Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
File:                     S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json)
Hash identifier:          7qpOdWdtuSgVctNcMtJ4Q3MmBx5RwTQDi9v9x2a8FZg=
Subject key identifier:   9E:35:4C:3A:09:64:EA:59:9D:66:15:32:C2:D1:32:E6:36:6A:A3:E7
Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
Certificate issuer:       /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Certificate serial:       03D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
Manifest number:          03CA
Signing time:             Wed 25 Mar 2026 00:16:15 +0000
Manifest this update:     Wed 25 Mar 2026 00:16:15 +0000
Manifest next update:     Wed 01 Apr 2026 00:16:15 +0000
Files and hashes:         1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: PwUEhz2d/ks8jssHixKIIIS2G8gpSStgYZQqYnwSXAw=)
                          2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=)
                          3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl
                          rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
        Validity
            Not Before: Mar 25 00:16:15 2026 GMT
            Not After : Apr  1 00:16:15 2026 GMT
        Subject: CN=69c3294f-eedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:fc:1e:58:a3:72:5a:19:99:1a:33:38:bf:
                    7c:21:94:cd:b5:30:e6:5e:51:34:74:5e:39:ca:ed:
                    c8:9e:73:65:22:7c:fb:55:42:57:42:5f:c7:41:fb:
                    98:20:1c:17:10:d2:9e:0f:86:46:1d:4a:89:c8:1e:
                    9c:ec:f3:fd:43:2b:cd:2e:12:41:b8:6f:6f:bf:af:
                    c2:ce:7d:da:74:7d:b5:59:ce:b6:f2:5b:2f:54:74:
                    8f:4d:34:8e:82:c7:1f:f1:7e:44:38:fe:7e:84:e3:
                    21:06:a9:e3:cc:88:6f:02:bf:36:51:e3:f8:2b:ef:
                    47:88:07:a4:37:65:6f:3b:c2:28:5b:10:78:eb:bb:
                    e4:dd:11:e1:82:ed:9a:30:0f:58:2f:53:9d:d3:98:
                    18:98:d2:ba:06:ef:7b:19:ff:45:60:77:26:ea:e7:
                    a7:71:3d:f8:20:9c:54:83:79:98:3a:4d:94:a2:06:
                    c0:74:a0:0e:b5:b2:4e:b4:aa:8c:25:39:de:36:11:
                    98:b6:20:94:6a:df:c0:fd:00:6a:72:a2:1b:5c:92:
                    9d:f8:db:ae:73:1d:93:ae:cd:ee:11:bc:15:36:bc:
                    c1:d6:32:e7:6c:17:ec:39:b9:19:32:d1:e1:14:5b:
                    d3:17:f8:ed:17:ca:99:b7:b8:99:a9:20:f4:db:60:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:4C:3A:09:64:EA:59:9D:66:15:32:C2:D1:32:E6:36:6A:A3:E7
            X509v3 Authority Key Identifier:
                keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:12:3d:48:66:ef:f2:50:95:e4:18:ca:f9:3f:d5:4e:ae:3c:
         bf:37:76:71:87:12:f9:6d:df:50:a8:84:c1:08:2a:ef:5c:c0:
         30:84:a0:c2:b5:63:4a:ff:6d:d2:38:8f:89:2d:c4:9c:69:e6:
         e5:02:c6:f5:5a:97:19:4a:94:8b:57:6e:2f:b3:eb:5b:9a:5f:
         a2:44:73:c6:22:6e:31:b6:b7:f6:2a:f8:a7:62:53:cf:80:87:
         2b:3b:af:fa:f8:da:3e:8f:37:64:7e:66:05:cf:0b:3e:12:12:
         8f:55:a7:0e:1b:37:57:83:75:1a:77:4b:34:60:83:73:b0:a3:
         8a:19:3b:38:fa:10:53:ad:86:6d:91:fb:8d:44:62:00:78:de:
         28:3e:a4:5d:89:3c:1d:2a:39:87:fb:4c:21:cb:eb:ed:4d:7c:
         a7:c3:2b:3c:e2:c6:44:e6:25:4d:16:1b:4d:1a:08:ec:af:8f:
         8d:5d:19:82:3e:67:58:85:62:a2:c8:4c:42:af:f2:f0:dc:86:
         1f:21:b7:56:c2:86:0a:f7:89:c1:a0:6c:cb:3c:dd:04:c0:e8:
         2c:e1:fc:af:5c:dd:18:7d:b9:56:ff:b5:0f:eb:ac:62:7b:95:
         ad:ae:6f:0b:8b:20:89:d1:cf:c5:d1:aa:e8:73:ed:f3:4d:65:
         5e:6f:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:25:29 2026 by rpki-client