Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File:                     pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier:          PUsLCbPrJVC3KJgBF3Wj14GBkXFm9o37Mlw2jYeGF6A=
Subject key identifier:   91:D1:5F:46:91:35:BE:FC:C9:AE:B1:3F:62:BE:CD:46:31:DC:34:3F
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       120B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number:          11EF
Signing time:             Thu 16 Apr 2026 17:05:54 +0000
Manifest this update:     Thu 16 Apr 2026 17:05:53 +0000
Manifest next update:     Thu 23 Apr 2026 17:05:53 +0000
Files and hashes:         1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: z+Ozuo71idahbpQcxllslGEAfibDMVy/e5GeSfRYgRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4619 (0x120b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: Apr 16 17:05:53 2026 GMT
            Not After : Apr 23 17:05:53 2026 GMT
        Subject: CN=69e116f2-c4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:17:31:0d:1e:84:43:a6:95:8e:8e:07:5f:
                    51:49:b5:52:62:09:44:fe:32:6a:ba:41:ea:17:64:
                    84:4e:ae:57:9d:d1:5b:68:8b:aa:c6:ec:05:17:0d:
                    76:c2:44:c9:c5:3e:65:73:93:92:58:5b:e0:82:41:
                    3e:bd:e0:fe:f4:d6:a1:12:a6:76:5a:33:95:7f:43:
                    ff:bc:62:18:94:ea:83:5f:33:9e:dd:cc:8a:0e:5b:
                    67:71:6a:5c:96:c7:ef:1d:df:84:6b:1a:bd:44:d1:
                    66:0e:af:cd:68:11:93:1d:7a:e2:a6:34:1a:ec:92:
                    bc:85:50:b6:e4:76:93:65:89:cb:a4:37:f6:60:d1:
                    02:9c:b9:6b:78:4e:fc:b8:02:db:e3:75:56:c0:f7:
                    86:d3:9c:c2:55:9f:69:b4:db:13:2f:47:b8:ed:07:
                    9d:93:54:c6:75:28:90:71:b5:21:02:55:99:58:3b:
                    22:28:16:0d:a0:2e:e0:23:0f:c4:2e:ad:00:5f:8f:
                    e0:b3:5e:61:42:ec:cd:9c:d7:34:22:82:a3:f9:dc:
                    f1:51:e0:d8:71:d0:8b:81:5a:a3:e9:24:b0:14:0f:
                    e8:6f:1d:d3:0d:df:53:a0:38:6c:d5:58:be:94:8a:
                    66:7d:48:13:0d:89:9f:cb:0b:82:c6:ac:78:d9:aa:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D1:5F:46:91:35:BE:FC:C9:AE:B1:3F:62:BE:CD:46:31:DC:34:3F
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:e7:f8:42:69:b1:ea:e0:9a:83:af:8b:03:07:17:39:32:
         e2:91:5a:58:eb:25:02:bb:f6:dd:92:a7:0b:7d:77:78:24:ba:
         b2:da:0f:93:2b:17:77:37:09:71:3c:34:d8:d6:f5:73:32:5d:
         14:ec:e4:af:de:bf:29:7b:d2:d8:23:e7:09:51:73:23:47:fe:
         96:d8:b5:57:9b:18:db:59:f6:59:3b:ba:f9:d5:90:be:5a:a2:
         68:f5:52:fe:f6:44:47:2e:1f:62:48:8d:b7:00:82:d7:f9:63:
         34:8d:56:14:eb:23:40:33:43:e1:c8:c6:58:c8:0f:d9:d8:f3:
         01:2f:68:40:d1:be:a8:bc:6c:f8:83:7c:b2:ec:60:91:80:3f:
         fc:12:0b:40:f5:25:42:e8:3a:73:62:5c:92:9f:98:b7:0c:9d:
         6a:19:60:67:3e:3e:25:2c:54:7c:11:5f:b1:b1:3f:53:a6:27:
         8f:b9:3e:5a:3a:ba:eb:1c:bb:7c:84:98:f6:bb:da:0e:61:22:
         b6:69:ec:24:81:0a:4e:83:e6:b2:da:c9:a2:30:7d:fd:1e:c4:
         ff:1b:d7:fc:60:5a:fa:39:be:30:d1:f0:bc:aa:25:c5:49:2a:
         77:0d:cc:38:51:57:15:15:f3:f9:bb:9d:34:ce:4e:f2:e4:1b:
         ee:bd:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:53 2026 by rpki-client