Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          WKj+ZHf3nwxd0GyC+y7QVUfQBXp6ZNI4mFu18E9XaY4=
Subject key identifier:   CC:E0:0C:34:46:E8:1B:F6:48:8F:B9:C7:7D:60:AD:44:A8:ED:7F:E6
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          01A0
Signing time:             Wed 13 May 2026 04:18:20 +0000
Manifest this update:     Wed 13 May 2026 04:18:20 +0000
Manifest next update:     Wed 20 May 2026 04:18:20 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: XMQpKc0GfkcvzW2TIS2KeQWnzbramn25JH7I5cFu5U8=)
                          2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: mtMrgn8E6rJ7Yx0iQX63xtbQeZIjjv/MdEQJpqPZR5c=)
                          3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: 33xsa1I7dTsH1mG4g4Z5bezPgV/Y0HHBZjYGiwsfW78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: May 13 04:18:20 2026 GMT
            Not After : May 20 04:18:20 2026 GMT
        Subject: CN=6a03fb8c-1f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:a0:c6:16:b2:a3:ef:3e:fe:27:4a:33:18:
                    60:a7:a7:04:bd:5e:e3:cd:ca:13:31:db:fa:0c:f6:
                    17:46:57:53:f1:9c:59:d7:c0:c8:d1:25:ef:8f:f5:
                    73:1e:40:2c:63:99:a2:d3:41:80:90:c8:f2:88:9c:
                    8f:a7:a2:33:25:01:96:db:26:b5:4a:75:55:94:c9:
                    08:cb:c4:0b:b6:e1:b7:fe:65:b8:fb:a2:fe:7a:07:
                    8a:d0:85:27:7e:75:be:25:38:2c:f0:9d:55:50:25:
                    41:c2:b4:bf:3f:5a:32:2e:ec:2d:78:62:64:95:31:
                    b6:48:70:17:19:c1:f0:5e:b7:ed:d4:0b:02:ff:cd:
                    75:c0:7a:ce:b3:9d:e1:a4:71:e1:7c:f1:dd:e9:7a:
                    e8:db:60:6c:33:0b:3c:2e:98:43:37:23:83:2c:5b:
                    81:ea:de:9d:7b:f3:03:ed:6b:93:28:39:c9:8e:d8:
                    9d:9b:75:95:5a:f7:ea:f7:d8:40:96:67:36:3b:09:
                    c6:1c:42:0b:32:4f:68:8d:84:d0:41:fd:d3:11:bf:
                    ce:cc:16:e4:bb:6a:6b:66:41:2f:06:91:b8:21:01:
                    dc:e2:fa:46:9e:f9:4c:07:fa:46:ec:69:29:98:83:
                    99:7b:25:fe:01:9a:98:33:3b:26:d2:55:e1:50:11:
                    26:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:0C:34:46:E8:1B:F6:48:8F:B9:C7:7D:60:AD:44:A8:ED:7F:E6
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:4e:8b:46:2c:b8:d5:96:a0:e3:7b:10:20:1f:20:d3:55:28:
         5c:45:33:59:7f:6c:d5:3f:94:a1:89:fd:1d:a1:bd:6e:6d:38:
         46:81:92:c4:55:8b:66:e2:2f:90:b9:a5:05:a9:7f:a5:bb:29:
         86:ac:ab:7e:3d:c2:4e:81:60:59:1f:e1:9b:f4:de:50:b1:95:
         41:44:cb:35:50:6b:92:2c:35:e0:6d:20:31:8e:79:f1:81:93:
         57:3f:63:f1:81:cb:b4:33:bf:01:80:10:e7:19:69:b7:f2:78:
         4e:9f:10:78:b4:1e:90:8a:9d:28:94:1d:fd:a4:5e:67:60:dd:
         c9:93:aa:75:ad:3e:56:63:80:03:67:e8:5f:8a:5a:ec:20:7b:
         98:5f:12:82:ea:b9:ef:ff:e0:fe:81:97:13:b7:b0:1d:2f:0b:
         c3:64:15:79:92:b1:14:59:f7:41:51:27:da:85:2b:77:fb:ac:
         66:0a:70:1e:10:e4:df:21:6d:da:37:49:44:c6:49:5d:86:d2:
         b9:e6:de:78:38:ec:8c:6c:9e:b1:89:68:2c:b0:c3:1b:65:03:
         33:0a:0e:a7:f5:39:bc:d2:c9:75:10:e9:d5:b9:df:dd:25:18:
         46:3d:dc:72:68:ef:47:b4:f5:fd:f1:6d:4a:15:31:c4:ad:6d:
         5b:c7:53:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3
OTI1QkVGQ0YwHhcNMjYwNTEzMDQxODIwWhcNMjYwNTIwMDQxODIwWjAYMRYwFAYD
VQQDEw02YTAzZmI4Yy0xZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLCgxhayo+8+/idKMxhgp6cEvV7jzcoTMdv6DPYXRldT8ZxZ18DI0SXvj/Vz
HkAsY5mi00GAkMjyiJyPp6IzJQGW2ya1SnVVlMkIy8QLtuG3/mW4+6L+egeK0IUn
fnW+JTgs8J1VUCVBwrS/P1oyLuwteGJklTG2SHAXGcHwXrft1AsC/811wHrOs53h
pHHhfPHd6Xro22BsMws8LphDNyODLFuB6t6de/MD7WuTKDnJjtidm3WVWvfq99hA
lmc2OwnGHEILMk9ojYTQQf3TEb/OzBbku2prZkEvBpG4IQHc4vpGnvlMB/pG7Gkp
mIOZeyX+AZqYMzsm0lXhUBEm6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMzgDDRG
6Bv2SI+5x31grUSo7X/mMB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1
M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjAxMC9FQTAyMUE5NEQ1M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFi
cjVYSXd2VmM3RUY1SmI3ODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuU6LRiy41Zag43sQIB8g01UoXEUzWX9s1T+UoYn9HaG9bm04RoGSxFWLZuIv
kLmlBal/pbsphqyrfj3CToFgWR/hm/TeULGVQUTLNVBrkiw14G0gMY558YGTVz9j
8YHLtDO/AYAQ5xlpt/J4Tp8QeLQekIqdKJQd/aReZ2DdyZOqda0+VmOAA2foX4pa
7CB7mF8Sguq57//g/oGXE7ewHS8Lw2QVeZKxFFn3QVEn2oUrd/usZgpwHhDk3yFt
2jdJRMZJXYbSuebeeDjsjGyesYloLLDDG2UDMwoOp/U5vNLJdRDp1bnf3SUYRj3c
cmjvR7T1/fFtShUxxK1tW8dT1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 08:44:19 2026 by rpki-client