Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
File:                     Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json)
Hash identifier:          s6YYS+xohvgnPerDBcOD4P1S46k0tRUPNGexckc/7tI=
Subject key identifier:   7F:11:88:3F:8B:95:F9:7F:40:65:93:DE:DE:E1:DE:89:5C:5C:51:B7
Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7
Certificate issuer:       /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
Manifest number:          97
Signing time:             Wed 25 Mar 2026 06:39:49 +0000
Manifest this update:     Wed 25 Mar 2026 06:39:49 +0000
Manifest next update:     Wed 01 Apr 2026 06:39:49 +0000
Files and hashes:         1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: b0SvIdfEUl1djQxv4Y5kDpFQubpf7e6JLrogE0lfosQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl
                          rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
        Validity
            Not Before: Mar 25 06:39:49 2026 GMT
            Not After : Apr  1 06:39:49 2026 GMT
        Subject: CN=69c38335-7a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:43:a1:c9:5b:43:9b:a6:78:35:55:11:8f:
                    44:8b:90:8f:57:4c:d6:8e:11:86:44:60:e5:03:1f:
                    45:ee:37:14:81:62:1a:68:69:15:0c:16:f1:ab:dc:
                    4b:1c:84:3b:ad:6c:cb:3e:3f:61:91:84:ff:fa:6e:
                    ef:65:8a:a6:f8:7a:be:e4:91:a7:9b:c3:a9:62:72:
                    0e:d0:da:95:96:68:d1:32:7f:83:88:29:43:86:92:
                    60:28:29:2f:7a:b5:91:ba:99:f6:32:8f:c4:eb:eb:
                    85:7e:c1:4e:84:f4:e0:a2:79:51:0a:31:17:00:22:
                    aa:a5:3f:39:10:e8:b0:b0:a0:36:37:a0:f7:93:d1:
                    7f:76:a6:b1:03:9a:cd:60:21:0f:04:1e:d9:1e:d7:
                    07:2e:54:21:3c:07:2c:81:88:3c:ac:84:0b:7f:c6:
                    42:70:ea:27:f4:b6:1f:b6:ed:db:51:f9:7a:32:48:
                    b1:50:c8:80:85:5b:98:06:6c:7d:29:5f:ef:a6:8d:
                    d5:12:85:ee:13:d1:c1:20:f1:69:33:a6:c9:2e:91:
                    4b:2e:10:27:f8:38:ce:64:8e:aa:e2:c2:ec:f6:c4:
                    0e:7e:5c:b5:73:fe:bd:d5:8c:c9:1f:15:46:6d:57:
                    ad:be:19:f5:9b:71:52:1a:a4:2e:92:6a:c3:d4:7c:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:11:88:3F:8B:95:F9:7F:40:65:93:DE:DE:E1:DE:89:5C:5C:51:B7
            X509v3 Authority Key Identifier:
                keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:7b:f3:d0:93:b9:a3:49:96:2a:3b:f6:18:23:d4:a1:a2:
         41:f8:cb:b6:10:a9:dd:e9:5f:fd:b4:34:dc:9e:4f:b9:c8:11:
         30:52:95:83:43:93:60:dd:6d:e0:8b:f0:07:69:43:68:16:f6:
         af:42:c1:cd:2e:c5:c3:3d:40:b4:f0:22:9b:c4:81:ad:1b:08:
         57:d1:05:7a:40:b1:37:47:25:0d:e9:57:20:4b:ab:58:df:d9:
         0e:55:c7:ec:ee:d8:30:5f:ca:b7:43:3d:71:5d:7d:ed:2d:29:
         9b:06:07:42:1c:e0:9a:c2:00:d5:40:2f:e2:94:a6:d1:4f:ae:
         f9:42:51:09:ed:f5:6e:fe:a1:3c:b7:87:01:c2:66:31:49:07:
         e7:46:94:35:01:e0:c2:32:5a:6f:f6:05:f2:f7:81:c0:e4:e8:
         ff:28:bb:36:a3:c0:f0:6a:7a:1a:a8:d4:65:6f:83:2f:22:ac:
         84:79:1c:ee:bb:60:a3:73:b6:2a:0c:ce:f8:d6:35:1c:15:37:
         d3:c7:1a:ee:b1:3f:34:b6:0b:84:88:b6:ea:59:f4:a7:50:c8:
         09:6e:a7:07:9e:25:0f:be:6d:11:ef:1a:fc:2c:f5:1d:db:09:
         b0:03:52:f2:e0:18:d2:04:de:55:26:17:ca:68:2c:b1:1f:a7:
         61:66:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:00 2026 by rpki-client