Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File:                     pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier:          HoYy3EHWGBVfXsP4mFV1n6fE7GIkwn1rERoc8fc5mQw=
Subject key identifier:   06:D0:26:16:6B:29:96:31:00:86:B0:DD:38:9E:36:18:E8:D0:61:93
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer:       /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial:       0529
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number:          051E
Signing time:             Thu 16 Apr 2026 23:29:51 +0000
Manifest this update:     Thu 16 Apr 2026 23:29:50 +0000
Manifest next update:     Thu 23 Apr 2026 23:29:50 +0000
Files and hashes:         1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: SZc+G3KLaM8RyzBr8FMquii3n6UbtpB7Eu0VGvurtsQ=)
                          2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: uq3qtCkijF1dNlFAZoloAGHiYFpS21Zc+zHvHpeXG3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
                          rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B
        Validity
            Not Before: Apr 16 23:29:50 2026 GMT
            Not After : Apr 23 23:29:50 2026 GMT
        Subject: CN=69e170ef-2cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:d9:75:b4:9a:f5:79:8b:17:9d:d1:22:a1:
                    34:dc:f7:0e:89:1e:8b:9b:be:0b:00:1b:f7:c6:d5:
                    ee:8f:8a:f7:e7:17:6c:ee:6d:3d:ba:60:4d:51:e1:
                    6f:89:59:0c:4f:cf:9e:d6:06:fc:11:28:e5:18:2e:
                    27:39:ac:a5:e6:60:e9:13:a8:8e:bc:22:a6:0f:42:
                    3f:30:20:db:fc:6f:ed:32:ce:76:f3:1a:f5:2e:ca:
                    18:db:0a:78:c4:ef:53:f2:30:8d:68:3b:fa:64:5d:
                    d0:ef:b7:1a:be:f6:7e:85:7e:de:3b:cb:f9:78:65:
                    a0:a7:90:2f:77:fa:da:53:a6:d7:77:30:4e:25:ee:
                    e4:ed:f3:29:90:b3:e0:24:6b:6a:f7:51:c2:a4:7f:
                    45:c7:37:16:17:83:e5:07:d5:22:52:09:fa:14:aa:
                    47:77:01:84:c1:8f:c4:f3:6f:38:79:ba:e0:8b:31:
                    06:04:f4:17:ed:2e:43:9d:53:0a:ae:e9:d2:d7:46:
                    ba:77:9c:a0:0d:13:45:bf:f3:df:aa:d3:aa:b9:b1:
                    0c:dd:4a:ff:45:0b:28:95:d5:48:38:ee:24:2f:67:
                    5a:5c:8f:b9:e8:71:7e:29:04:fa:40:0c:9f:ce:6f:
                    65:f7:ff:87:76:93:d2:78:0f:af:78:53:0c:7b:73:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:26:16:6B:29:96:31:00:86:B0:DD:38:9E:36:18:E8:D0:61:93
            X509v3 Authority Key Identifier:
                keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ba:00:50:e3:99:80:ae:74:35:2b:d9:c2:34:ca:e9:47:a6:
         bc:7b:32:d5:09:9c:e3:5c:6d:90:10:f0:13:c5:5d:03:d5:4b:
         aa:f8:f7:d3:45:b8:5b:f4:51:92:cf:1b:d3:85:55:0e:9c:de:
         33:ba:54:0f:e4:4f:e7:36:80:de:8d:2d:a9:84:74:8c:85:a6:
         fb:69:43:0f:27:7c:eb:5f:3e:a8:2e:35:1d:da:1e:a0:73:e5:
         2b:71:22:40:ac:f3:4f:47:54:62:0a:e1:5a:b2:cb:00:3e:80:
         9a:2b:5d:85:ba:e9:e8:62:b4:fd:35:1f:fa:8a:7c:06:53:f9:
         f5:89:f1:ad:34:d4:ca:c5:d1:b3:71:23:5e:2f:35:4b:f3:c5:
         01:72:ec:c5:00:29:4c:e0:96:32:f8:b4:60:d6:85:c0:4d:b7:
         a1:16:8e:6f:0c:db:3f:a8:11:25:5d:21:ce:7d:b5:a6:58:b8:
         8a:46:72:ce:d6:c3:79:63:d3:bb:9e:de:64:de:42:13:c0:f6:
         f1:8b:60:54:23:73:e1:51:eb:de:b0:21:ed:4e:6d:21:2f:d8:
         75:91:07:2d:1a:e8:8b:8e:58:72:ca:0a:3b:62:86:9d:91:88:
         3f:48:1c:4f:f7:02:34:90:4a:17:a1:0e:1a:c0:2f:0d:86:6e:
         be:f8:f0:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx
MDc3RTY1OUIwHhcNMjYwNDE2MjMyOTUwWhcNMjYwNDIzMjMyOTUwWjAYMRYwFAYD
VQQDEw02OWUxNzBlZi0yY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqa/ZdbSa9XmLF53RIqE03PcOiR6Lm74LABv3xtXuj4r35xds7m09umBNUeFv
iVkMT8+e1gb8ESjlGC4nOayl5mDpE6iOvCKmD0I/MCDb/G/tMs528xr1LsoY2wp4
xO9T8jCNaDv6ZF3Q77cavvZ+hX7eO8v5eGWgp5Avd/raU6bXdzBOJe7k7fMpkLPg
JGtq91HCpH9FxzcWF4PlB9UiUgn6FKpHdwGEwY/E8284ebrgizEGBPQX7S5DnVMK
runS10a6d5ygDRNFv/PfqtOqubEM3Ur/RQsoldVIOO4kL2daXI+56HF+KQT6QAyf
zm9l9/+HdpPSeA+veFMMe3NuLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbQJhZr
KZYxAIaw3TieNhjo0GGTMB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2
OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp
M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFroAUOOZgK50NSvZwjTK6UemvHsy1Qmc41xtkBDwE8VdA9VLqvj300W4W/RR
ks8b04VVDpzeM7pUD+RP5zaA3o0tqYR0jIWm+2lDDyd8618+qC41HdoeoHPlK3Ei
QKzzT0dUYgrhWrLLAD6Amitdhbrp6GK0/TUf+op8BlP59YnxrTTUysXRs3EjXi81
S/PFAXLsxQApTOCWMvi0YNaFwE23oRaObwzbP6gRJV0hzn21pli4ikZyztbDeWPT
u57eZN5CE8D28YtgVCNz4VHr3rAh7U5tIS/YdZEHLRroi45YcsoKO2KGnZGIP0gc
T/cCNJBKF6EOGsAvDYZuvvjwIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:43 2026 by rpki-client