Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          lq93bfNVdXK57vX9zBpb4d/FWE8XxPwtQTM5vfsmB0E=
Subject key identifier:   DB:8C:DA:FF:CE:08:B6:86:2E:69:88:9F:CE:E7:D3:C9:90:6A:C7:66
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       0834
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          0818
Signing time:             Tue 12 May 2026 21:14:02 +0000
Manifest this update:     Tue 12 May 2026 21:14:01 +0000
Manifest next update:     Tue 19 May 2026 21:14:01 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: pUyBpSHhUIJgO+v3d/AkZoEz85Sq3A2q2gAr43Hz+8c=)
                          2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
                          3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: May 12 21:14:01 2026 GMT
            Not After : May 19 21:14:01 2026 GMT
        Subject: CN=6a03981a-841d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:7f:57:d2:1e:5f:9d:67:2b:cb:2a:07:68:
                    73:79:35:c3:26:f8:22:c9:5d:c7:23:d9:e8:2e:d9:
                    22:54:ab:e1:df:24:82:6c:5f:06:c1:2e:54:66:dd:
                    83:51:62:30:ef:8f:c2:99:ce:2a:3f:93:cc:eb:d0:
                    a1:1e:40:1a:94:da:50:c8:cc:cc:ad:79:18:a4:f3:
                    13:30:c8:aa:aa:78:f1:64:2f:f9:ca:86:0a:7b:69:
                    93:0d:89:5d:da:9a:be:0f:8a:e0:d7:3e:f0:5c:5e:
                    c7:5a:78:85:b5:99:6f:e4:f5:5f:41:64:88:72:78:
                    5f:15:b5:f4:32:af:8f:31:f1:e7:da:77:28:74:a4:
                    28:d3:65:d7:c9:4b:7e:03:ff:4f:d2:99:75:17:b6:
                    de:e6:14:ec:45:c6:d2:6b:64:25:6b:4c:55:45:a6:
                    59:aa:e2:b4:a3:26:97:c6:5c:7a:62:fc:5d:0e:33:
                    e2:0b:60:52:66:56:4e:a6:4b:be:f1:3c:41:03:0f:
                    71:5c:4c:22:5d:1b:0e:9e:91:e7:b5:86:e5:60:7c:
                    ec:97:83:af:d3:c1:30:01:72:eb:57:8e:bc:b5:32:
                    ab:2c:9a:55:13:66:4f:25:ee:b8:68:1a:66:fc:63:
                    b4:cd:a1:70:dd:a9:f6:a5:28:ff:71:a7:96:f5:43:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:DA:FF:CE:08:B6:86:2E:69:88:9F:CE:E7:D3:C9:90:6A:C7:66
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:eb:04:5f:84:5a:58:2a:2f:77:fd:69:88:ff:22:01:1f:
         fc:65:71:ac:18:89:55:fa:16:3c:9b:fc:a7:e5:73:01:bb:6c:
         dd:40:61:c2:a1:de:a3:29:03:cd:73:36:ce:b3:c7:76:5a:fa:
         53:b4:16:b3:05:11:f9:a8:49:9c:9f:83:06:22:d6:74:ff:c1:
         ef:f5:4d:63:4c:47:94:7e:9a:ac:d9:60:02:22:84:ba:7b:0a:
         79:6b:d0:a3:dc:92:e9:4e:41:e5:e7:b7:31:fb:e1:d9:a6:aa:
         9c:01:b8:1a:42:57:49:eb:1a:54:70:36:0d:bd:a9:84:1c:fb:
         81:a4:b9:85:12:76:a9:35:45:9c:84:69:99:96:67:d0:e9:aa:
         b7:99:e2:40:17:b9:1f:04:93:e0:2c:f8:a8:55:35:75:38:a2:
         68:a2:69:aa:45:7f:25:27:50:d1:a4:e8:5d:cb:b6:20:8f:17:
         14:39:49:91:0b:f6:13:52:af:43:0c:57:7c:59:01:c7:6e:46:
         f0:78:fc:cc:ac:00:e1:e9:5e:5c:9f:65:97:eb:4c:b7:6e:3d:
         18:b5:43:2a:25:c0:93:a1:5a:d4:b5:9d:a6:00:94:e1:dd:4f:
         8b:5b:21:63:34:f3:f1:23:1d:cc:7e:7d:47:9b:38:2e:ec:0f:
         00:8e:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:55 2026 by rpki-client