Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
File:                     PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json)
Hash identifier:          uPAbNXcjDZ14iiagZ8WYstbxU7TGZeynyWHlKdByb5I=
Subject key identifier:   99:92:45:67:3A:76:93:4D:11:65:89:62:81:3C:19:82:7E:9C:07:FF
Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1
Certificate issuer:       /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
Certificate serial:       0B68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
Manifest number:          0B5F
Signing time:             Thu 16 Apr 2026 19:07:09 +0000
Manifest this update:     Thu 16 Apr 2026 19:07:08 +0000
Manifest next update:     Thu 23 Apr 2026 19:07:08 +0000
Files and hashes:         1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: AwO6lFxbrZS4QMWs+xg3LZ/wzcKnDWv+wr3kq9oilGw=)
                          2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: ZatHv2sHyWRSC6zewOoWADYzth7DnWj+eG5J7PvU3G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl
                          rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2920 (0xb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1
        Validity
            Not Before: Apr 16 19:07:08 2026 GMT
            Not After : Apr 23 19:07:08 2026 GMT
        Subject: CN=69e1335d-8659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:0a:a2:b2:c6:8c:96:7f:f0:c0:65:5f:75:
                    40:f6:9e:32:2e:a7:63:e3:36:81:85:e8:46:cd:1b:
                    31:0b:bf:7d:4f:e5:52:0d:c6:20:c8:39:34:b7:32:
                    67:d9:22:c4:96:3a:10:61:f4:5e:df:b1:6b:16:e5:
                    e2:32:c5:76:5b:1d:e4:cb:43:73:ba:39:58:2b:b1:
                    4e:d5:0d:55:54:af:ec:cc:4d:92:1b:69:84:04:6d:
                    0f:1f:6e:74:b9:73:0d:f4:28:93:bd:5a:4e:2c:9b:
                    c6:fa:87:36:a1:35:40:15:72:d6:30:32:ac:ea:cc:
                    58:6c:20:b9:d4:89:49:fc:31:5f:a2:f6:a6:ee:ef:
                    40:ad:19:ff:07:91:61:dd:06:01:1c:40:c5:d0:fd:
                    44:4d:83:1f:8f:d0:89:43:30:87:c5:c9:b1:b3:d9:
                    ee:6d:56:87:50:2b:1e:33:58:d6:76:21:f1:ac:38:
                    27:dc:0b:0d:00:ac:55:cc:7d:b3:f8:f0:b5:b1:f6:
                    f8:7e:d3:e3:9d:9e:c6:00:4b:97:6e:8e:62:35:97:
                    d7:23:c5:b6:9a:c0:d5:a9:1b:2a:8b:6e:01:d0:d8:
                    bb:67:37:a8:6c:26:0c:36:c7:a8:6f:29:1d:3b:74:
                    cf:3a:43:cc:a7:1a:9a:d3:72:d8:a2:f1:05:32:f6:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:45:67:3A:76:93:4D:11:65:89:62:81:3C:19:82:7E:9C:07:FF
            X509v3 Authority Key Identifier:
                keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:20:7c:cc:49:75:c6:37:1c:62:df:10:cc:3b:cf:fc:b3:
         8c:7c:f2:ae:cb:be:54:79:83:61:c4:4c:a4:e9:3d:0e:c1:59:
         41:18:af:d4:d2:7b:df:e5:f2:ed:7e:75:6b:b1:e6:7e:80:b5:
         80:31:2b:0b:9a:23:db:73:c9:ea:56:1f:76:eb:41:09:0e:ff:
         35:b1:cc:5a:fc:22:3d:74:a9:24:0d:5d:14:e2:da:72:c5:97:
         ea:a9:7c:fa:53:d0:93:4f:ee:6d:b1:87:eb:19:7b:a3:eb:be:
         44:b1:e3:0e:c4:5e:e2:8a:c4:a6:f4:b9:cb:bd:1e:cd:cb:ff:
         18:86:2a:31:2c:dc:1e:8b:c9:60:5e:e4:f8:b8:a9:e6:77:99:
         4a:e6:2d:79:3b:f9:12:38:68:5b:cc:e2:97:3c:91:48:7b:fa:
         5d:58:55:a1:79:83:1e:9d:1f:cf:50:c0:6f:28:5e:91:5e:28:
         f9:44:7a:1a:68:00:8f:8d:0b:0c:9a:38:63:8c:8e:58:61:81:
         2f:fa:c4:9c:08:f5:0c:2b:e7:8a:80:22:09:80:5a:dc:ae:88:
         4b:b4:a6:b5:b9:7f:dc:43:1d:b1:72:ad:ae:4f:71:e4:fe:5f:
         23:9a:b5:bf:ed:67:0e:fe:3d:28:4d:f0:5e:f9:07:48:3d:2e:
         44:df:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:43 2026 by rpki-client