Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File:                     PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier:          vETr3fK72AcrLoEz6GW1WQGi4/f392vw+jeYpXfj59Y=
Subject key identifier:   B4:52:EF:C2:ED:9F:93:04:D9:3E:AD:BE:EC:26:6D:CD:26:16:35:2A
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer:       /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial:       081D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number:          0811
Signing time:             Thu 16 Apr 2026 21:02:09 +0000
Manifest this update:     Thu 16 Apr 2026 21:02:08 +0000
Manifest next update:     Thu 23 Apr 2026 21:02:08 +0000
Files and hashes:         1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: at5VpddHJOLOM1srDULSevPyktRds4v14toMDWmeeAU=)
                          2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: q90sQnxzbRSHPH85xcHWMaHvdjo+QzvVXmS+pu++tZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
                          rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
        Validity
            Not Before: Apr 16 21:02:08 2026 GMT
            Not After : Apr 23 21:02:08 2026 GMT
        Subject: CN=69e14e51-d824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:cd:d8:a4:9e:f2:68:e4:3e:fc:97:90:f5:
                    6a:5b:87:d1:55:b4:3e:85:e3:e5:63:71:43:ca:fe:
                    aa:cd:ae:1e:80:7a:0c:3e:24:69:6d:4a:d9:01:e7:
                    ba:5b:4d:0f:9a:c7:7c:67:e1:4f:50:43:d1:af:c3:
                    28:cc:a8:6c:67:ca:66:6c:c1:4f:d7:15:23:96:7d:
                    e6:4d:48:21:6b:28:30:d3:52:00:56:bb:0e:a0:1a:
                    1c:e7:56:bf:aa:66:fd:0d:ca:77:cb:4a:6f:66:94:
                    17:c0:13:dd:a5:30:8f:4c:26:06:84:5f:e9:b4:e1:
                    d8:46:ce:34:6f:98:cd:92:b1:96:7f:b3:a6:ef:1e:
                    e8:ff:70:8e:48:ec:de:22:98:39:33:a9:f2:2a:e7:
                    06:10:c5:73:40:7f:12:eb:ef:6f:f7:2c:10:66:43:
                    c9:77:4b:93:52:06:77:bd:f5:5a:7b:42:73:e4:ce:
                    b7:12:22:91:df:b1:de:bb:ca:9c:39:f7:49:df:e4:
                    bf:87:b0:9a:c2:90:0e:15:d5:30:fd:51:bd:a0:31:
                    a8:27:5f:d2:49:74:7e:a3:75:8e:c6:90:1a:7c:03:
                    ea:02:1f:a3:85:03:4d:5f:6e:f2:89:dc:83:08:ab:
                    f4:95:8d:1e:c9:0d:6e:cf:50:79:e6:ce:39:cc:d3:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:52:EF:C2:ED:9F:93:04:D9:3E:AD:BE:EC:26:6D:CD:26:16:35:2A
            X509v3 Authority Key Identifier:
                keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:da:85:e8:2d:c2:db:6d:89:0c:20:d2:6b:7b:7c:e9:5a:2d:
         11:65:d2:e0:a4:13:95:7e:17:06:ba:03:de:60:ef:00:21:31:
         ac:4e:e1:cf:a8:a9:d6:d1:e0:23:ad:c9:27:ba:78:51:48:01:
         93:14:dc:76:d3:00:2f:2e:d6:e9:67:79:0e:9b:44:db:69:75:
         d1:d3:63:b4:b9:b7:6b:1c:48:e6:a2:2d:8f:ae:7e:a4:c4:53:
         6c:e9:23:7e:91:74:25:1e:aa:ab:3b:15:e4:39:74:27:2f:81:
         61:c0:b7:cf:d3:e6:0b:df:3d:a2:86:c4:85:6b:aa:31:ed:20:
         39:ac:7f:59:7a:3b:8a:b5:a9:0c:b6:26:ab:a5:03:fb:43:a7:
         85:36:db:3a:24:2c:61:d2:9e:80:9b:ab:04:23:00:1e:a5:86:
         fc:f7:2a:50:5f:68:59:72:1d:fa:d4:d4:e9:20:ea:66:57:8a:
         f8:c4:6d:9c:93:55:da:19:8d:da:29:a8:ab:cb:79:94:d3:58:
         d1:4e:12:16:11:9c:08:55:88:9f:00:da:7d:ef:4c:dc:42:53:
         76:9c:68:b9:f9:49:cc:87:f8:6b:ce:4b:0a:34:a2:8d:2d:db:
         3f:bc:d1:43:a9:bb:d2:e8:63:11:23:cd:b3:c2:13:dc:7b:82:
         a2:88:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:31:34 2026 by rpki-client