Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File:                     _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier:          KzOnDKmfw5aaV58Gj4kfX0lno+LU33L3JzFttaMusS4=
Subject key identifier:   26:D8:6F:9A:96:60:8E:6A:BE:ED:1A:11:3D:A1:94:90:35:1C:0D:C4
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer:       /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number:          36
Signing time:             Wed 25 Mar 2026 07:50:14 +0000
Manifest this update:     Wed 25 Mar 2026 07:50:13 +0000
Manifest next update:     Wed 01 Apr 2026 07:50:13 +0000
Files and hashes:         1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: aLSvRqa9URuG8WDbXjzJw8ldN0IwJkfpfYavTsq8W3M=)
                          2: 3A5DE11AE17511F084EED35B3E6F56BC.roa (hash: nGjZghgPTQAKj7m8Hrr253DItDRqZimbCIH9cpE2W6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
                          rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
        Validity
            Not Before: Mar 25 07:50:13 2026 GMT
            Not After : Apr  1 07:50:13 2026 GMT
        Subject: CN=69c393b6-d4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2a:44:6c:2d:03:76:92:c9:6c:00:16:4a:e0:
                    2d:e5:99:d6:62:8c:57:d3:91:8d:f8:de:b9:8d:c0:
                    90:30:9a:54:bd:51:de:15:a6:7a:55:6a:2a:e0:a6:
                    1b:f2:4b:3b:58:1b:03:ae:fd:94:f5:c6:d6:5d:a3:
                    39:f2:13:60:3c:0a:87:e2:58:a8:6b:7c:af:18:b6:
                    1b:70:98:71:db:fd:e5:1c:ed:b7:db:fd:e9:23:a1:
                    37:55:66:81:be:8d:eb:4e:d4:a6:7e:f2:92:27:7c:
                    2c:fc:39:69:59:18:5a:d5:9a:23:84:d5:b4:f2:80:
                    96:a8:9b:83:59:05:77:67:af:e1:4f:fd:e9:cf:d3:
                    4e:6e:b7:c5:aa:c2:61:c7:c4:5a:ce:75:67:ec:48:
                    df:5c:f7:d2:7f:d4:82:7f:cd:91:9a:12:ea:1a:3d:
                    86:eb:a3:6c:92:05:46:00:6c:1d:21:af:3f:94:de:
                    5a:90:aa:f6:c5:8d:9c:61:9c:a5:88:d9:e0:8c:6b:
                    45:4e:c6:99:f5:03:75:d1:07:bb:4c:d9:73:19:77:
                    9a:b1:ae:7c:7a:b6:45:e8:c1:53:91:0f:a4:c1:72:
                    9c:8e:db:af:c8:96:74:89:c8:01:ea:2b:09:0e:4f:
                    d3:0e:cf:e0:11:46:95:c2:67:d7:9b:53:41:1f:e7:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D8:6F:9A:96:60:8E:6A:BE:ED:1A:11:3D:A1:94:90:35:1C:0D:C4
            X509v3 Authority Key Identifier:
                keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:af:a9:c5:9d:64:49:f9:71:60:1e:18:c6:4c:4a:80:33:4a:
         8d:cd:2d:66:5f:5f:5f:00:9f:18:e3:98:61:a7:25:97:56:5d:
         52:72:1d:38:9d:f2:3b:b3:08:53:bb:ba:82:87:57:22:f4:9a:
         ab:b8:dd:ce:5f:b3:43:6f:e7:f5:ea:bb:bb:22:e4:82:96:9b:
         89:72:9e:b1:15:4c:6e:b7:ef:3f:c1:b1:df:6c:3d:07:e6:c8:
         11:f6:89:65:37:a1:33:13:73:28:79:06:7d:74:e1:e0:89:17:
         6d:44:f8:45:2e:7d:2c:58:d3:45:c3:e0:b7:f3:38:f8:59:e4:
         ab:f6:1d:7a:dd:d0:a2:0e:2f:13:4a:13:55:19:e3:39:b1:d6:
         fa:bb:a7:15:0c:79:b0:7d:60:08:c5:f4:ba:90:03:af:d2:a6:
         90:ed:47:9e:92:38:c7:5f:72:8f:1f:09:99:2b:1d:0b:96:13:
         a0:e9:df:5e:aa:31:88:ec:7e:df:2c:14:ad:92:39:80:5c:18:
         dc:4b:26:b7:e2:cc:d7:10:49:fc:d9:5c:0c:b1:96:ac:52:c2:
         55:14:ff:82:a4:f2:09:8e:4e:2d:a2:37:cc:10:0d:d2:48:f7:
         57:1f:88:12:43:23:79:9a:1f:57:9d:06:1c:b9:2f:d7:bd:a6:
         0a:26:63:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:42:34 2026 by rpki-client