Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          cnAtSxak41IYfyMf38AeuOCJgZTkntArQ+SfsVWqvpk=
Subject key identifier:   02:B0:4E:15:75:C1:8F:BD:14:FB:51:1A:93:06:FC:35:C3:D8:98:56
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          4E
Signing time:             Fri 27 Mar 2026 07:48:36 +0000
Manifest this update:     Fri 27 Mar 2026 07:48:35 +0000
Manifest next update:     Fri 03 Apr 2026 07:48:35 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: Ug6wXMw7rd+/5zXcbGmWKYN4mKtfqMvCZ6ZlCvtih4M=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: RKJiWEFRRxfC255nnKMBMyY+0j0SvD2OXb6aSU3b+vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: Mar 27 07:48:35 2026 GMT
            Not After : Apr  3 07:48:35 2026 GMT
        Subject: CN=69c63654-f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:d3:d5:82:1f:14:f7:10:03:aa:cd:b1:3a:
                    6b:30:53:e0:1b:0c:df:d2:20:0f:db:cf:7c:3d:e3:
                    32:fb:79:59:58:52:41:dc:8e:69:57:b2:47:43:96:
                    f4:e4:4b:ff:26:4c:32:58:fa:3f:f9:cb:65:57:e0:
                    96:7f:bb:26:94:28:b8:7e:5a:ba:a1:d1:c9:95:09:
                    93:5b:29:8e:e0:f7:34:d8:29:b2:65:6f:0c:f1:65:
                    36:d9:60:70:cd:8e:a0:e5:f2:c2:c2:0e:e2:bc:a0:
                    7f:20:ee:59:b7:40:4a:1a:b3:21:73:b0:05:57:db:
                    6f:36:97:37:f3:e9:5f:4c:12:63:5e:be:5a:7d:ed:
                    96:54:62:0e:52:4c:6b:a8:93:50:d4:6d:ee:7c:92:
                    62:09:0c:72:05:50:aa:c1:b5:4a:09:29:4e:a1:04:
                    52:9c:ca:c0:89:d4:47:72:e5:a5:dd:b8:d6:c4:e7:
                    50:83:8d:e4:ea:7d:38:17:64:8d:69:61:ee:44:88:
                    86:f5:b3:b0:dc:9b:93:51:5a:ee:75:36:13:c0:13:
                    40:b6:9a:58:a1:f1:e5:c6:74:53:9d:1b:03:c3:61:
                    7f:a1:42:b8:cf:40:ea:38:e0:b0:97:7b:44:6f:bc:
                    a8:a9:b7:26:95:da:75:80:60:6a:99:b4:5d:6c:a8:
                    4b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B0:4E:15:75:C1:8F:BD:14:FB:51:1A:93:06:FC:35:C3:D8:98:56
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:d9:58:b4:91:78:f1:ef:74:5e:9b:e9:e9:0e:5c:53:8c:
         24:b7:c6:9f:e0:45:37:e1:57:23:f3:77:4e:be:e2:90:21:d2:
         f6:3e:eb:0c:63:14:60:69:56:2d:53:65:5c:05:e3:f7:10:20:
         20:9b:8b:6a:b6:cd:21:6b:c0:bc:06:69:37:1b:86:47:38:ec:
         69:b0:62:14:0d:ab:bd:b9:9a:b4:58:71:0e:3c:6a:85:e8:67:
         99:0d:30:a8:91:a7:72:d1:07:af:99:fb:7c:4b:76:fc:53:14:
         80:31:27:79:43:a4:0c:cd:c8:6d:4e:f2:23:f3:72:ff:7b:db:
         1c:1a:e8:f8:09:b2:01:a8:b1:66:63:19:67:e1:ca:13:40:ae:
         41:82:95:20:c7:67:46:ab:d0:3d:59:69:ee:bd:24:2d:c5:00:
         6f:e4:fd:4e:0c:a6:24:52:f1:2a:13:6a:e5:04:46:b7:03:12:
         32:5b:8e:53:04:5d:0a:32:de:c8:51:0c:03:d3:d0:34:6a:c5:
         b5:8c:0f:27:f2:10:4d:ac:f5:e1:55:74:a0:84:5e:8d:68:19:
         44:18:64:5e:bb:d5:c0:eb:37:9b:d6:18:1c:48:96:3a:d8:e7:
         34:2c:a0:30:e9:8d:36:e9:d1:e1:9e:dc:37:08:14:f3:81:a5:
         bd:a2:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:15 2026 by rpki-client