Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File:                     Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier:          68vbY03Nf740l6pRzDKNQX56lyXiEcE4TiVtFgR7NN4=
Subject key identifier:   61:73:84:9A:EE:A1:D9:E7:8F:32:80:A0:11:C4:56:46:30:7A:01:24
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer:       /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number:          4E
Signing time:             Fri 17 Apr 2026 07:55:38 +0000
Manifest this update:     Fri 17 Apr 2026 07:55:37 +0000
Manifest next update:     Fri 24 Apr 2026 07:55:37 +0000
Files and hashes:         1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: rg80zqg4ovJ2ogg17SrbxYRZ9G9M5taxlx8+87HSUa0=)
                          2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
        Validity
            Not Before: Apr 17 07:55:37 2026 GMT
            Not After : Apr 24 07:55:37 2026 GMT
        Subject: CN=69e1e77a-53eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:8f:7d:54:d1:38:43:28:55:2c:cf:05:62:
                    47:19:d4:3b:5c:59:ca:73:3a:d2:2d:93:d9:e4:6f:
                    f2:fc:8b:6d:a3:7e:30:4c:00:2d:1c:fa:df:39:f5:
                    1b:dd:b5:ff:7e:cb:f3:17:46:88:f1:59:69:81:e6:
                    b1:78:d7:ec:a4:10:dc:a2:30:55:eb:94:dd:8a:b5:
                    b7:db:25:ac:2f:bb:96:43:bc:f8:58:13:f8:91:2c:
                    ac:35:52:89:43:46:e9:a3:8d:f2:5a:53:da:a4:21:
                    66:70:0f:e0:1c:39:14:8a:d0:97:d9:bc:e9:4a:1e:
                    40:93:00:47:1b:15:0c:7b:cf:ff:c3:5e:3d:2e:94:
                    a1:a7:5e:5b:e5:0f:33:b2:2b:e3:3a:e3:ed:6b:0d:
                    96:13:52:54:80:af:cc:4b:93:b9:2c:4f:6c:5c:9c:
                    b0:33:6e:d8:13:83:d3:b5:0d:37:a3:7d:4c:86:65:
                    7c:4f:f9:fa:1b:c3:d6:cf:1c:9a:6e:11:f5:95:3a:
                    36:95:8c:e8:47:a1:ed:29:9b:76:6a:1a:8c:e9:d7:
                    10:cf:34:55:86:94:4d:77:60:53:1b:d0:24:7a:a0:
                    e7:a1:dc:33:ce:e1:7d:f1:57:b3:85:55:1a:bc:5c:
                    ea:d8:53:62:68:25:11:66:5b:12:6c:a3:62:5c:1a:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:84:9A:EE:A1:D9:E7:8F:32:80:A0:11:C4:56:46:30:7A:01:24
            X509v3 Authority Key Identifier:
                keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:cb:3f:98:92:2a:02:e1:fc:7a:f3:97:15:aa:1f:9a:a8:
         bd:23:e6:07:9b:08:a7:36:a0:ed:9b:c7:a1:62:0d:64:ac:92:
         41:2f:18:4c:aa:cc:5c:e1:a1:34:48:13:92:bc:3f:01:b3:b3:
         85:f7:ca:8f:aa:44:73:a3:e4:ee:29:cc:48:a9:14:1b:b8:0c:
         1f:48:9a:c3:12:6a:e6:18:ca:aa:12:3f:cb:27:e0:33:15:88:
         ee:dc:f3:cf:a6:74:9b:9e:8b:57:0e:35:96:e7:a7:88:9d:18:
         e0:40:75:2a:d2:61:dd:3b:20:4d:28:ce:26:56:47:80:b8:a2:
         cb:9b:eb:98:2d:fb:1b:43:18:cd:cd:9f:ed:11:2b:bf:12:52:
         42:c0:1c:b7:a9:a3:93:99:e6:41:72:7c:2b:c3:32:89:f3:23:
         77:58:9e:f4:64:a1:dc:90:a5:dd:f0:86:42:8c:3d:67:b6:88:
         66:fa:c7:76:89:cb:4a:c7:76:52:16:10:95:fa:b5:f9:6b:9f:
         74:de:91:86:ec:2e:7d:9d:73:f8:4e:5c:c9:ea:dd:41:a9:ae:
         57:3f:d8:6e:ff:7c:34:ac:af:b1:29:9e:c1:11:e9:d8:04:76:
         73:18:11:d4:26:9f:d6:ef:cc:29:7e:91:8c:3f:07:82:3a:10:
         57:52:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:59 2026 by rpki-client