Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File:                     PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier:          tkXFmiNo4qXgMlkgq6IQcEhjeEdiwPGX1P4lU4KZHU0=
Subject key identifier:   17:2C:60:1A:20:D5:6C:FE:AD:D0:6C:AC:13:CB:FD:8A:86:66:47:52
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number:          0213
Signing time:             Mon 02 Mar 2026 00:30:39 +0000
Manifest this update:     Mon 02 Mar 2026 00:30:38 +0000
Manifest next update:     Mon 09 Mar 2026 00:30:38 +0000
Files and hashes:         1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: sTnOEOeXLFlwxClfKT/FvCCKF4Mfr2eFEr2koqAGXx8=)
                          2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=)
                          3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: 6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Mar  2 00:30:38 2026 GMT
            Not After : Mar  9 00:30:38 2026 GMT
        Subject: CN=69a4da2e-544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a4:77:66:96:6d:1a:03:b3:5b:3d:52:5f:e2:
                    ba:c6:78:29:ec:f3:f8:a2:ea:1f:2a:cf:82:8b:0e:
                    bb:af:26:c4:5d:91:d1:94:9f:72:23:e2:79:1c:af:
                    c0:a5:d7:67:c9:f2:86:b4:f1:b9:e0:e2:ae:4f:15:
                    f8:57:6e:63:8f:b0:16:9a:7e:07:74:15:36:20:2c:
                    e6:e2:42:ae:41:1a:fe:bb:1d:a7:5f:25:7b:e3:cd:
                    b4:00:58:dc:50:57:56:42:d6:54:89:24:91:1c:80:
                    ce:fb:3a:a7:c5:f5:03:29:ea:8e:df:30:1a:97:82:
                    de:3c:75:ed:5e:22:6b:ea:7a:90:a8:35:ef:64:2b:
                    62:f8:d2:ea:8f:0f:e0:af:38:83:af:a0:1f:36:15:
                    56:d4:17:37:c5:a8:16:89:a4:17:06:61:1b:db:7a:
                    fb:af:7a:88:14:a2:47:61:c1:2b:46:c5:a3:e2:44:
                    f1:a9:2d:60:db:42:15:fc:45:9e:78:a7:c9:de:8f:
                    e9:89:6d:db:81:88:de:64:9a:1b:22:b1:97:ab:69:
                    e6:fd:4a:30:83:0c:86:a0:4c:af:dc:ce:b6:66:29:
                    94:b0:27:51:99:18:fc:5d:82:b5:7e:78:fb:33:87:
                    c5:f3:d8:60:75:67:80:92:21:88:3a:3c:89:82:e2:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:60:1A:20:D5:6C:FE:AD:D0:6C:AC:13:CB:FD:8A:86:66:47:52
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:24:11:55:73:db:fd:62:7c:d8:d9:e1:a2:be:1f:8e:9d:1d:
         6e:91:34:23:39:3d:af:bd:76:d9:0b:26:05:74:18:31:60:aa:
         50:47:ae:06:bd:49:18:c6:fc:19:a5:96:97:73:d3:82:91:6b:
         21:10:c5:b2:a2:12:b0:85:35:8a:dd:c5:9b:2a:7f:8c:f9:06:
         5c:8f:6a:84:f9:d6:25:8b:78:9c:a1:64:3a:c5:19:2b:aa:47:
         df:e2:f6:6a:bf:a7:98:5d:31:46:13:73:56:0b:a9:1b:a4:f7:
         01:1d:21:43:9f:ae:1c:ef:5c:63:09:f9:d2:5b:99:ac:24:ff:
         41:71:cd:d4:a2:88:3f:af:04:52:cb:67:f5:ae:75:75:84:dd:
         91:21:6b:dd:88:d7:f8:8f:98:b6:10:13:72:1a:c1:d5:4b:03:
         a8:c4:cf:16:cd:45:34:da:74:bc:c7:b3:10:35:58:c9:fc:00:
         82:1f:ba:53:41:d4:b6:89:51:94:ff:47:a1:9e:92:87:de:3c:
         6f:3c:4d:c3:8d:a9:4e:59:70:e1:99:6f:8e:fc:82:88:95:82:
         85:29:bc:a7:80:5a:8a:c5:4f:34:1a:88:58:4d:64:26:4c:00:
         c8:88:ba:fe:94:b8:60:b7:62:85:ec:63:f4:4f:8f:fa:b5:88:
         25:0f:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:37 2026 by rpki-client