Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
File:                     pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json)
Hash identifier:          r3qb2hbkqew/tRrEElfdVL5idGzE5TYKbOBhj8Jrq7A=
Subject key identifier:   97:65:36:F8:D6:CC:20:88:68:34:9E:13:39:CD:E9:27:4D:5B:E3:91
Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7
Certificate issuer:       /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
Manifest number:          66
Signing time:             Fri 17 Apr 2026 04:52:44 +0000
Manifest this update:     Fri 17 Apr 2026 04:52:44 +0000
Manifest next update:     Fri 24 Apr 2026 04:52:44 +0000
Files and hashes:         1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: 0vrTXqpvk8ubP1n+cnXwqwBMRxn9Trh4rmC1xmDChsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7
        Validity
            Not Before: Apr 17 04:52:44 2026 GMT
            Not After : Apr 24 04:52:44 2026 GMT
        Subject: CN=69e1bc9c-dfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:5e:b0:cd:2f:9c:ef:ca:c5:c0:e8:6d:d7:
                    c6:cd:6f:f0:bb:84:d5:84:b4:1e:36:4c:9b:9f:87:
                    a7:5a:84:20:25:b4:b8:5d:e7:91:ca:54:51:da:3f:
                    33:a6:5b:74:59:e7:ba:fe:87:19:91:1c:43:03:cb:
                    40:d2:65:a9:e5:bf:81:3a:d8:ba:22:1b:29:d4:b6:
                    e5:4b:de:c4:54:cd:c6:a8:ca:3d:ea:db:c1:91:83:
                    0d:44:1c:b0:26:d3:af:fb:ef:8c:87:95:f8:63:ee:
                    dc:0c:ff:4e:61:fb:44:47:b8:e8:5b:60:e3:d1:fd:
                    d8:9a:73:dd:10:18:ed:52:74:c8:b5:29:25:27:98:
                    2a:e1:2a:2a:67:c0:45:6b:1c:08:c9:8d:65:34:ad:
                    df:8d:c5:c0:47:6c:7a:05:7e:dc:27:c1:d7:61:e8:
                    4d:42:7a:2f:67:32:85:bb:73:cb:33:98:75:7b:f2:
                    9a:2b:60:a8:a8:6c:a8:81:fa:70:f9:c6:62:6c:39:
                    27:9e:b7:5f:2e:61:f9:f8:89:43:45:af:99:59:98:
                    d3:99:20:da:9b:6f:1d:21:c0:01:55:a7:c1:47:a3:
                    17:31:d1:cd:1b:71:ad:d0:c9:27:fc:06:b0:81:d2:
                    7d:45:70:98:8b:fb:58:66:e9:08:3d:dc:33:49:09:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:65:36:F8:D6:CC:20:88:68:34:9E:13:39:CD:E9:27:4D:5B:E3:91
            X509v3 Authority Key Identifier:
                keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:52:5d:6b:09:d5:e4:1e:74:c8:03:59:94:38:b4:2d:b5:b5:
         4c:e0:7c:7f:05:46:07:82:85:2b:bb:b4:74:16:99:09:41:5c:
         d9:dd:6a:d8:49:71:3f:fd:79:35:d8:12:22:94:27:67:bd:df:
         70:79:cf:26:73:88:24:f2:ab:e6:ff:f3:3b:b8:a1:ad:32:13:
         d7:15:61:d5:5f:1f:bf:0f:d9:47:b9:65:08:76:19:ef:9d:4f:
         41:fe:19:69:23:85:8e:aa:27:98:60:40:d4:f1:e3:d1:ef:b7:
         0c:78:5d:e9:ae:17:71:f7:57:0a:45:a8:05:89:84:d4:8e:1d:
         9c:f5:d9:47:59:e3:85:56:ce:1e:cc:19:86:c0:ba:ca:ff:09:
         4a:d9:86:2e:58:7c:b4:e2:3d:64:4c:d0:59:22:8c:13:c7:1b:
         fa:c0:6c:e7:7c:c0:27:7d:1e:fb:43:b7:06:d9:ae:be:b3:2e:
         7d:9a:43:e0:44:76:5a:f4:bc:50:c0:da:26:db:19:a0:f6:ae:
         57:6a:fe:f2:32:a9:35:52:a4:52:1b:4d:8a:5f:68:78:8f:61:
         5c:b4:01:7e:86:9e:7e:71:1f:59:af:0e:a0:bf:34:cc:da:cd:
         08:1d:67:23:c1:8d:0d:92:65:d6:66:ea:bb:97:8e:a3:0c:44:
         28:46:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:58 2026 by rpki-client