Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File:                     PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier:          VFaw2po4erhXTZqIS9JGtcI9vFSpjj5m2u5ljCyCb64=
Subject key identifier:   FC:CD:A2:74:81:74:87:BA:00:9B:A8:AD:CA:C2:75:D6:E4:FA:34:8F
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer:       /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number:          0204
Signing time:             Fri 17 Apr 2026 02:47:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:47:33 +0000
Manifest next update:     Fri 24 Apr 2026 02:47:33 +0000
Files and hashes:         1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: 5Vyny2WwHo/BHXYo9YMoDayF42IXdS8tS/zLVJE36CI=)
                          2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: QJ4e16NsI/dZu1qX0OimYIx1FzqVNlcCmqCrTv8ABDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
        Validity
            Not Before: Apr 17 02:47:33 2026 GMT
            Not After : Apr 24 02:47:33 2026 GMT
        Subject: CN=69e19f45-bcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:14:26:ed:46:ef:3c:62:87:2b:43:c4:30:
                    53:75:a9:42:21:65:c6:44:0e:51:1c:64:ac:9b:fe:
                    b1:ce:3e:d1:33:f3:e6:91:27:fa:ae:1f:f2:c9:da:
                    e0:f5:fb:dd:1f:a6:4d:07:96:91:77:0f:46:55:ef:
                    57:7e:02:aa:bd:5f:8d:57:5d:a9:c1:49:a2:4c:3d:
                    42:f6:91:6b:d3:ad:ed:e5:35:99:ed:38:b7:4f:58:
                    ef:5c:ae:35:a4:f7:8e:9b:7e:44:83:64:76:74:c3:
                    0b:37:45:8c:8f:0e:c8:14:b8:7b:70:9c:9d:1f:ca:
                    22:49:a1:b5:09:ec:a1:30:33:4c:34:b8:12:66:e8:
                    52:b1:1f:a1:2b:8c:4b:ca:c7:dc:de:c9:67:21:b7:
                    e8:92:a2:85:72:0a:8a:04:0d:a8:1d:e5:78:c8:48:
                    55:56:2d:aa:28:c1:14:6f:9e:1e:45:60:05:7c:5f:
                    82:fd:75:57:dc:1b:da:20:f3:08:e5:1d:0b:68:85:
                    d9:70:04:c7:21:0d:c9:00:45:6d:e5:b4:0c:06:e3:
                    a2:73:c8:ad:66:63:04:7d:cc:35:5f:dd:9a:44:ea:
                    25:9c:83:36:d7:7f:31:8d:7b:7a:1f:63:ab:67:a5:
                    05:d4:9d:c3:35:fd:d8:34:2f:b9:02:33:10:1d:2c:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CD:A2:74:81:74:87:BA:00:9B:A8:AD:CA:C2:75:D6:E4:FA:34:8F
            X509v3 Authority Key Identifier:
                keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1a:f4:30:04:f8:59:d0:f3:73:2c:99:41:b3:a6:0f:6a:fe:
         be:16:a9:65:95:ab:01:d9:7d:42:29:40:55:2f:9f:eb:91:fa:
         70:5e:6c:64:68:d1:f7:75:a0:c9:1d:b1:03:44:0c:aa:7e:9c:
         ea:7a:81:44:6c:3d:a9:42:99:6b:22:b8:ea:76:b9:60:22:cc:
         5e:18:68:20:46:c0:ba:d9:73:22:13:7f:52:cc:f4:5c:cd:a2:
         f9:f5:a6:34:76:2d:8f:ab:9b:12:17:2a:77:8c:28:0e:1a:f7:
         2b:81:d0:0c:bb:6e:86:62:1c:f3:94:eb:9f:42:6f:3a:c1:9c:
         c2:30:36:e8:c1:98:bf:26:06:ce:5e:ac:cd:c4:37:0a:73:cc:
         00:fb:d5:68:da:c6:5f:45:54:41:60:4a:19:84:d2:ac:42:88:
         92:57:9c:8d:97:a9:39:f3:bf:5e:24:c3:bf:7d:01:95:03:ce:
         d5:71:cb:f9:66:7c:cc:7a:89:e8:0c:88:bb:03:5b:42:7d:ea:
         5b:4b:e9:3d:89:08:f1:7e:a6:9f:41:03:c9:1a:39:46:76:64:
         9c:bf:d7:3f:2f:ad:88:65:7c:2e:54:5c:04:5f:f3:17:cc:7e:
         5d:70:0a:35:47:a0:85:00:18:35:35:a9:bb:a0:0e:fb:8a:0d:
         c4:10:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:53 2026 by rpki-client