Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
File:                     PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json)
Hash identifier:          vhuDQ9/5BfKN7yIDHc0Q5Sbw48T2nTz5+44arGcOIog=
Subject key identifier:   9B:C0:F4:83:66:92:79:9E:07:17:AA:22:A1:AB:59:AD:CF:F0:E5:42
Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8
Certificate issuer:       /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
Manifest number:          0169
Signing time:             Wed 13 May 2026 05:02:57 +0000
Manifest this update:     Wed 13 May 2026 05:02:56 +0000
Manifest next update:     Wed 20 May 2026 05:02:56 +0000
Files and hashes:         1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: Qt5lUwXSFTCZGgyA4yEPariPThe3Y9wrHl82xVd/lb4=)
                          2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: yNecsmBjDXjAgOr7n+zvB488WLZFWPFK2F0N+2hdbTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8
        Validity
            Not Before: May 13 05:02:56 2026 GMT
            Not After : May 20 05:02:56 2026 GMT
        Subject: CN=6a040600-c365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:bb:93:80:93:53:3f:a5:7c:91:04:a6:f2:
                    0e:b5:b5:90:cc:0e:22:44:3a:8a:b8:d3:22:8d:4e:
                    3f:61:d1:c6:ba:a6:27:36:1e:11:73:2b:a0:4c:fd:
                    51:14:21:5f:b0:d8:39:3f:5b:95:73:3c:ca:7f:1d:
                    54:cb:87:20:91:5b:27:f9:f9:3e:c1:46:b8:02:2a:
                    ec:2b:c7:da:f4:ff:e8:d1:d2:f4:e3:db:9f:90:e3:
                    04:f9:5d:21:1c:be:4d:d0:d9:bf:dc:23:ba:e6:f0:
                    cf:f0:85:14:72:a9:91:cf:cd:a8:b3:33:ea:0c:66:
                    ec:ee:c6:20:1d:7c:f0:c0:3a:4a:84:e2:ec:7a:3d:
                    14:ba:ca:4b:9a:65:16:76:df:ee:9a:6b:b8:0d:1c:
                    3d:bb:9e:d9:ea:93:21:26:f3:fc:e4:89:cd:1f:c5:
                    a2:4f:06:d8:e9:bd:cd:5a:da:00:0f:34:93:ae:dc:
                    aa:63:12:2c:d0:30:35:e1:8a:b1:40:cb:0f:29:be:
                    12:37:cf:0a:26:1b:f7:72:60:b6:7b:76:ba:49:3b:
                    88:2f:85:56:74:57:aa:24:80:60:a9:3f:11:c8:70:
                    a6:d6:88:c6:e0:1b:66:e4:47:05:f2:e7:b4:b1:ab:
                    39:c8:9d:9e:b6:42:b2:86:02:0d:6a:e4:7b:19:dd:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:F4:83:66:92:79:9E:07:17:AA:22:A1:AB:59:AD:CF:F0:E5:42
            X509v3 Authority Key Identifier:
                keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4b:4c:6e:ea:32:ff:72:c0:9a:e3:cd:b1:1d:90:ca:7f:05:
         af:af:47:17:8f:9a:ae:68:b3:c5:41:d7:92:f7:15:d5:18:10:
         52:8c:00:19:15:6d:c5:18:a5:d6:e6:c8:bf:16:19:3a:88:a4:
         71:87:55:49:5b:77:ee:ac:20:76:ec:5c:a0:46:1b:51:5d:92:
         88:1f:63:7e:a0:58:9f:d7:ce:ff:0f:6e:91:c5:10:8c:4b:1f:
         5e:8c:a0:34:1d:b2:36:23:f0:e7:b4:9f:76:46:51:71:79:1e:
         a6:05:fe:e3:21:52:e1:69:40:40:09:90:ff:02:7b:65:ac:f6:
         e8:61:f4:11:23:c7:5d:08:4d:e2:a7:d6:b9:8b:31:f1:fa:16:
         23:8a:67:63:4a:2a:e1:b8:e3:b0:f5:b7:4f:5c:49:30:e4:a8:
         3d:93:ad:3a:0d:63:df:fd:dd:68:69:bb:cd:f4:c1:b2:43:86:
         0c:bd:56:85:b8:d7:0a:9c:84:fc:3d:04:97:88:14:40:41:fa:
         d9:1c:c4:c3:c8:3c:c0:73:f6:a9:ed:23:ca:bc:1d:6c:05:d4:
         2b:ae:0d:9e:31:d4:81:74:dc:20:b6:a1:f2:f0:fc:6c:59:a3:
         04:e6:df:55:e7:a4:cf:55:e1:b9:4a:b9:20:3c:1d:9e:19:89:
         f2:00:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:38 2026 by rpki-client