Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          Lr3A4yuSHP0BuMLsasqaQ9RHSHiGKgCzKsOaCBDr3oQ=
Subject key identifier:   CA:79:E7:B0:A0:61:CB:C7:6D:DD:DA:6F:07:1F:1D:9D:6E:0D:3E:CD
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          019F
Signing time:             Wed 25 Mar 2026 03:29:39 +0000
Manifest this update:     Wed 25 Mar 2026 03:29:39 +0000
Manifest next update:     Wed 01 Apr 2026 03:29:39 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: OpG49M+/oeVX/s4taRuJRffouytwnZDBV7KIO4OmHvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: Mar 25 03:29:39 2026 GMT
            Not After : Apr  1 03:29:39 2026 GMT
        Subject: CN=69c356a3-fa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:fd:65:2a:78:01:70:12:91:50:2b:f9:10:
                    ca:5f:b7:35:16:ca:d9:d3:71:dd:45:23:5e:a0:db:
                    5a:ec:d5:1a:fa:b5:55:91:62:42:9e:5c:4f:48:74:
                    8d:0a:90:a5:d5:ef:d7:fa:8b:b3:f6:da:6d:fe:5a:
                    21:23:4e:41:23:4e:2c:ca:fa:11:15:03:fb:66:2e:
                    66:75:4c:25:93:78:59:de:69:17:87:f0:65:97:54:
                    f4:63:f0:21:36:0a:34:2b:fa:fd:2c:97:9d:be:81:
                    62:22:ce:a0:46:d6:bf:bb:f5:c4:87:b5:d2:a1:ad:
                    56:85:9b:aa:db:d7:7a:56:2f:fc:52:2e:81:e0:4f:
                    c6:43:c0:97:54:e6:ee:a1:c6:79:ba:ad:8e:e4:06:
                    1e:93:84:c8:85:de:3a:b2:4a:b2:19:77:a6:55:83:
                    fb:26:f0:ee:20:5a:64:32:55:54:b7:3b:d2:3e:5c:
                    46:81:68:5b:7f:8e:dc:7f:f0:57:f6:7b:10:00:17:
                    61:17:ff:3b:60:d0:83:6a:c2:ee:3a:a6:a0:61:55:
                    17:f4:c5:a3:d3:50:ec:73:f2:b9:d5:1f:b5:5a:64:
                    dd:21:e8:27:5d:95:62:32:8d:9e:67:06:d2:f1:55:
                    ad:e8:8a:b5:76:f8:70:eb:5a:9b:f6:9f:89:c7:f7:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:E7:B0:A0:61:CB:C7:6D:DD:DA:6F:07:1F:1D:9D:6E:0D:3E:CD
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:86:3e:85:e0:16:ef:f7:26:36:c7:ed:13:85:80:56:e1:61:
         d0:d6:f3:c7:31:dd:91:ad:97:8d:da:69:72:d6:4e:dd:cd:ab:
         99:d9:47:ca:58:f2:5b:7e:75:53:2d:29:9f:e5:0e:72:8e:9c:
         be:e2:fa:4a:3b:26:7c:12:73:bb:d6:40:fa:38:5d:55:87:68:
         87:78:0a:5f:0c:1f:0d:76:ba:46:16:35:2a:fa:99:72:6f:c4:
         5f:cf:bd:16:bb:fa:80:11:14:30:36:e8:c4:bf:16:4f:a5:53:
         1f:cb:c0:be:be:82:25:47:76:4d:7e:64:5c:4f:bc:a0:6a:33:
         69:c9:f4:33:9d:a6:66:16:2b:fb:56:51:f5:ce:f6:ca:0c:b6:
         3a:ae:0a:78:56:75:61:b2:70:ff:af:2e:90:87:c3:f9:64:00:
         06:fb:3c:62:15:99:18:3f:35:47:19:c3:3c:e2:9d:a4:4a:73:
         a3:ad:e7:12:50:c9:a1:96:da:83:48:0e:c5:92:bb:1f:bc:3e:
         0d:fc:d1:11:3a:87:9d:2c:fa:cf:ae:1c:78:cf:b9:6e:3c:52:
         ff:35:a1:1c:f5:b5:ca:7d:15:73:c4:48:d7:03:71:42:73:f7:
         e6:5a:c4:77:0b:7f:7c:c3:b0:57:92:a4:a3:8f:92:05:d2:84:
         51:18:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:44 2026 by rpki-client