Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
File:                     pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json)
Hash identifier:          v6CQaltcDl+eD6a9yfMdmKJ2Vcg53Vm2cEETPrsptlw=
Subject key identifier:   E4:81:FE:80:7D:C3:04:14:80:7D:97:51:DB:A6:1E:62:CC:43:52:9A
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Certificate issuer:       /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial:       09C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
Manifest number:          09AF
Signing time:             Thu 16 Apr 2026 19:52:14 +0000
Manifest this update:     Thu 16 Apr 2026 19:52:14 +0000
Manifest next update:     Thu 23 Apr 2026 19:52:14 +0000
Files and hashes:         1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: rySnYXjF5hb7CA+mHm6j+wUSVzPDklCf/H1r/WyNnOE=)
                          2: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qLy4AZHFx48xq926slKC0PfzqLtUGu6fqle6PCgJuik=)
                          3: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
                          rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505 (0x9c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
        Validity
            Not Before: Apr 16 19:52:14 2026 GMT
            Not After : Apr 23 19:52:14 2026 GMT
        Subject: CN=69e13dee-b690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:d0:6d:50:e2:d4:c8:28:9c:89:5d:c8:cf:
                    40:63:46:87:db:3e:2a:e0:b9:ef:d7:f5:8e:1d:15:
                    07:10:92:ca:69:82:73:43:3d:2d:ae:ed:04:0f:f6:
                    c6:b6:a3:d8:a7:2e:40:7f:cf:b3:76:12:03:f4:56:
                    49:77:b0:7d:26:41:04:a3:f4:55:c9:32:06:be:ba:
                    6c:8b:c8:71:23:3a:52:3d:9e:c6:0a:69:6f:80:41:
                    95:11:c7:fc:35:75:b7:2b:ea:c5:bc:f6:ad:78:dd:
                    55:b7:26:c8:df:2c:a2:1f:62:0d:69:75:63:72:61:
                    00:32:38:37:d6:a2:50:83:b7:89:c4:ae:e8:b8:c9:
                    90:77:0f:cb:1c:3d:83:6b:29:1c:f7:c2:8e:ac:cf:
                    35:46:0e:f5:3e:eb:55:45:38:e0:b7:95:90:ed:bd:
                    54:4f:1b:ff:e5:c6:35:22:df:0d:3a:7c:e6:1f:c6:
                    48:da:82:f6:1f:fd:41:18:e8:0a:4f:9e:dd:f5:76:
                    58:54:33:89:c7:ca:0b:5e:92:54:93:19:44:b1:e7:
                    de:fa:21:56:29:30:94:aa:40:df:58:9e:46:06:f0:
                    0f:a3:96:59:31:52:0e:2a:d2:d7:ab:ad:c8:e1:c7:
                    07:94:ce:7e:fa:e6:8e:d4:ae:f4:b6:92:27:75:f1:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:81:FE:80:7D:C3:04:14:80:7D:97:51:DB:A6:1E:62:CC:43:52:9A
            X509v3 Authority Key Identifier:
                keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:42:0c:44:9b:73:00:c5:8f:dc:00:9b:e4:6f:45:44:85:0a:
         16:4e:af:d8:b1:a5:05:64:cd:68:21:6a:bb:3e:9f:64:df:85:
         23:a0:35:a9:d0:44:10:ca:30:e2:1d:7c:5e:ba:24:17:03:a2:
         a2:30:8f:4e:99:3b:a9:54:f2:3f:6f:d5:2a:35:b7:27:c5:3f:
         8b:54:70:bf:5a:ab:bf:9b:0e:37:3e:95:18:3d:0e:f5:ac:9d:
         19:d3:5a:c8:fb:d0:b5:e6:43:70:f1:7b:02:9c:e0:c7:b4:e3:
         01:24:f5:d8:5b:5f:aa:c7:68:06:0e:4c:ae:a4:8b:7e:f3:88:
         bf:15:e6:43:34:7e:0f:48:63:50:af:37:32:81:44:4b:9e:53:
         d9:f7:26:79:68:0e:53:e6:fb:7e:2a:d9:fa:db:1e:3d:37:07:
         64:4e:95:68:34:6b:cc:01:bd:b0:1e:f6:58:08:7a:cc:77:79:
         56:b5:81:bd:d1:75:79:7e:94:d3:77:06:fa:03:a3:69:12:98:
         49:91:7a:b9:9d:d3:48:c0:f7:ff:05:f9:5b:63:58:4a:9e:a2:
         ed:14:63:79:07:d5:2b:48:ea:78:a5:2b:68:35:87:08:51:fb:
         70:a8:f7:7a:b5:69:9c:c6:d6:bc:c9:0e:64:42:de:cc:ba:75:
         03:bc:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:24 2026 by rpki-client