Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
File:                     pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json)
Hash identifier:          L0TAIibI7xYsHRjXkrw3Md2jaQVBYtpL/jpNiIKjXOs=
Subject key identifier:   BD:15:9E:0C:45:36:C3:EE:C8:4D:32:71:C2:B9:42:8C:CD:BB:15:AF
Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B
Certificate issuer:       /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B
Certificate serial:       051D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
Manifest number:          0512
Signing time:             Tue 24 Mar 2026 23:18:29 +0000
Manifest this update:     Tue 24 Mar 2026 23:18:28 +0000
Manifest next update:     Tue 31 Mar 2026 23:18:28 +0000
Files and hashes:         1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: CyznFgqUTr20iNaVvTVQoLZuFLpVX2fjtis97fR3veA=)
                          2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: uq3qtCkijF1dNlFAZoloAGHiYFpS21Zc+zHvHpeXG3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl
                          rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B
        Validity
            Not Before: Mar 24 23:18:28 2026 GMT
            Not After : Mar 31 23:18:28 2026 GMT
        Subject: CN=69c31bc5-d23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:59:43:cc:26:72:8e:88:62:3f:83:04:67:
                    41:c9:e6:39:49:5c:dd:1c:8d:12:9f:51:9d:e9:9f:
                    9b:22:69:44:79:e8:95:56:32:e0:e6:54:86:35:ff:
                    84:15:38:dd:27:56:df:ec:b3:a1:52:47:d6:5c:fe:
                    d9:fc:59:0d:41:cc:97:6d:89:cd:bd:be:a8:df:38:
                    a0:60:e1:34:8c:eb:81:28:8e:df:8a:9c:c6:7a:c7:
                    2f:b9:94:a2:cb:68:3c:2e:6f:d6:19:c3:7e:27:3d:
                    7b:8c:4f:0f:9a:62:c3:89:de:c0:f6:19:f0:c7:04:
                    c0:26:29:2e:26:70:2c:04:22:98:62:a7:f5:e6:68:
                    6b:66:45:33:ed:72:f3:b0:c2:de:96:f2:8b:58:84:
                    46:0e:00:19:d1:dd:82:27:41:5c:d2:28:87:9a:ba:
                    30:c4:ba:bb:6c:b4:fa:e9:d5:99:40:b8:28:89:e3:
                    24:f8:72:6a:73:d0:70:f5:91:b1:dd:f5:1d:f8:8e:
                    6c:31:f0:9d:94:69:9e:e2:79:fd:f2:5b:c3:90:24:
                    d4:97:ce:26:07:e1:45:bd:20:95:1b:31:57:2d:39:
                    db:7c:c6:15:7a:b3:1f:d1:95:2c:f5:29:7c:79:81:
                    88:51:33:e8:74:96:db:92:2c:e5:a9:7d:b1:e3:dc:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:15:9E:0C:45:36:C3:EE:C8:4D:32:71:C2:B9:42:8C:CD:BB:15:AF
            X509v3 Authority Key Identifier:
                keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:69:87:19:12:ed:de:24:2d:f5:fd:bb:40:b4:c4:3d:a5:f1:
         c8:88:e2:95:c4:b5:d3:51:83:7b:d7:a1:bb:fa:61:fd:67:73:
         14:a0:64:58:be:d0:97:e2:14:9b:16:b0:f5:01:1c:33:2c:7d:
         45:96:a6:0f:0b:30:75:e4:cd:b7:9d:c9:27:f3:36:b5:e2:35:
         25:96:fe:6d:6f:f1:ee:d1:23:f7:7a:f0:c1:b7:67:84:2c:3c:
         16:a8:f3:c9:df:e2:cd:76:02:65:8a:a3:62:f8:7e:d5:86:8d:
         4c:d9:80:7a:1c:77:8c:79:4e:1c:a6:eb:50:68:20:ef:b8:98:
         d7:09:84:1e:8b:b3:28:6f:3b:23:81:fe:c1:c0:8e:b0:5d:c9:
         71:af:a3:5b:f6:c9:6b:f2:f4:2d:f7:70:03:04:50:28:0a:52:
         41:8b:9c:72:66:cf:e3:62:ac:d3:03:27:c8:60:19:b5:f0:d0:
         b6:6e:a2:ae:24:ab:07:31:7d:55:ec:1e:df:21:aa:1e:cf:82:
         74:39:c0:31:01:bd:8d:f1:fe:d0:ff:9f:8b:69:cb:0b:df:dd:
         0b:90:95:45:91:44:0e:74:5f:d3:3a:13:b1:6d:3a:bb:ce:78:
         01:72:c7:d3:78:cb:32:95:2a:5a:18:7b:b7:12:7e:47:22:20:
         7a:a3:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:14 2026 by rpki-client