Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
File:                     PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json)
Hash identifier:          XTcTpr9Xdrtb28fNA/k+ABJfsBPhNhAmA0tUeIlF19Q=
Subject key identifier:   B9:98:D7:2A:AE:3C:10:6A:8B:A8:24:18:65:A1:48:2D:08:D0:D9:BC
Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D
Certificate issuer:       /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D
Certificate serial:       0E0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
Manifest number:          0E05
Signing time:             Sat 28 Feb 2026 17:57:53 +0000
Manifest this update:     Sat 28 Feb 2026 17:57:53 +0000
Manifest next update:     Sat 07 Mar 2026 17:57:53 +0000
Files and hashes:         1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: yHpLfzxIWtunb2jbC6NF8rSut6EAOLBgn9TgqEOUotA=)
                          2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: 5AhgINS9PwniKFtC6UdMhxxWx5F0pu9QmvKHh6K5mSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl
                          rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599 (0xe0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D
        Validity
            Not Before: Feb 28 17:57:53 2026 GMT
            Not After : Mar  7 17:57:53 2026 GMT
        Subject: CN=69a32ca1-fa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:13:cb:ff:fa:83:48:1f:22:bf:6f:9a:de:
                    75:24:6a:b3:e9:59:3c:94:9d:60:00:ef:f4:02:1d:
                    9c:17:4b:d3:b0:83:74:2d:9b:a1:f3:7a:f2:e9:2b:
                    7b:97:cb:16:ca:eb:80:a2:92:d6:aa:90:9f:49:69:
                    7e:d9:28:b4:6f:92:5d:ed:96:dd:14:44:ba:49:de:
                    2d:61:b1:51:89:58:3c:85:3b:0d:f6:33:fa:84:8c:
                    e6:51:a3:55:ef:0f:90:fd:27:d3:84:56:15:df:58:
                    a4:a3:00:98:c8:bb:f4:a4:75:03:56:db:22:87:25:
                    0d:22:7e:52:18:27:2c:68:72:55:85:75:0e:5e:ab:
                    6e:ff:e3:68:93:31:2d:fd:ab:bc:f5:a1:c5:74:c2:
                    ee:2f:6f:ee:1d:6f:19:2e:fb:94:9c:76:09:0d:f3:
                    f8:00:c4:68:90:52:c3:07:2a:5d:2a:db:df:29:d1:
                    1e:b4:03:9c:10:8a:4c:3d:07:6d:63:66:96:d6:aa:
                    3f:bb:05:5c:e8:ad:a5:a2:96:b0:79:91:e6:85:c1:
                    4f:68:e8:48:26:41:f6:d6:14:53:1d:b8:06:d8:c2:
                    08:7f:2e:f8:d0:3b:88:4a:44:cd:a6:56:c3:ab:7b:
                    a6:73:ca:07:07:70:75:b1:ea:17:fb:03:a9:02:33:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:98:D7:2A:AE:3C:10:6A:8B:A8:24:18:65:A1:48:2D:08:D0:D9:BC
            X509v3 Authority Key Identifier:
                keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:a7:14:44:0a:22:fd:5c:68:c9:b6:ec:cc:5e:db:98:42:
         8a:87:79:c7:4b:9c:f7:aa:e6:a1:f7:ca:b8:44:b5:6e:06:7d:
         a0:f4:11:e0:79:59:f2:bc:81:e9:e8:04:22:be:36:73:f0:86:
         24:bc:2e:28:6a:11:c0:9e:04:7a:82:e5:52:55:48:3b:e0:04:
         bf:36:bc:d2:60:bd:1b:d3:46:f1:b3:8e:3c:df:2d:c2:98:54:
         53:19:69:82:62:6b:0e:05:cc:dc:94:7c:10:47:90:82:c2:90:
         39:f9:a8:94:a2:16:9e:68:0f:c9:27:ae:a2:5d:c7:8d:9e:7d:
         67:6e:ea:17:35:5e:14:a4:09:82:60:94:48:a9:28:33:60:1a:
         51:ac:15:fa:e3:98:de:10:3e:63:cb:6e:7b:34:05:cb:66:f5:
         d2:97:49:b6:06:05:85:98:03:60:9c:ef:92:ac:5b:1c:74:ab:
         0a:45:23:f0:d2:f5:f6:cf:aa:aa:37:19:9b:4e:86:0b:b1:f8:
         28:c2:d6:6d:62:c0:0b:88:92:dc:30:16:a0:af:58:8d:cc:6c:
         28:96:de:c9:c9:b2:16:9b:56:dc:1e:6c:7b:8b:69:ec:d6:ce:
         e5:34:53:b4:f8:d3:e3:1a:73:76:4f:50:a2:21:62:93:57:77:
         7a:25:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:34 2026 by rpki-client