c8:f6:65:1e:
         9d:5b:19:67:02:cb:28:a2:cb:dd:7b:8f:da:29:5b:80:c5:6d:
         6c:03:95:8e:21:6d:c9:e4:d6:0f:f5:4d:74:e5:6b:86:a1:54:
         0a:5f:c6:34:52:c2:e8:70:e1:c2:6b:67:c6:60:70:34:81:95:
         85:34:69:11:5a:1d:05:25:77:f7:57:72:2a:82:30:df:e6:35:
         17:ae:24:45:48:e2:ae:3f:c9:64:f7:3f:c9:9c:44:67:47:cc:
         67:a5:b4:ff:04:0c:4c:45:36:de:64:13:d3:cd:3a:54:ab:41:
         a3:7b:36:20:5b:41:f1:d9:eb:11:6b:98:98:51:4c:cf:4f:5b:
         33:dc:db:d1:99:99:2e:cb:16:46:d8:78:91:e0:e9:8b:f8:2a:
         89:14:61:28:ca:60:73:8d:f2:53:87:e1:f4:6e:62:19:4d:ad:
         bc:03:46:09:63:45:de:fb:e5:0e:19:c9:10:d7:d8:d4:33:46:
         9e:38:0f:c6:d5:91:54:71:d1:ae:26:1c:79:f3:89:d0:b7:a8:
         a7:9a:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:48 2026 by rpki-client