Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
File:                     plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json)
Hash identifier:          NnHbWP9vaAObTSgXfmvrFzgwAd5SvbSYZpRUoAlSl0g=
Subject key identifier:   E5:87:95:88:C9:AD:8C:AC:E4:CD:CF:B2:EF:5D:2E:C7:FE:A2:5A:3D
Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58
Certificate issuer:       /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
Certificate serial:       10FB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
Manifest number:          10F1
Signing time:             Tue 24 Mar 2026 17:10:58 +0000
Manifest this update:     Tue 24 Mar 2026 17:10:58 +0000
Manifest next update:     Tue 31 Mar 2026 17:10:58 +0000
Files and hashes:         1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: +HKm0d27XCCc8Sr+bGbvPKZVyZZ+w+7S+LLwczsGkrM=)
                          2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: wI6KdFFpCwSF2bQccj6IQPBnnam0u8jNYhmTT7mAyRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4347 (0x10fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
        Validity
            Not Before: Mar 24 17:10:58 2026 GMT
            Not After : Mar 31 17:10:58 2026 GMT
        Subject: CN=69c2c5a2-37f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:24:49:f6:be:76:11:6a:88:25:99:c5:b5:
                    59:42:9f:81:f9:cc:d3:3e:eb:55:f3:cb:5b:34:1a:
                    5c:8b:ac:0a:58:b9:ee:1e:55:46:d3:f5:07:7d:71:
                    3b:9c:a8:8d:dd:a1:fe:00:9d:63:d8:0e:25:ad:37:
                    46:0c:5f:1f:72:58:43:e3:f7:df:b1:f5:1b:b5:1b:
                    68:44:31:9d:c9:e1:4b:a7:ed:43:3e:20:e1:8c:33:
                    b1:de:00:1d:87:53:8e:78:8c:0d:88:91:b8:c7:56:
                    82:88:9c:12:4c:01:1c:08:cf:99:cb:c3:f2:8d:41:
                    c8:9a:e5:e1:13:2d:68:cd:9b:80:d1:24:1f:70:72:
                    3d:53:ea:7d:51:70:79:29:36:1a:0d:3b:15:b7:53:
                    09:e4:37:c3:5f:c3:5c:7d:e0:f0:0d:e2:c2:f5:9f:
                    92:3c:b2:c5:87:f5:ef:3a:fc:8a:75:3b:e9:ff:2c:
                    9c:06:ab:8a:04:92:d6:6b:b1:e9:66:74:ab:ac:ed:
                    4d:c5:22:f4:b5:8e:1d:54:d9:af:f5:03:ec:51:ef:
                    62:4f:5a:9f:29:62:6f:52:7c:cf:c2:26:7b:f1:19:
                    b2:e5:36:0c:91:04:a6:0f:07:4f:9f:2d:f1:7b:c8:
                    7f:88:2a:d5:59:a9:d7:ca:94:a1:86:4e:ea:e5:e8:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:95:88:C9:AD:8C:AC:E4:CD:CF:B2:EF:5D:2E:C7:FE:A2:5A:3D
            X509v3 Authority Key Identifier:
                keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:9c:78:1b:c0:a6:75:6d:25:eb:a2:9b:57:2d:a5:be:d6:
         d2:71:fb:e0:91:ad:7d:24:09:20:01:6a:21:1e:53:fd:63:f2:
         7d:0e:0c:95:c9:e2:60:38:9f:9a:68:54:9d:33:db:d3:25:ea:
         eb:b5:92:38:a3:3d:b9:38:3c:aa:1c:9b:ad:f1:5c:c0:10:4b:
         bf:1b:8f:41:a3:8c:94:9c:6e:90:72:e6:6c:5e:69:8a:85:e6:
         f9:67:c4:52:9e:e1:43:b1:ea:12:79:d8:ac:dc:cf:be:dc:c9:
         b5:98:38:26:56:f8:d3:93:df:55:b6:d1:16:c4:46:83:26:04:
         13:32:19:d5:4f:a3:10:16:28:fd:14:7d:d3:bb:e6:08:77:ad:
         20:a0:0c:6a:33:37:81:8e:47:3f:44:8f:2c:78:31:36:a9:6c:
         04:15:4b:f0:da:be:34:1e:a6:0b:2b:73:0b:e1:84:30:44:44:
         d5:40:33:6b:db:d7:04:9e:eb:82:d1:4d:b7:f9:42:dd:a3:de:
         ba:a3:ae:f1:c5:03:cb:5d:72:21:ca:6a:ca:9d:2c:28:7b:16:
         bc:a2:ea:cc:a3:fa:e3:38:16:e1:d3:11:35:bb:76:30:f2:eb:
         c4:b8:00:74:d3:dd:82:b5:20:15:d4:f5:c0:01:60:c2:39:0e:
         e2:11:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:36 2026 by rpki-client