Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          NsFdPEmrHZnXImMluzYhIT5+Jo23GY9NVUBqlQLSxP8=
Subject key identifier:   DC:74:A1:56:AF:95:C9:30:16:4F:40:39:B5:63:34:2A:3B:77:D6:0B
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          01B7
Signing time:             Mon 11 May 2026 03:57:18 +0000
Manifest this update:     Mon 11 May 2026 03:57:17 +0000
Manifest next update:     Mon 18 May 2026 03:57:17 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: EwgEqfbSjh3+2HnhqlbLzfUGg48DHxPWOCTDvUaKTyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: May 11 03:57:17 2026 GMT
            Not After : May 18 03:57:17 2026 GMT
        Subject: CN=6a01539d-eadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:fc:d7:cc:ab:e5:16:6e:48:7d:5e:b2:06:
                    96:b0:18:ec:d7:b8:f0:d4:96:7a:c6:d9:5c:d7:b6:
                    ea:fb:55:f0:ec:8f:ce:2d:a5:ef:d7:83:08:75:67:
                    f2:f8:ce:d1:5e:08:cb:1b:59:c8:f2:b1:72:8d:9f:
                    fb:e3:b5:25:9f:29:b5:6d:7e:58:6c:ae:98:6e:14:
                    97:9c:7f:10:8d:00:ac:47:83:29:9c:23:1d:d3:30:
                    4d:14:e2:f5:95:b8:5f:44:29:0e:aa:24:0e:90:7a:
                    71:5a:d1:c6:35:1a:2d:32:88:04:42:d8:11:b4:e3:
                    8a:43:c5:27:03:36:c8:58:d1:f8:56:c5:41:bc:f2:
                    e7:ac:f9:a2:8b:ea:b5:90:c4:f6:89:e8:84:8c:ec:
                    62:2f:d7:40:02:e5:10:e3:00:ae:22:75:55:38:9c:
                    d9:b0:bc:55:d5:56:c3:d0:f7:db:2c:49:0e:f9:d9:
                    87:6e:1d:79:a8:b2:53:95:77:ed:6b:a2:2b:d3:fc:
                    0d:c5:f8:40:f1:d9:7e:c8:d8:6b:56:dc:3d:b7:9a:
                    4b:df:9b:d7:ed:3f:43:85:2b:fd:bb:12:3d:c4:6c:
                    7a:d8:e2:83:3e:d7:6c:3c:bc:3f:24:c6:38:94:48:
                    72:a9:9a:e3:4b:e6:a1:45:e9:93:a9:da:75:35:b9:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:A1:56:AF:95:C9:30:16:4F:40:39:B5:63:34:2A:3B:77:D6:0B
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:57:b0:72:2b:54:4d:a2:2d:78:4a:00:6a:a6:62:9a:17:2e:
         1b:57:28:f0:d8:2e:80:fb:ff:86:86:71:50:4b:e0:c7:62:3d:
         45:9f:79:5d:c9:6f:7b:66:8b:0d:fc:fe:39:c2:35:01:20:7f:
         09:66:5a:76:0d:ea:bd:1e:1e:b9:f6:cc:fe:47:bf:30:d4:a9:
         2b:22:df:af:10:03:2e:a9:6d:1b:5f:b7:d8:46:6f:81:18:d8:
         1f:ac:8e:ad:ac:b0:07:47:7e:fd:ad:ee:68:4b:97:ec:92:ae:
         b7:42:32:74:18:76:de:f5:ef:bb:80:00:6e:d8:67:36:90:01:
         fc:0c:46:73:d7:83:42:f8:55:9d:f9:b5:34:b7:8b:1d:73:a2:
         40:4b:16:de:7b:e7:c8:0a:ae:7a:37:90:33:a6:19:a6:96:30:
         09:11:93:aa:97:da:89:01:dd:a9:5e:a0:4c:e4:3e:79:b3:73:
         0a:fd:4e:c3:c2:39:bb:e4:00:eb:a3:6e:40:55:39:31:9c:6d:
         db:bc:90:82:b3:1b:02:6b:f7:90:ae:d4:8b:47:d4:5e:77:47:
         21:15:cf:33:e3:ed:73:1b:18:09:f4:09:a7:fe:17:2a:3c:fc:
         51:b2:08:e0:d2:f0:ad:16:db:31:35:bd:31:aa:fc:29:db:1f:
         72:4d:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:44 2026 by rpki-client