Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          Fk/YY483deR6O7iS7ODdT6eJulvcCJkNvduoQq1/ucY=
Subject key identifier:   1F:36:C9:7A:41:3C:D8:76:66:FF:77:B6:E6:EC:F9:8F:09:E1:11:FC
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       0586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          0562
Signing time:             Thu 16 Apr 2026 23:21:41 +0000
Manifest this update:     Thu 16 Apr 2026 23:21:41 +0000
Manifest next update:     Thu 23 Apr 2026 23:21:41 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: mmNNBbaGyVVmZVTp3FWvWK/K2vVrAwVJBrDG8XgjCyc=)
                          2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=)
                          3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=)
                          4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Apr 16 23:21:41 2026 GMT
            Not After : Apr 23 23:21:41 2026 GMT
        Subject: CN=69e16f05-e5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ff:f1:ba:c4:7a:1a:e4:c8:3d:7e:e1:a6:0d:
                    8c:3b:7c:33:0c:d8:b4:60:d2:9a:ff:bc:be:d5:28:
                    f7:33:85:d1:2d:46:5e:91:81:30:9d:b2:0e:1c:77:
                    48:3e:97:03:29:39:8e:98:e3:f5:a0:31:14:9c:4b:
                    20:f7:f5:f5:6a:a8:92:2a:35:42:95:fa:9d:d3:ca:
                    0f:9e:e1:95:00:e4:8e:5d:05:0b:40:5b:9f:47:a9:
                    5a:e5:9b:25:6a:b7:59:88:3a:19:ef:4d:b4:bc:53:
                    3d:16:7a:75:b0:09:c1:5c:5f:d9:b8:4c:b8:36:0d:
                    d9:69:ff:cc:bb:1d:cc:6b:7b:e5:cf:69:48:a7:a6:
                    59:f7:4d:8b:7b:ec:24:6d:a9:7c:fe:16:ee:81:19:
                    aa:ec:e4:d7:dd:27:8f:1a:ca:f1:67:af:e3:77:19:
                    66:8b:cd:2e:f9:bb:27:3c:03:52:d9:c5:01:e8:60:
                    3c:73:27:d6:36:10:e2:87:c8:c7:19:dc:a8:4a:82:
                    e2:de:18:fe:88:97:18:b0:ac:67:c8:d1:22:c1:16:
                    f8:3c:29:86:ce:4a:9f:6b:b2:71:55:8a:0a:44:1c:
                    0a:c3:8f:31:c5:af:66:bd:91:65:a2:24:cd:4d:9c:
                    c0:7f:68:f9:33:b4:42:e1:0a:82:54:5e:71:67:00:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:C9:7A:41:3C:D8:76:66:FF:77:B6:E6:EC:F9:8F:09:E1:11:FC
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0e:a3:93:c3:63:0c:c0:cb:80:08:c9:3c:c4:ab:54:28:db:
         01:ed:36:23:ed:25:3b:d4:b4:d2:d1:b6:d8:d8:ea:12:25:05:
         09:4c:d9:2f:4d:29:c7:9d:b5:cc:75:0e:23:ae:96:65:e4:2c:
         b4:f5:b3:f2:2d:4b:b0:c8:ea:8d:07:b2:b3:76:3f:fb:60:79:
         b3:b1:ba:66:75:09:ee:4a:85:96:69:60:65:4a:46:c0:20:28:
         3f:d6:d2:18:f1:0b:6d:c0:57:cc:b9:a0:cd:19:b0:4d:0b:e7:
         fd:27:18:de:39:8f:b5:98:5e:4a:6f:66:4b:e5:14:24:05:74:
         dd:32:13:bb:39:bf:b4:9d:06:88:c9:01:fb:65:a5:2b:05:46:
         43:5e:da:56:ce:8d:57:1d:d0:2c:a7:a6:eb:cc:20:70:2a:87:
         1a:9f:e3:aa:e3:16:68:b9:93:53:47:ea:70:0d:75:4b:3b:15:
         80:79:21:c4:99:ab:0b:13:f9:69:d0:4d:f1:3b:73:03:bc:e2:
         e6:00:14:12:0a:f0:b6:a4:33:cb:64:11:27:bb:32:8c:47:f2:
         d5:60:38:76:11:62:0d:0e:1d:0f:24:91:5b:81:47:aa:62:b1:
         4d:cf:f6:17:ca:16:7a:46:e0:9d:52:59:1d:82:d6:67:62:fe:
         55:03:5a:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw
MkI4MkY3NkQwHhcNMjYwNDE2MjMyMTQxWhcNMjYwNDIzMjMyMTQxWjAYMRYwFAYD
VQQDEw02OWUxNmYwNS1lNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7//xusR6GuTIPX7hpg2MO3wzDNi0YNKa/7y+1Sj3M4XRLUZekYEwnbIOHHdI
PpcDKTmOmOP1oDEUnEsg9/X1aqiSKjVClfqd08oPnuGVAOSOXQULQFufR6la5Zsl
ardZiDoZ7020vFM9Fnp1sAnBXF/ZuEy4Ng3Zaf/Mux3Ma3vlz2lIp6ZZ902Le+wk
bal8/hbugRmq7OTX3SePGsrxZ6/jdxlmi80u+bsnPANS2cUB6GA8cyfWNhDih8jH
GdyoSoLi3hj+iJcYsKxnyNEiwRb4PCmGzkqfa7JxVYoKRBwKw48xxa9mvZFloiTN
TZzAf2j5M7RC4QqCVF5xZwAMEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB82yXpB
PNh2Zv93tubs+Y8J4RH8MB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy
MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt
ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANg6jk8NjDMDLgAjJPMSrVCjbAe02I+0lO9S00tG22NjqEiUFCUzZL00px521
zHUOI66WZeQstPWz8i1LsMjqjQeys3Y/+2B5s7G6ZnUJ7kqFlmlgZUpGwCAoP9bS
GPELbcBXzLmgzRmwTQvn/ScY3jmPtZheSm9mS+UUJAV03TITuzm/tJ0GiMkB+2Wl
KwVGQ17aVs6NVx3QLKem68wgcCqHGp/jquMWaLmTU0fqcA11SzsVgHkhxJmrCxP5
adBN8TtzA7zi5gAUEgrwtqQzy2QRJ7syjEfy1WA4dhFiDQ4dDySRW4FHqmKxTc/2
F8oWekbgnVJZHYLWZ2L+VQNaFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:25 2026 by rpki-client