Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
File:                     pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json)
Hash identifier:          wyBFMPyMWb9u3TaZyRu4KyFXJmp573etmhvs/mmTYCs=
Subject key identifier:   CC:33:62:43:79:FF:DF:59:59:30:02:00:FC:23:57:91:9C:AB:CF:5D
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Certificate issuer:       /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
Manifest number:          02D9
Signing time:             Wed 25 Mar 2026 00:59:41 +0000
Manifest this update:     Wed 25 Mar 2026 00:59:41 +0000
Manifest next update:     Wed 01 Apr 2026 00:59:41 +0000
Files and hashes:         1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: Pll7Q6cIOMix67E9CN+cE0tewGeLsePexwBxFkH1ECQ=)
                          2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: 1F4/dES4B8G+6y0a23fN5dj1uPv0aDvCIXtab2gQl5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
                          rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
        Validity
            Not Before: Mar 25 00:59:41 2026 GMT
            Not After : Apr  1 00:59:41 2026 GMT
        Subject: CN=69c3337d-8163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:38:bd:62:9b:04:52:ad:59:ba:1e:bf:eb:
                    92:a5:82:c7:58:34:76:77:12:25:18:71:95:22:8b:
                    fe:4d:30:da:7f:3f:63:d1:bf:4c:3d:05:93:af:b8:
                    45:a9:98:b9:78:bb:df:ab:52:1e:10:fd:cb:20:f5:
                    34:69:43:fc:75:8d:3f:7d:69:e6:53:35:86:e7:0f:
                    ce:9a:28:a5:7e:11:5a:b3:41:11:99:53:5c:6e:8d:
                    8d:5f:3e:8b:21:79:03:49:82:50:53:cc:e5:0a:70:
                    8f:ae:d4:01:02:92:be:85:55:89:24:b5:9c:fe:00:
                    5d:24:be:01:68:ad:0f:09:e4:c1:3f:81:8f:32:17:
                    43:55:c6:4d:79:56:71:60:2c:4d:e8:f9:7e:ca:8c:
                    61:0c:23:ff:f1:d4:27:7f:22:75:88:7b:a0:b5:cd:
                    ed:0b:f2:e1:c2:80:5e:40:79:a4:8a:52:d6:b1:ba:
                    32:ea:45:64:ed:d2:a3:1f:f4:ff:7d:6b:6e:4b:62:
                    9e:8a:87:84:1c:77:18:94:c4:25:4e:2d:c6:3d:3a:
                    5a:bf:23:3d:b5:9d:b2:f4:20:7f:4a:0b:ff:ce:3f:
                    18:1e:69:de:50:2c:bf:1c:88:9c:8c:6e:19:87:a5:
                    81:6a:0f:26:16:40:1b:47:96:01:25:c9:0b:3c:3a:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:33:62:43:79:FF:DF:59:59:30:02:00:FC:23:57:91:9C:AB:CF:5D
            X509v3 Authority Key Identifier:
                keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:e5:37:cc:b0:ca:62:d0:13:79:4e:70:3a:96:af:12:a1:
         15:3d:e4:4a:54:cf:81:dc:57:43:3b:8d:25:6c:32:a0:77:89:
         fb:39:df:88:07:d4:60:70:88:15:22:79:3e:8b:50:b1:97:d6:
         8d:20:d6:98:78:e8:95:84:c7:63:91:ed:68:a8:28:10:b1:14:
         04:15:cf:1a:c1:b9:9a:ec:89:7c:6a:f4:e8:9e:83:d5:cb:57:
         bc:e4:20:81:cd:01:c7:31:9c:61:a4:c5:bc:6f:29:71:45:13:
         cf:1a:25:a7:f8:cb:d1:16:32:8b:21:b3:05:b5:38:de:c4:a2:
         16:d0:5c:1b:5e:fd:ba:32:ab:aa:fc:c1:16:0a:e3:44:75:7b:
         89:4c:bb:d4:e1:e6:ef:42:a9:66:ad:ee:05:40:24:7a:8c:29:
         47:7f:d3:e6:d2:df:cf:9a:fa:f5:96:92:2d:9a:ea:8c:c9:73:
         13:ce:01:d9:62:9b:c6:b1:8c:5b:99:e9:d3:19:3b:b4:a5:b3:
         97:00:1f:a7:66:44:75:5c:ba:61:d2:42:12:21:e7:2d:25:4b:
         52:1a:a6:34:fc:2a:4c:e1:da:ee:1c:de:13:1d:e4:c3:36:c7:
         28:00:1f:0c:fb:22:29:cc:f3:1d:f6:73:bf:6d:af:c9:13:a0:
         23:15:ee:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3
RDk4Q0Q2OTQwHhcNMjYwMzI1MDA1OTQxWhcNMjYwNDAxMDA1OTQxWjAYMRYwFAYD
VQQDEw02OWMzMzM3ZC04MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2M4vWKbBFKtWboev+uSpYLHWDR2dxIlGHGVIov+TTDafz9j0b9MPQWTr7hF
qZi5eLvfq1IeEP3LIPU0aUP8dY0/fWnmUzWG5w/OmiilfhFas0ERmVNcbo2NXz6L
IXkDSYJQU8zlCnCPrtQBApK+hVWJJLWc/gBdJL4BaK0PCeTBP4GPMhdDVcZNeVZx
YCxN6Pl+yoxhDCP/8dQnfyJ1iHugtc3tC/LhwoBeQHmkilLWsboy6kVk7dKjH/T/
fWtuS2KeioeEHHcYlMQlTi3GPTpavyM9tZ2y9CB/Sgv/zj8YHmneUCy/HIicjG4Z
h6WBag8mFkAbR5YBJckLPDpAtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwzYkN5
/99ZWTACAPwjV5Gcq89dMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0
MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2
Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAwrlN8ywymLQE3lOcDqWrxKhFT3kSlTPgdxXQzuNJWwyoHeJ+znfiAfUYHCI
FSJ5PotQsZfWjSDWmHjolYTHY5HtaKgoELEUBBXPGsG5muyJfGr06J6D1ctXvOQg
gc0BxzGcYaTFvG8pcUUTzxolp/jL0RYyiyGzBbU43sSiFtBcG179ujKrqvzBFgrj
RHV7iUy71OHm70KpZq3uBUAkeowpR3/T5tLfz5r69ZaSLZrqjMlzE84B2WKbxrGM
W5np0xk7tKWzlwAfp2ZEdVy6YdJCEiHnLSVLUhqmNPwqTOHa7hzeEx3kwzbHKAAf
DPsiKczzHfZzv22vyROgIxXurQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:56 2026 by rpki-client