Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File:                     Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier:          TxOFCtCJy37gn5jxmXD7c9wbaWtiNrWW5TJzua6ZiQo=
Subject key identifier:   1F:F3:00:59:DB:AA:6E:0D:7D:44:44:5D:88:7A:E0:DE:A1:97:17:BD
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer:       /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number:          36
Signing time:             Sun 01 Mar 2026 09:57:51 +0000
Manifest this update:     Sun 01 Mar 2026 09:57:50 +0000
Manifest next update:     Sun 08 Mar 2026 09:57:50 +0000
Files and hashes:         1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: YYmOrxIItEOPw2oSU83NwP2/By6Wu+hIV0Hr7ls43f8=)
                          2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
        Validity
            Not Before: Mar  1 09:57:50 2026 GMT
            Not After : Mar  8 09:57:50 2026 GMT
        Subject: CN=69a40d9f-882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:79:3c:63:73:0a:84:81:2b:5e:87:bb:95:7d:
                    53:84:ad:46:8b:d1:d3:84:9c:66:4b:6a:af:cc:5a:
                    9c:3b:5a:fa:31:c8:42:c5:60:99:aa:54:f4:32:3c:
                    f7:46:02:f2:7e:1a:b9:7b:0d:5b:aa:b0:74:ce:2e:
                    07:45:d1:b1:28:dc:85:c1:1b:7c:e5:fb:89:82:f6:
                    4d:09:4c:2e:22:50:52:26:da:c4:1b:d2:49:fc:3a:
                    fa:ef:3f:07:c5:0d:cf:ed:08:04:6d:b9:01:94:45:
                    c5:bc:bf:ee:c9:b7:bf:d7:4c:89:dc:4d:d3:00:55:
                    98:de:5d:05:a4:ee:30:2d:a7:6e:7a:52:fc:62:d1:
                    ea:cf:1c:96:a4:6e:21:02:13:27:3e:65:93:11:50:
                    73:ab:5a:d0:8f:ab:37:9f:2d:97:bc:f4:2b:6c:ca:
                    8f:e6:b9:bf:b5:ac:e8:e6:b5:ee:ea:c9:9b:a6:6c:
                    5b:e1:aa:36:cf:0e:1b:33:14:05:2c:d1:7f:c1:84:
                    62:e6:77:ba:c7:d8:a6:1d:7d:f3:77:74:aa:20:cc:
                    08:25:96:63:8b:30:63:68:23:52:ba:09:6f:71:a7:
                    ab:56:22:97:35:76:e9:98:3b:92:f0:04:22:da:2f:
                    9a:b9:ab:31:28:64:51:14:ba:00:50:65:6d:ab:64:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:00:59:DB:AA:6E:0D:7D:44:44:5D:88:7A:E0:DE:A1:97:17:BD
            X509v3 Authority Key Identifier:
                keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:de:07:06:be:87:46:40:9f:30:13:c6:71:fe:a0:a3:43:9c:
         30:15:93:8d:48:7f:96:d1:c8:be:19:c1:c0:d1:5e:5f:2d:94:
         c0:05:e9:61:08:33:49:48:64:bf:11:f6:1b:b8:39:88:21:08:
         2d:d2:3c:d9:49:57:9c:62:ac:8a:05:54:7c:20:6b:99:1a:f1:
         5b:32:11:43:c1:2a:a4:53:28:90:b8:79:e8:e7:01:f6:16:0f:
         9e:2f:91:c4:dd:d8:32:48:82:51:0c:0a:42:83:ac:52:54:0d:
         88:0b:58:74:96:94:93:b0:5d:3c:ad:69:b4:37:77:fd:21:1f:
         91:1a:8f:bc:54:3b:c0:51:ae:de:a0:1e:38:01:99:f4:ca:59:
         85:88:74:e4:60:c8:39:6f:68:ed:0f:98:46:17:dd:24:51:b7:
         59:9b:8e:e9:ef:24:c3:63:a9:4a:da:1a:03:2d:67:dd:1c:1c:
         00:19:ee:75:f2:48:c2:8e:05:d7:de:c0:14:cd:65:08:13:7c:
         8d:fe:7e:4f:6b:a1:05:60:3a:80:ba:8f:b0:9b:0a:ab:43:b8:
         0d:76:e5:93:77:10:47:4c:17:9f:3a:d7:c2:ec:79:22:76:ec:
         7c:0c:a2:11:f1:7e:a6:e9:54:7f:3d:5a:42:76:e0:8a:f6:f9:
         a9:7b:44:e3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RDdBMzExMC8GA1UEBRMoM0UwQzM5QjU1ODRBQ0ZBRTQxODA4MTM4OEY0RjBBOTRE
NkRBOEUwNjAeFw0yNjAzMDEwOTU3NTBaFw0yNjAzMDgwOTU3NTBaMBgxFjAUBgNV
BAMTDTY5YTQwZDlmLTg4MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDueTxjcwqEgSteh7uVfVOErUaL0dOEnGZLaq/MWpw7WvoxyELFYJmqVPQyPPdG
AvJ+Grl7DVuqsHTOLgdF0bEo3IXBG3zl+4mC9k0JTC4iUFIm2sQb0kn8OvrvPwfF
Dc/tCARtuQGURcW8v+7Jt7/XTIncTdMAVZjeXQWk7jAtp256Uvxi0erPHJakbiEC
Eyc+ZZMRUHOrWtCPqzefLZe89Ctsyo/mub+1rOjmte7qyZumbFvhqjbPDhszFAUs
0X/BhGLmd7rH2KYdffN3dKogzAgllmOLMGNoI1K6CW9xp6tWIpc1dumYO5LwBCLa
L5q5qzEoZFEUugBQZW2rZIVdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH/MAWduq
bg19RERdiHrg3qGXF70wHwYDVR0jBBgwFoAUPgw5tVhKz65BgIE4j08KlNbajgYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzhGMDYwMjVBQzUy
NDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1QmdJRTRqMDhLbE5iYWpn
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUGd3NXRWaEt6NjVCZ0lFNGowOEtsTmJhamdZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE
N0EzLzhGMDYwMjVBQzUyNDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1
QmdJRTRqMDhLbE5iYWpnWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAh3gcGvodGQJ8wE8Zx/qCjQ5wwFZONSH+W0ci+GcHA0V5fLZTABelhCDNJSGS/
EfYbuDmIIQgt0jzZSVecYqyKBVR8IGuZGvFbMhFDwSqkUyiQuHno5wH2Fg+eL5HE
3dgySIJRDApCg6xSVA2IC1h0lpSTsF08rWm0N3f9IR+RGo+8VDvAUa7eoB44AZn0
ylmFiHTkYMg5b2jtD5hGF90kUbdZm47p7yTDY6lK2hoDLWfdHBwAGe518kjCjgXX
3sAUzWUIE3yN/n5Pa6EFYDqAuo+wmwqrQ7gNduWTdxBHTBefOtfC7Hkidux8DKIR
8X6m6VR/PVpCduCK9vmpe0Tj
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:25 2026 by rpki-client