Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
File:                     PGIfAALQYHByq7Fal4r7xa9DpVw.mft (raw, json)
Hash identifier:          AGpac9UXIu3T5+ZgIQlU70jXxrmCkjtpqICjf7mz9SE=
Subject key identifier:   14:F4:6C:3C:8B:85:E9:12:9D:80:F5:03:F7:C8:24:30:48:84:A9:62
Authority key identifier: 3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
Certificate issuer:       /CN=A91F4130/serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
Manifest number:          39
Signing time:             Sun 01 Mar 2026 09:55:30 +0000
Manifest this update:     Sun 01 Mar 2026 09:55:29 +0000
Manifest next update:     Sun 08 Mar 2026 09:55:29 +0000
Files and hashes:         1: PGIfAALQYHByq7Fal4r7xa9DpVw.crl (hash: CZpibCpM1edI2bA8QifHzebpmVuTwq85arZg0kHZAYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
                          rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4130, serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
        Validity
            Not Before: Mar  1 09:55:29 2026 GMT
            Not After : Mar  8 09:55:29 2026 GMT
        Subject: CN=69a40d11-0444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:13:bb:ce:ee:73:d9:f0:0e:bb:00:94:28:
                    4f:ea:4d:04:1c:2b:a2:c9:de:24:92:27:5e:c1:de:
                    22:58:c8:77:d2:b6:8c:f7:64:3b:e1:36:dc:73:72:
                    da:08:33:41:08:15:1c:ca:37:30:d2:4f:1f:58:84:
                    00:05:8f:53:8b:90:46:d8:49:bc:7c:ed:07:81:91:
                    61:0f:5a:ce:62:89:aa:a4:7a:c2:90:e5:ca:c3:79:
                    b1:32:31:92:64:aa:90:cd:3f:70:22:e5:b7:45:02:
                    41:a8:08:20:37:34:bf:6b:b4:e2:ef:d7:78:16:e8:
                    84:a5:39:a1:8b:56:ec:d0:a0:8d:4b:40:be:36:18:
                    7b:0e:e7:52:13:db:96:60:74:55:65:9a:99:b2:20:
                    09:46:10:e9:09:99:0b:e4:84:b0:55:da:67:88:12:
                    75:e6:ee:15:e1:6c:79:59:8d:df:29:22:72:16:19:
                    93:fe:74:2c:50:45:d4:f9:3e:29:51:c1:12:05:94:
                    6a:f5:e1:c6:59:ec:08:aa:ee:54:a4:e7:d6:5a:e1:
                    31:26:7d:94:9c:64:be:69:2d:1a:00:ca:77:85:7e:
                    12:8e:e2:f2:0f:ca:f7:5f:50:17:e5:0a:f3:7d:3f:
                    cb:e5:fb:66:0e:91:cb:cc:cf:0d:8e:6c:e0:45:cd:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F4:6C:3C:8B:85:E9:12:9D:80:F5:03:F7:C8:24:30:48:84:A9:62
            X509v3 Authority Key Identifier:
                keyid:3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:b7:af:a9:0e:0b:c7:a1:cb:00:17:2c:a5:26:c1:96:20:ee:
         33:e2:d9:f7:a9:82:52:f6:ea:ae:8d:cd:68:0f:ec:b1:f8:53:
         f9:6a:f9:0d:86:4c:d8:b1:5b:1f:2e:66:65:de:66:9e:65:31:
         8b:d7:86:c1:dc:cd:8e:11:a1:0b:d5:08:7b:89:57:2d:c6:80:
         fb:ab:e0:1d:a6:2a:fd:75:d8:2a:e7:1a:7e:b4:e1:d8:d4:c8:
         c7:4b:97:1b:8d:3b:c9:52:fc:0b:4e:5b:6b:44:a6:f5:f4:fa:
         b3:ef:8e:5c:75:4c:58:b3:78:07:b5:fc:e0:eb:d3:53:d4:ec:
         87:b7:64:c0:1b:3e:3c:65:a7:1a:1c:39:58:3c:77:90:56:b8:
         85:66:cf:49:dd:b7:78:db:ea:fb:af:08:77:3e:1e:e3:56:0f:
         64:07:b5:00:4d:77:46:50:0f:52:f6:1a:25:a9:90:52:9f:85:
         2f:e9:ad:4e:0a:4b:c7:48:82:70:9d:30:1d:48:eb:d1:10:71:
         d3:ec:29:a0:5d:ac:50:db:78:24:da:7e:f7:07:c4:8f:5c:f4:
         a9:4f:ce:66:e5:2a:74:df:d3:de:a8:a6:90:16:e1:d0:07:e6:
         a9:58:18:c6:2f:c8:ce:90:8c:1a:80:b2:9b:cd:54:f9:b1:fe:
         78:47:8f:60
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NDEzMDExMC8GA1UEBRMoM0M2MjFGMDAwMkQwNjA3MDcyQUJCMTVBOTc4QUZCQzVB
RjQzQTU1QzAeFw0yNjAzMDEwOTU1MjlaFw0yNjAzMDgwOTU1MjlaMBgxFjAUBgNV
BAMTDTY5YTQwZDExLTA0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAHhO7zu5z2fAOuwCUKE/qTQQcK6LJ3iSSJ17B3iJYyHfStoz3ZDvhNtxzctoI
M0EIFRzKNzDSTx9YhAAFj1OLkEbYSbx87QeBkWEPWs5iiaqkesKQ5crDebEyMZJk
qpDNP3Ai5bdFAkGoCCA3NL9rtOLv13gW6ISlOaGLVuzQoI1LQL42GHsO51IT25Zg
dFVlmpmyIAlGEOkJmQvkhLBV2meIEnXm7hXhbHlZjd8pInIWGZP+dCxQRdT5PilR
wRIFlGr14cZZ7Aiq7lSk59Za4TEmfZScZL5pLRoAyneFfhKO4vIPyvdfUBflCvN9
P8vl+2YOkcvMzw2ObOBFzcUjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFPRsPIuF
6RKdgPUD98gkMEiEqWIwHwYDVR0jBBgwFoAUPGIfAALQYHByq7Fal4r7xa9DpVww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MTMwL0ZEMDUwRDIwQzEx
MjExRjBBMjRGMTQyMEM0RjlBRTAyL1BHSWZBQUxRWUhCeXE3RmFsNHI3eGE5RHBW
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUEdJZkFBTFFZSEJ5cTdGYWw0cjd4YTlEcFZ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0
MTMwL0ZEMDUwRDIwQzExMjExRjBBMjRGMTQyMEM0RjlBRTAyL1BHSWZBQUxRWUhC
eXE3RmFsNHI3eGE5RHBWdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDTt6+pDgvHocsAFyylJsGWIO4z4tn3qYJS9uqujc1oD+yx+FP5avkNhkzYsVsf
LmZl3maeZTGL14bB3M2OEaEL1Qh7iVctxoD7q+Adpir9ddgq5xp+tOHY1MjHS5cb
jTvJUvwLTltrRKb19Pqz745cdUxYs3gHtfzg69NT1OyHt2TAGz48ZacaHDlYPHeQ
VriFZs9J3bd42+r7rwh3Ph7jVg9kB7UATXdGUA9S9holqZBSn4Uv6a1OCkvHSIJw
nTAdSOvREHHT7CmgXaxQ23gk2n73B8SPXPSpT85m5Sp039PeqKaQFuHQB+apWBjG
L8jOkIwagLKbzVT5sf54R49g
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:22 2026 by rpki-client