Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
File:                     Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json)
Hash identifier:          fHAg6gE9rWnwQyErpbrRPmTL2FDOZlcrw/U+0JSzemc=
Subject key identifier:   E1:9D:5F:FD:F5:C8:C5:D4:54:15:BD:F8:75:17:4C:D6:69:D2:3C:77
Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06
Certificate issuer:       /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
Manifest number:          5A
Signing time:             Mon 11 May 2026 08:14:13 +0000
Manifest this update:     Mon 11 May 2026 08:14:13 +0000
Manifest next update:     Mon 18 May 2026 08:14:13 +0000
Files and hashes:         1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: PUoadjkLcl157h2zrFMkxa+OXGeX59EFtCK3yaY6mrQ=)
                          2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: +oT+l8AaeCiLhYsjOPIgCUOdYkL2JAeHR0qNvNkZXgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06
        Validity
            Not Before: May 11 08:14:13 2026 GMT
            Not After : May 18 08:14:13 2026 GMT
        Subject: CN=6a018fd5-8451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:29:70:8d:76:1a:f4:de:80:23:9a:ff:87:
                    23:62:ba:35:2e:2f:7f:74:b1:58:c0:ed:0a:3c:59:
                    e5:a7:9c:09:4a:b8:8e:af:ab:b9:b6:60:2c:33:07:
                    3f:3a:f2:f4:4c:29:ba:e7:61:7b:5f:9e:bc:2e:c0:
                    95:25:ee:61:76:54:61:71:20:e4:48:52:7c:6b:ea:
                    db:f9:28:e8:da:4c:86:a2:5a:fc:fd:cd:fb:ca:5e:
                    04:7e:b0:4a:50:6d:c2:5f:67:c1:eb:46:5c:e2:cf:
                    e4:a5:40:46:2d:c4:50:a3:fc:3a:eb:b2:a5:2d:c3:
                    04:e6:41:31:d9:9d:e6:6a:7e:79:a5:02:b3:d4:c1:
                    d4:6a:ea:88:cc:12:36:09:60:0d:bb:5e:4b:82:63:
                    60:e6:fc:6a:79:52:30:be:62:3d:91:28:51:74:d8:
                    31:89:c4:0b:51:00:33:ee:bd:0d:25:58:73:28:fb:
                    cd:b2:36:70:0c:35:f8:68:a7:af:1c:9c:55:fa:b7:
                    16:ea:78:68:3d:8a:96:56:c5:23:18:a3:cf:cf:e9:
                    8f:85:99:7e:1b:fd:e7:57:dc:b4:03:72:ea:68:d4:
                    ed:77:12:04:d3:75:57:d4:01:8d:d5:0b:a0:fd:ff:
                    ff:dd:b8:a7:04:b1:76:d5:fc:ce:f0:ec:d9:04:83:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9D:5F:FD:F5:C8:C5:D4:54:15:BD:F8:75:17:4C:D6:69:D2:3C:77
            X509v3 Authority Key Identifier:
                keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:60:dd:0a:54:13:f4:3a:d1:60:bf:cf:9f:71:1b:71:5a:db:
         d1:3d:3a:d7:aa:68:1c:78:ea:75:d3:25:d3:70:ff:69:9c:7b:
         0f:4b:22:82:3b:62:59:a1:c1:6f:14:e9:04:df:f8:c5:5f:aa:
         2a:4f:c2:e9:ee:24:69:ce:4c:82:10:6e:d9:32:78:4a:25:2e:
         09:dd:d5:98:05:67:e1:d7:04:5a:fb:84:6c:32:ed:54:86:9b:
         67:c8:43:9b:86:2d:0a:83:56:31:8e:58:34:4e:e7:58:61:d0:
         2c:40:9b:fe:b3:fc:c7:b2:14:cc:c0:b2:d7:3f:33:66:7a:29:
         b8:2f:9e:d6:6c:f8:c9:6b:5d:e6:a8:15:13:f3:19:d6:63:dc:
         2a:40:a8:c9:10:03:9e:ca:5e:96:ee:db:0b:7e:f8:c1:2d:79:
         18:86:73:e0:05:23:23:bf:60:f6:e0:d5:d5:b6:63:3e:87:11:
         b7:85:0b:8c:d2:eb:79:aa:be:02:2e:ac:3a:4b:82:e9:48:b5:
         cc:82:33:99:1e:c5:b1:82:62:63:f4:60:a9:65:b1:30:a6:3c:
         b2:b9:9f:0f:d2:1e:62:06:37:28:d0:6b:67:08:61:2e:6d:92:
         0c:b8:83:12:61:d0:e4:e9:86:95:cd:83:0a:37:1c:75:7b:4c:
         5a:f1:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:22:44 2026 by rpki-client