Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
File:                     PcBRwTKrtyHhorzZB1rns05CDfg.mft (raw, json)
Hash identifier:          gp/MAq/A1DkvAWkQg3Y2Bt91WMwwlk6QBn6e5XGmI34=
Subject key identifier:   5F:EB:9A:6D:E6:B5:18:D7:FB:77:1F:C5:6A:26:83:D4:1E:18:CC:F4
Authority key identifier: 3D:C0:51:C1:32:AB:B7:21:E1:A2:BC:D9:07:5A:E7:B3:4E:42:0D:F8
Certificate issuer:       /CN=A9192C18/serialNumber=3DC051C132ABB721E1A2BCD9075AE7B34E420DF8
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
Manifest number:          2A
Signing time:             Sun 15 Nov 2026 00:49:40 +0000
Manifest this update:     Sun 15 Nov 2026 00:49:40 +0000
Manifest next update:     Sun 22 Nov 2026 00:49:40 +0000
Files and hashes:         1: PcBRwTKrtyHhorzZB1rns05CDfg.crl (hash: IqZExoXevm47KWUtM+8xVfZXwNswiMI7Fq5EY+CSTl4=)
                          2: C4BC1BF8AFE511F19D14B5525B11F970.roa (hash: zu5/BVfnlOfrQciW/f4UJsQzOFwBfgC0Zyaxa57afIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=3DC051C132ABB721E1A2BCD9075AE7B34E420DF8
        Validity
            Not Before: Nov 15 00:49:40 2026 GMT
            Not After : Nov 22 00:49:40 2026 GMT
        Subject: CN=6af901a4-efe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:c0:6a:90:69:7c:1e:76:49:b6:92:60:d4:
                    f8:15:02:70:26:62:fe:07:f0:ca:51:ce:dc:82:37:
                    3f:14:c1:27:73:27:57:5b:81:12:18:7d:02:94:71:
                    c2:47:72:df:4d:51:7f:ff:b7:88:d4:f0:e7:a6:10:
                    18:25:23:46:f0:33:38:5f:d5:7b:40:34:30:37:16:
                    2c:82:b8:13:f4:6d:f0:16:b2:5f:0a:f2:7a:d1:04:
                    bd:d6:35:06:e6:d1:92:95:43:b6:fe:06:86:15:a5:
                    17:31:5a:8a:77:0f:4f:a4:e0:9c:d3:44:61:d8:5a:
                    33:b8:97:3c:94:32:a8:e6:2f:b1:80:2b:80:e5:ee:
                    3e:47:21:ea:cc:29:3e:1d:4a:64:0b:cc:73:ec:1c:
                    0a:32:29:4b:22:50:f6:1d:65:28:ff:6e:6a:c2:fa:
                    e6:57:9f:cb:85:78:3c:1c:8c:1d:27:d5:5b:11:b8:
                    c5:a4:36:d8:fc:45:19:38:72:2d:70:7b:6c:d3:ab:
                    30:55:78:47:1f:cf:90:4e:ee:10:4e:76:b6:d9:f5:
                    a1:cc:d0:ce:3d:6d:8f:6a:17:bb:d6:62:f2:99:1c:
                    c6:a0:02:22:30:e8:82:b2:eb:6d:30:ea:5b:3d:8f:
                    d6:f4:71:e6:6a:01:b2:47:11:9e:2a:ce:4e:81:35:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:9A:6D:E6:B5:18:D7:FB:77:1F:C5:6A:26:83:D4:1E:18:CC:F4
            X509v3 Authority Key Identifier:
                keyid:3D:C0:51:C1:32:AB:B7:21:E1:A2:BC:D9:07:5A:E7:B3:4E:42:0D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/PcBRwTKrtyHhorzZB1rns05CDfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/FD0B0550A7E811F189926844A6EE528E/PcBRwTKrtyHhorzZB1rns05CDfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:c2:6c:65:08:0b:d0:27:7c:0b:51:da:57:2b:01:0a:78:
         ed:ec:6f:fa:d4:60:72:29:33:04:53:8c:55:5d:3d:f0:8c:e2:
         13:8e:1c:0c:7e:1b:4d:d7:2c:a6:1f:6d:7b:e6:07:50:a0:9f:
         84:b0:5f:d2:e5:1e:05:04:04:93:ea:1c:fa:79:c0:6a:8a:d4:
         10:a2:e8:8f:57:9b:f0:c4:28:5a:b6:53:ac:05:d3:38:ec:67:
         82:09:ae:43:b5:f3:7a:a7:d8:62:f9:1f:8f:50:2e:44:83:12:
         80:77:35:a3:9e:50:ec:18:17:c2:49:99:c4:11:30:c6:ac:4a:
         11:0b:ee:95:50:72:c7:eb:f9:a7:87:c0:8b:89:d7:3b:75:e3:
         0b:a7:de:ef:00:0d:84:3b:51:7c:05:db:70:7a:39:e3:d0:51:
         d3:80:72:58:a9:77:64:d6:e8:5f:71:a1:8e:75:44:c1:61:cb:
         36:64:21:5b:4d:c5:e2:15:0c:4d:74:a2:99:41:6b:ab:3f:9b:
         84:5b:9b:58:6c:64:b0:2e:86:ba:3e:e5:95:b1:4b:96:07:3c:
         75:f5:04:f1:68:c7:db:01:1c:ea:b0:bf:c5:69:5e:73:a7:a5:
         84:c2:17:c0:46:21:4c:4b:02:ff:34:0f:da:88:d7:c8:ee:78:
         07:f3:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:17:58 2026 by rpki-client