Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
File:                     PnIyBI3L0sabqyJbikIhYEbBiyU.mft (raw, json)
Hash identifier:          LDpEujgdVXyhOmTVo/DYuRz5BpOpWmGvkiXmsUKLDqY=
Subject key identifier:   24:26:D6:6E:F3:28:91:AF:61:63:3A:02:49:6E:02:FF:8D:3F:82:ED
Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25
Certificate issuer:       /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
Manifest number:          0230
Signing time:             Tue 12 May 2026 18:53:13 +0000
Manifest this update:     Tue 12 May 2026 18:53:12 +0000
Manifest next update:     Tue 19 May 2026 18:53:12 +0000
Files and hashes:         1: PnIyBI3L0sabqyJbikIhYEbBiyU.crl (hash: YZkglWZ4lKYRhCXxfXEbxI/EWZMexNGb76t7JGok5Ho=)
                          2: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (hash: UxgWHSWCQslOtEVN8vxHfkeQxG5zKwXTOsnpS8saGYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25
        Validity
            Not Before: May 12 18:53:12 2026 GMT
            Not After : May 19 18:53:12 2026 GMT
        Subject: CN=6a037719-7221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:d1:ba:af:95:17:a7:9d:98:d9:75:d5:5f:
                    45:46:41:84:87:fe:a5:35:c1:e3:1c:2d:5a:9b:ba:
                    cb:9b:05:49:13:45:cb:45:24:1e:e1:a1:41:b5:c7:
                    61:dc:f0:81:7f:9b:ee:58:24:57:ff:60:a0:2b:f7:
                    84:d2:95:29:33:bf:15:26:66:02:29:db:a3:cf:b1:
                    3a:4f:9b:ce:92:70:b5:ae:5a:e5:25:62:2a:eb:97:
                    66:ad:6f:76:3d:6f:30:bc:b2:5a:5f:9e:a5:eb:52:
                    cd:ea:af:f9:4d:4e:b7:13:5a:1d:f4:98:58:d7:c6:
                    07:7d:70:32:12:b3:8f:71:a7:48:29:ae:ec:bc:a5:
                    fe:d7:f8:f1:08:9d:e6:ab:c0:11:f5:02:ff:85:f9:
                    95:a7:f2:21:33:3c:fe:64:75:79:34:1a:26:38:54:
                    f7:47:c7:00:d5:fa:85:a8:76:6e:26:52:6c:54:f2:
                    8b:55:8f:ed:26:fd:82:10:a8:4c:27:95:c2:b3:47:
                    4c:5d:35:0c:dd:ac:8b:cf:11:dc:ab:3c:c5:f4:07:
                    a7:69:5e:7d:be:dc:84:3f:f7:bb:13:a6:30:ea:6a:
                    5a:18:04:bd:25:57:7a:c8:3f:de:10:90:50:94:84:
                    91:c0:07:c1:a2:95:88:d3:8e:93:8d:fe:48:31:cb:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:26:D6:6E:F3:28:91:AF:61:63:3A:02:49:6E:02:FF:8D:3F:82:ED
            X509v3 Authority Key Identifier:
                keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:de:4b:53:9e:3c:46:40:a8:df:45:d5:4c:f8:3b:7b:1b:f9:
         6d:86:75:f7:52:58:85:bd:12:85:59:58:45:6f:55:02:93:3d:
         6a:64:b3:95:4a:a0:d5:91:28:12:d9:a3:7e:86:cc:78:c0:fc:
         1e:49:f0:ae:9c:72:12:bb:31:b5:8f:76:c1:8b:5b:a1:5c:74:
         13:ea:e3:77:13:2c:9c:7d:9a:b8:2c:87:d9:bf:1f:5a:9e:4f:
         41:88:41:32:5b:67:5c:53:12:89:0a:0f:9e:f6:15:d2:92:5d:
         60:08:89:86:da:4f:6d:50:8d:be:c4:f9:49:8f:4a:e2:1f:87:
         6c:90:9a:5b:0c:53:fd:ac:8b:4c:c2:52:2e:ad:94:1c:24:f2:
         0e:37:d0:f6:a8:2a:64:98:25:4e:20:ba:57:e8:8b:70:2b:a4:
         cd:b6:53:92:1d:99:b8:28:35:f7:43:07:1b:b1:33:38:8c:f3:
         b4:cd:60:85:7b:11:ce:9a:2d:ec:33:f7:36:e3:3b:4f:6b:00:
         c7:4e:08:c3:ad:da:67:b4:92:46:1f:2d:89:25:d6:64:5f:d8:
         04:19:c7:eb:b7:de:47:24:e5:fe:fe:c1:c7:f6:d1:1f:4c:fe:
         bf:21:0b:19:11:f0:4a:68:36:6a:7b:65:fb:6e:01:f7:f6:50:
         3b:72:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:23 2026 by rpki-client