Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
File:                     PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json)
Hash identifier:          n/CGtvMBygpZ0+CUavAMG4ppwC7Y05ybCP0TWTcIzZw=
Subject key identifier:   12:72:D6:E5:B0:BC:56:47:02:C2:B1:A0:69:BA:3C:9E:A0:5B:AF:D3
Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19
Certificate issuer:       /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
Certificate serial:       0521
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
Manifest number:          051A
Signing time:             Tue 24 Mar 2026 23:16:52 +0000
Manifest this update:     Tue 24 Mar 2026 23:16:52 +0000
Manifest next update:     Tue 31 Mar 2026 23:16:52 +0000
Files and hashes:         1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: pw7aHxORapbe771li2+NlQu9g3Y6nH0NMVD0fyIZY10=)
                          2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl
                          rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519
        Validity
            Not Before: Mar 24 23:16:52 2026 GMT
            Not After : Mar 31 23:16:52 2026 GMT
        Subject: CN=69c31b64-067b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c1:45:da:f3:45:c0:d3:66:6b:4b:7f:97:52:
                    11:9e:be:20:e8:0f:e2:bc:aa:f9:af:ff:8c:38:03:
                    dd:f9:d5:73:b2:5f:0e:b3:ae:cf:84:2d:ce:0f:cc:
                    a8:26:83:48:0e:72:21:4d:36:19:01:17:f0:76:cf:
                    1d:a2:cb:ba:a0:43:b8:f5:98:c4:29:b5:8b:ef:9d:
                    80:51:dd:dc:96:d5:89:72:e0:b9:ec:1e:12:e9:0e:
                    eb:31:01:b9:5b:a1:ab:1d:a9:a9:86:f1:11:dc:76:
                    8e:ff:fe:22:4d:85:4d:a4:64:21:20:ae:39:25:58:
                    09:6f:5b:bd:ec:ff:f1:95:97:5c:20:e9:72:ed:2f:
                    53:c9:45:a6:7b:d8:98:08:84:b6:9b:72:06:b1:0c:
                    26:d4:6b:0f:c1:7c:ad:ea:2d:00:24:ae:62:08:69:
                    a8:ae:6e:50:3a:b8:52:88:f9:7a:2e:ca:c5:41:6f:
                    28:59:2e:9c:77:96:62:1a:03:12:ff:c6:5c:79:0a:
                    6c:05:24:8d:44:a8:8c:64:1a:04:76:b7:e3:78:d3:
                    da:9a:2e:9a:d8:dd:4d:4a:09:d3:56:f7:12:1b:f6:
                    05:30:2a:f1:c0:53:e2:5d:1a:9f:e7:b3:56:9e:b7:
                    82:ee:b0:ad:6a:19:49:cd:fe:84:47:6c:d3:3f:9e:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:72:D6:E5:B0:BC:56:47:02:C2:B1:A0:69:BA:3C:9E:A0:5B:AF:D3
            X509v3 Authority Key Identifier:
                keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a7:e2:bc:e3:c0:40:b4:22:91:52:41:40:46:37:ac:d8:15:
         63:98:8e:bf:6b:93:30:c0:ab:ca:04:d9:d9:62:90:0c:45:aa:
         e1:d3:a7:66:88:e9:2d:b8:19:fd:c4:64:80:fd:9e:aa:50:fc:
         0d:d9:2c:49:b5:70:04:b6:62:dc:1b:30:4c:8c:56:88:6f:29:
         a2:50:ac:6e:65:5f:c1:8c:6a:1b:5e:bb:24:a9:23:de:df:21:
         b5:68:dd:32:37:69:38:32:9a:57:48:55:1d:32:f7:4a:98:4d:
         15:cf:35:73:1c:63:03:71:20:3d:b2:9c:a0:40:43:11:26:40:
         d9:58:dd:46:cc:c5:ce:dd:01:e4:1a:41:fd:97:e4:8a:0f:c4:
         e6:2f:5d:ad:ff:6d:0f:c6:ea:db:6e:29:ce:2b:ad:d4:b4:0e:
         21:e1:f6:aa:e8:37:1e:17:ea:c8:12:d9:a5:71:de:d3:2d:77:
         25:31:8e:de:de:62:b1:2a:be:ad:e5:cf:a0:34:b9:70:47:23:
         e7:c2:68:3f:8d:55:e1:0c:42:dc:20:2a:d6:32:97:12:71:a3:
         9a:11:32:32:cb:cb:45:8e:28:3f:41:df:0f:fd:de:15:32:fd:
         3f:27:cd:fd:2c:e7:76:bc:a1:b2:d0:7f:df:c5:fb:c1:f8:07:
         bc:2b:31:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4
MjE4NTI1MTkwHhcNMjYwMzI0MjMxNjUyWhcNMjYwMzMxMjMxNjUyWjAYMRYwFAYD
VQQDEw02OWMzMWI2NC0wNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA08FF2vNFwNNma0t/l1IRnr4g6A/ivKr5r/+MOAPd+dVzsl8Os67PhC3OD8yo
JoNIDnIhTTYZARfwds8dosu6oEO49ZjEKbWL752AUd3cltWJcuC57B4S6Q7rMQG5
W6GrHamphvER3HaO//4iTYVNpGQhIK45JVgJb1u97P/xlZdcIOly7S9TyUWme9iY
CIS2m3IGsQwm1GsPwXyt6i0AJK5iCGmorm5QOrhSiPl6LsrFQW8oWS6cd5ZiGgMS
/8ZceQpsBSSNRKiMZBoEdrfjeNPami6a2N1NSgnTVvcSG/YFMCrxwFPiXRqf57NW
nreC7rCtahlJzf6ER2zTP56WXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJy1uWw
vFZHAsKxoGm6PJ6gW6/TMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx
RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ
aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq6fivOPAQLQikVJBQEY3rNgVY5iOv2uTMMCrygTZ2WKQDEWq4dOnZojpLbgZ
/cRkgP2eqlD8DdksSbVwBLZi3BswTIxWiG8polCsbmVfwYxqG167JKkj3t8htWjd
MjdpODKaV0hVHTL3SphNFc81cxxjA3EgPbKcoEBDESZA2VjdRszFzt0B5BpB/Zfk
ig/E5i9drf9tD8bq224pziut1LQOIeH2qug3HhfqyBLZpXHe0y13JTGO3t5isSq+
reXPoDS5cEcj58JoP41V4QxC3CAq1jKXEnGjmhEyMsvLRY4oP0HfD/3eFTL9PyfN
/SzndryhstB/38X7wfgHvCsxdw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:30 2026 by rpki-client