Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
File:                     PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json)
Hash identifier:          1CZYucXBSSHcyezbR5abke4rASjzKhNrRTPpmWDNT1Y=
Subject key identifier:   5E:4B:77:1F:AA:E2:21:D8:FC:7A:9B:EF:F3:B9:64:5A:6B:56:0A:CB
Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E
Certificate issuer:       /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
Manifest number:          06F9
Signing time:             Sat 18 Apr 2026 22:01:22 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:21 +0000
Manifest next update:     Sat 25 Apr 2026 22:01:21 +0000
Files and hashes:         1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: qw5+LAtvXH7W4VpeDou98X6PBfJy3avn2kZTK2xik0k=)
                          2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: Lifzj9tbD2A196PkebyEAFBgjuplwdZQ8VmvKwqYLdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E
        Validity
            Not Before: Apr 18 22:01:21 2026 GMT
            Not After : Apr 25 22:01:21 2026 GMT
        Subject: CN=69e3ff31-1d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:90:28:e0:3d:8d:bf:6d:f1:08:2f:e6:e3:
                    79:0e:22:7e:66:37:c0:d0:d9:15:2d:72:a3:46:c3:
                    f1:b4:69:7d:b4:e9:13:0c:62:75:3f:59:65:6a:f1:
                    e5:a4:aa:28:43:57:40:40:e3:f7:3e:eb:00:3f:f8:
                    1a:4f:d7:67:bf:11:d4:1e:71:1c:af:72:94:35:8b:
                    b6:78:00:31:28:22:9d:1c:a5:c4:a8:fc:45:ff:37:
                    1a:0e:41:f5:02:33:46:14:bf:89:8d:9d:28:23:72:
                    8f:81:3c:76:0e:c2:a4:a2:65:2c:cf:45:ef:31:cb:
                    4d:bc:8b:41:6d:47:5d:dd:e2:de:29:77:09:f5:ba:
                    65:b3:f4:e0:04:a7:5d:9f:20:f1:03:e5:57:12:b3:
                    e9:82:5f:a3:51:97:2e:ac:b4:ae:9e:be:15:4b:60:
                    df:12:11:2e:14:fa:d6:17:2f:93:59:1b:33:fb:c2:
                    5e:27:a5:33:eb:9b:2b:63:69:08:f3:17:e4:91:4b:
                    4d:79:a7:00:cf:89:a3:a0:77:b7:6b:4e:ec:6d:d9:
                    32:35:0a:04:77:bf:71:2c:3a:bb:29:89:d5:17:8e:
                    43:f6:89:86:ad:16:2a:0d:c8:5f:52:f8:d5:b8:05:
                    49:b0:ee:35:e1:d8:52:19:6f:3c:9d:5c:d4:4e:31:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4B:77:1F:AA:E2:21:D8:FC:7A:9B:EF:F3:B9:64:5A:6B:56:0A:CB
            X509v3 Authority Key Identifier:
                keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:de:fb:e6:23:47:82:2f:0e:53:16:e2:9a:1a:94:b3:c1:83:
         53:aa:99:96:95:75:ea:dc:e2:60:18:aa:2d:39:bf:5c:d3:80:
         7b:d9:aa:f5:b3:ed:e4:08:4f:2e:28:34:8c:ac:a6:0a:c5:7c:
         e1:02:6c:a7:44:35:5d:6d:e1:d0:35:9f:25:8c:5d:1a:90:7e:
         80:dd:28:f2:a1:cc:78:86:a8:1c:69:42:c1:5f:ba:a8:91:f2:
         ba:fd:c2:5d:3b:e5:2e:6b:e0:bb:6e:3c:7a:31:42:bb:09:4a:
         29:d4:d7:c3:37:ad:00:13:a7:b2:2d:ed:d5:22:0c:d6:5a:c7:
         bd:f8:71:cf:01:d2:36:72:73:1b:dc:95:25:43:6c:4f:cb:c9:
         13:f2:17:6b:d4:3d:bb:9f:a6:93:c4:9b:d0:ae:78:63:89:77:
         d4:52:d9:80:23:bb:a0:0c:28:5a:d5:41:d9:62:4e:fc:70:46:
         dd:af:6b:d3:63:6d:72:83:c7:f2:f0:da:4e:87:90:93:a0:2d:
         fa:18:3c:5b:de:58:ac:72:3f:86:d4:05:dc:e8:ae:b7:67:28:
         eb:67:a7:14:03:de:b1:9e:4d:43:5f:a8:07:91:94:fb:62:b1:
         68:ae:f3:6d:24:79:ea:b1:d5:d9:e3:85:22:f5:9a:a3:0b:43:
         4d:da:dd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:39 2026 by rpki-client