Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
File:                     PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json)
Hash identifier:          nLOXW/VyRfmVEHjQRRnO4Q7XJrTFCgsK0trD+T+t0GY=
Subject key identifier:   EF:A3:D4:DB:FA:E4:1C:02:F4:5E:1A:E1:5F:D1:89:F5:C6:58:E7:59
Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC
Certificate issuer:       /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
Manifest number:          0226
Signing time:             Sun 05 Apr 2026 02:16:11 +0000
Manifest this update:     Sun 05 Apr 2026 02:16:11 +0000
Manifest next update:     Sun 12 Apr 2026 02:16:11 +0000
Files and hashes:         1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: luPZmkcObH/zNw1zP+ryttXT5GUTJG9Wl7CLu14f7p0=)
                          2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: GRfiEr9OW2Ontk4PlK6wpEk+JDayOUZ5GJhS4LRNf8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl
                          rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC
        Validity
            Not Before: Apr  5 02:16:11 2026 GMT
            Not After : Apr 12 02:16:11 2026 GMT
        Subject: CN=69d1c5eb-23ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f9:14:cc:02:79:02:6a:c5:90:d0:62:f5:73:
                    f6:78:2d:7b:92:1e:62:0a:c6:95:77:16:be:1a:a8:
                    62:3b:4a:af:9a:72:b0:a3:af:2f:e8:56:93:aa:82:
                    f8:73:4d:84:12:c0:4f:59:42:07:80:93:ab:9e:0d:
                    b5:29:10:e1:23:9f:ca:26:f5:fa:d3:eb:a9:bc:d9:
                    fd:92:ca:a8:01:cb:8e:1a:2e:d1:39:74:5b:f6:0f:
                    30:75:2a:55:8a:01:bb:24:d7:ab:96:62:88:1a:7c:
                    32:eb:f9:17:b0:05:3f:57:15:94:f8:5d:9e:a4:02:
                    48:c0:f6:94:02:cf:28:0c:cc:35:8e:47:9d:8e:45:
                    49:8e:e5:ff:ac:fd:86:26:43:ce:03:5d:16:c9:9d:
                    df:29:e4:9e:41:0c:ec:dd:a4:dc:e9:74:93:78:21:
                    eb:0d:e8:9b:e6:7b:ec:20:b2:bd:d2:6d:e5:c9:64:
                    70:3e:0c:27:71:fc:ba:7c:cd:b4:7d:a8:01:f1:f1:
                    bd:8c:21:b1:fa:46:1b:de:79:f1:77:08:a9:0d:b4:
                    cf:45:23:ed:ec:d0:5d:7b:8a:68:67:75:ec:bd:c5:
                    eb:78:6c:7f:95:13:05:50:c5:8e:e1:11:51:4d:f5:
                    d4:7d:8b:3a:8c:82:ae:a0:57:d5:63:ff:ff:4d:f1:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A3:D4:DB:FA:E4:1C:02:F4:5E:1A:E1:5F:D1:89:F5:C6:58:E7:59
            X509v3 Authority Key Identifier:
                keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:15:5a:93:e0:4d:23:5f:a0:3f:08:b5:e9:ed:bb:e6:af:30:
         c6:e5:cd:51:9a:58:f1:94:fa:f0:1c:aa:77:35:e9:7d:f4:a1:
         ea:b2:ed:30:90:6d:1f:ce:e9:6e:08:2a:29:31:62:de:3b:2d:
         47:f2:6b:31:25:09:81:09:f7:36:ef:a4:95:6f:9e:f2:68:9d:
         21:57:76:07:0b:e7:33:a2:fc:a4:fd:ef:c4:bb:e2:e8:c2:7d:
         a0:9c:ca:ff:cf:91:57:64:9f:b8:f9:cd:84:b3:90:14:ad:5a:
         8b:48:75:8a:59:0f:73:a6:b7:f4:f9:dc:e3:88:c4:b2:6e:12:
         f5:94:8b:ef:00:c3:05:15:21:15:1f:47:86:49:7a:03:27:f0:
         13:cb:a2:2a:0c:29:7b:b3:21:55:80:73:ca:ea:8c:6f:ab:c9:
         17:48:04:38:7b:42:bd:98:09:89:be:74:67:92:d7:41:2c:4a:
         4f:fe:83:0b:d3:4d:7c:d0:a8:76:8c:fd:8f:4c:50:a8:48:38:
         69:93:59:6f:e4:2c:f3:b7:19:dc:59:13:a3:c9:25:9a:47:7d:
         45:ec:dd:20:a5:7a:f8:f2:d9:3f:ae:0b:15:8e:a2:f2:7e:2b:
         a7:05:29:a2:c9:cb:16:e3:98:9a:24:fe:01:0e:76:ca:4d:bc:
         43:25:79:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD
NDVDNDJDQkMwHhcNMjYwNDA1MDIxNjExWhcNMjYwNDEyMDIxNjExWjAYMRYwFAYD
VQQDEw02OWQxYzVlYi0yM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmPkUzAJ5AmrFkNBi9XP2eC17kh5iCsaVdxa+GqhiO0qvmnKwo68v6FaTqoL4
c02EEsBPWUIHgJOrng21KRDhI5/KJvX60+upvNn9ksqoAcuOGi7ROXRb9g8wdSpV
igG7JNerlmKIGnwy6/kXsAU/VxWU+F2epAJIwPaUAs8oDMw1jkedjkVJjuX/rP2G
JkPOA10WyZ3fKeSeQQzs3aTc6XSTeCHrDeib5nvsILK90m3lyWRwPgwncfy6fM20
fagB8fG9jCGx+kYb3nnxdwipDbTPRSPt7NBde4poZ3XsvcXreGx/lRMFUMWO4RFR
TfXUfYs6jIKuoFfVY///TfFdOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+j1Nv6
5BwC9F4a4V/RifXGWOdZMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5
NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG
OElJYlRjQnFrYW5FWEVMTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABhVak+BNI1+gPwi16e275q8wxuXNUZpY8ZT68ByqdzXpffSh6rLtMJBtH87p
bggqKTFi3jstR/JrMSUJgQn3Nu+klW+e8midIVd2BwvnM6L8pP3vxLvi6MJ9oJzK
/8+RV2SfuPnNhLOQFK1ai0h1ilkPc6a39Pnc44jEsm4S9ZSL7wDDBRUhFR9Hhkl6
AyfwE8uiKgwpe7MhVYBzyuqMb6vJF0gEOHtCvZgJib50Z5LXQSxKT/6DC9NNfNCo
doz9j0xQqEg4aZNZb+Qs87cZ3FkTo8klmkd9RezdIKV6+PLZP64LFY6i8n4rpwUp
osnLFuOYmiT+AQ52yk28QyV5pg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:07 2026 by rpki-client