Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
File:                     PcKYLLOQv9qGmu23U1P-S7lwobw.mft (raw, json)
Hash identifier:          AZQgutSN6jTgVh5k9fzCWIxgKaRvY8LorUswgV18cp4=
Subject key identifier:   25:98:70:8F:EA:08:07:55:42:90:7D:86:44:3A:C9:01:D7:4F:63:D9
Authority key identifier: 3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC
Certificate issuer:       /CN=A9156D54/serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
Manifest number:          0311
Signing time:             Wed 25 Mar 2026 00:48:13 +0000
Manifest this update:     Wed 25 Mar 2026 00:48:13 +0000
Manifest next update:     Wed 01 Apr 2026 00:48:13 +0000
Files and hashes:         1: PcKYLLOQv9qGmu23U1P-S7lwobw.crl (hash: oZ63iKz9UkwAZlvr7TNIEYuGgqWsm5u/IJaoXkYkU1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl
                          rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156D54, serialNumber=3DC2982CB390BFDA869AEDB75353FE4BB970A1BC
        Validity
            Not Before: Mar 25 00:48:13 2026 GMT
            Not After : Apr  1 00:48:13 2026 GMT
        Subject: CN=69c330cd-3fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2c:27:a1:3d:55:d0:ad:b9:aa:49:51:94:4e:
                    eb:ae:dd:01:78:f2:43:30:49:ba:d4:f3:12:c0:bf:
                    cc:dd:b9:44:cb:c9:49:20:bb:ab:b8:73:a2:e0:fb:
                    8d:9e:83:a4:0b:9a:7b:2c:41:64:5b:54:84:73:4f:
                    89:eb:b6:c9:a1:b1:95:a0:a5:79:53:14:3f:00:b6:
                    fe:d9:75:fe:a3:4d:02:e0:a0:57:81:52:fd:20:87:
                    1f:b5:ce:77:b8:2b:36:b0:19:d5:ca:da:9b:9a:0d:
                    0d:c2:8e:49:6c:8e:7c:23:2b:f1:40:93:e6:14:4c:
                    74:b3:a5:c3:dd:5e:7c:7c:df:f7:54:16:8a:97:4d:
                    f3:03:e0:4b:dd:84:6b:f9:e5:f5:e2:11:e6:e0:b6:
                    8a:88:79:82:b7:20:62:ce:5a:8b:cd:0e:f2:88:f9:
                    65:fe:3e:16:64:43:db:64:3e:f9:46:11:0c:fa:77:
                    85:69:40:dc:55:56:a9:31:3d:51:e5:f6:44:a9:41:
                    12:71:dc:b1:37:f5:bb:8d:36:6f:0e:27:cf:4b:ee:
                    b6:74:2f:f6:3f:cf:88:eb:64:df:70:c4:ef:48:82:
                    26:4e:82:5e:a0:f6:54:f3:c2:ff:2f:04:50:45:5d:
                    11:fe:0a:7f:37:e9:d6:7a:21:18:87:6a:fd:ed:26:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:70:8F:EA:08:07:55:42:90:7D:86:44:3A:C9:01:D7:4F:63:D9
            X509v3 Authority Key Identifier:
                keyid:3D:C2:98:2C:B3:90:BF:DA:86:9A:ED:B7:53:53:FE:4B:B9:70:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PcKYLLOQv9qGmu23U1P-S7lwobw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/7B92EF9A0C9411EDB71BC02FC4F9AE02/PcKYLLOQv9qGmu23U1P-S7lwobw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6d:65:91:16:bf:76:47:d3:53:9c:cb:8c:d4:33:e6:d7:97:
         ce:85:65:c3:97:16:a8:7f:97:48:94:81:74:e8:be:bc:89:4e:
         64:f4:df:ef:47:f1:2b:c5:c9:8d:15:69:c6:2b:d5:0b:3e:9f:
         f5:8d:bf:f4:78:13:3b:7d:69:b4:60:61:ac:23:62:e3:2c:3f:
         cf:65:54:14:32:40:ff:78:d3:49:5e:b8:67:57:2d:13:09:fe:
         25:e5:31:7e:26:7f:fa:7d:77:cf:eb:91:70:1a:1c:e3:6b:04:
         8f:32:60:f0:ad:d8:78:4f:37:a3:77:8a:37:55:d2:1f:98:44:
         f4:d2:83:99:0b:b2:c8:77:8d:a7:4c:0d:a0:7e:21:5f:67:0d:
         77:bd:2c:df:10:2d:ef:53:de:c1:e1:25:6e:c7:5c:d9:4a:9d:
         21:d3:ba:e1:8d:1a:91:30:56:ac:27:30:0d:6f:7d:43:06:ac:
         a0:5b:4b:d0:09:4c:86:0e:bb:9c:46:79:bc:94:9a:8a:0c:c1:
         4b:58:14:56:1e:3c:cc:bd:0d:1e:94:a3:69:b6:e6:b9:ef:3e:
         eb:3e:5e:1e:cb:64:e8:fd:ef:44:cd:38:fb:f9:2d:2f:f4:d3:
         b3:17:6c:e8:00:ee:08:2d:c3:b0:7c:07:46:cf:31:09:73:6d:
         00:6a:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:30 2026 by rpki-client