Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
File:                     pS-PmFnKxH1oVCcjTSYW655TljQ.mft (raw, json)
Hash identifier:          2EFf+5hXOrwZUkS36s4+P29rdGvMgXLK3l7GkUoH4TY=
Subject key identifier:   41:7E:25:85:8D:4F:11:A1:BB:40:DF:29:AD:9A:73:32:5B:D8:D8:55
Authority key identifier: A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34
Certificate issuer:       /CN=A9188D8F/serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
Certificate serial:       0B97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
Manifest number:          0B90
Signing time:             Sat 28 Feb 2026 19:18:47 +0000
Manifest this update:     Sat 28 Feb 2026 19:18:46 +0000
Manifest next update:     Sat 07 Mar 2026 19:18:46 +0000
Files and hashes:         1: pS-PmFnKxH1oVCcjTSYW655TljQ.crl (hash: oc/5MF97AisexI7ndWW71sQ/Q5zTvIj+IJViJRq4gMw=)
                          2: A84F7CEE432711EA87CB0E53C4F9AE02.roa (hash: 9D2VyaAKjVgoxkaamh4Z/Ffje6FAagohXWssSAvixLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl
                          rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2967 (0xb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D8F, serialNumber=A52F8F9859CAC47D685427234D2616EB9E539634
        Validity
            Not Before: Feb 28 19:18:46 2026 GMT
            Not After : Mar  7 19:18:46 2026 GMT
        Subject: CN=69a33f96-ad74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:70:b0:06:e0:c6:74:83:74:ec:98:7e:ff:3b:
                    dc:be:58:96:55:43:92:8e:e0:61:c4:fd:7d:c8:85:
                    98:ce:75:07:07:33:d3:f2:6b:2d:10:ce:bc:29:7c:
                    3a:65:3e:f4:63:59:c9:12:eb:bf:81:42:d8:87:b9:
                    53:e8:18:02:92:08:2c:a8:99:0c:18:e8:1e:af:a1:
                    11:8d:b6:1e:b1:55:a6:56:e1:d4:79:05:7d:f7:31:
                    3d:af:0d:32:1d:4a:6e:5a:4f:fa:2c:c7:95:3e:ef:
                    d6:5c:0b:97:47:fd:b0:91:6f:c7:89:76:6a:34:c0:
                    fe:92:50:7a:0d:fa:35:63:19:1f:e3:1b:1a:00:ca:
                    aa:c4:a6:2f:19:e6:b2:d2:e5:23:59:b0:ad:48:14:
                    5b:a5:f4:51:a5:38:4d:e4:02:e2:4a:e2:24:0a:ef:
                    37:31:fc:37:c0:ca:44:da:95:7c:f7:be:e3:f6:cc:
                    d5:df:c6:b3:ce:58:ab:63:20:e0:5b:8f:df:bc:8f:
                    48:26:4e:0e:d9:e1:30:96:3e:a7:28:6f:b9:22:dd:
                    53:08:8b:0c:be:7d:27:4f:d2:d8:f0:bb:29:9f:44:
                    85:c8:8f:0a:6a:33:cf:75:b6:3f:bd:e1:08:36:e6:
                    ec:e0:59:b0:ad:cc:1c:3a:2f:48:bf:37:04:26:bd:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:25:85:8D:4F:11:A1:BB:40:DF:29:AD:9A:73:32:5B:D8:D8:55
            X509v3 Authority Key Identifier:
                keyid:A5:2F:8F:98:59:CA:C4:7D:68:54:27:23:4D:26:16:EB:9E:53:96:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pS-PmFnKxH1oVCcjTSYW655TljQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D8F/B852FB3C432411EA9263254AC4F9AE02/pS-PmFnKxH1oVCcjTSYW655TljQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:65:d0:96:cf:7c:dc:e3:b3:80:c2:eb:98:ed:db:48:7b:
         3b:ed:09:fe:6c:51:1b:23:20:58:98:1b:bc:9b:a8:e0:86:68:
         3b:dc:94:a6:d0:19:5c:eb:fb:88:a9:64:03:08:88:9d:04:03:
         ac:df:df:75:27:b8:51:ec:6e:1d:54:65:2f:5a:fb:eb:9b:e5:
         61:60:8c:16:a2:d4:f9:b6:22:12:cc:08:2c:1d:d2:04:a8:78:
         d2:bf:4a:f4:26:83:71:b4:a9:d3:46:8d:dc:fa:c9:59:7a:89:
         2d:fb:d5:07:2e:fe:67:19:ad:3d:bc:5b:c2:a0:a1:d9:53:6e:
         ef:63:42:7b:88:8e:05:a1:e3:6b:15:33:0d:22:8c:c5:39:f2:
         6a:0c:64:f3:ff:ea:d3:aa:c8:78:ed:bb:e3:99:98:e4:ee:f5:
         88:e4:80:c1:b6:9b:82:44:74:e2:e1:a5:c1:25:7b:8f:67:bf:
         83:31:2e:60:ca:8b:d7:cc:30:50:7a:e1:ed:eb:79:75:d5:88:
         f2:ec:af:6a:b9:48:cb:9b:2e:31:03:8d:62:e0:96:67:d2:4e:
         c5:2d:67:9a:16:e1:31:95:26:2f:36:78:f8:17:65:73:f8:cf:
         63:d3:5f:3d:e0:44:51:fb:73:49:ef:2e:c8:32:14:1b:00:73:
         e4:3d:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:50 2026 by rpki-client