Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
File:                     pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json)
Hash identifier:          TWI61UO/YZCoGVLzcI8kTSj0tIen0SsbZN7Nns1Mxgw=
Subject key identifier:   54:86:B0:23:4B:5D:F1:74:76:3B:E2:F3:52:43:2D:68:84:3E:DF:4A
Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE
Certificate issuer:       /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
Manifest number:          06F9
Signing time:             Sat 04 Apr 2026 21:55:10 +0000
Manifest this update:     Sat 04 Apr 2026 21:55:10 +0000
Manifest next update:     Sat 11 Apr 2026 21:55:10 +0000
Files and hashes:         1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: 27sVleA5lAscvFqfZrF5g9uD8TIDMoeEvSy/MQRcrl8=)
                          2: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (hash: 4DPDsju8pXlErtWtC4xBJ8ufxgxSHiE9Btw+6EPp5hM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl
                          rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
        Validity
            Not Before: Apr  4 21:55:10 2026 GMT
            Not After : Apr 11 21:55:10 2026 GMT
        Subject: CN=69d188be-e2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:0d:38:30:96:71:f0:38:58:30:7b:8c:4f:
                    36:22:ae:ba:12:55:67:70:2f:f9:c4:68:36:50:94:
                    7c:d9:af:23:d6:59:21:4a:cc:b5:5e:f2:51:c7:e8:
                    c9:ce:36:a6:bf:9e:79:e0:02:2a:c5:49:48:ad:eb:
                    88:68:5c:ea:57:c2:ea:70:c8:d2:93:9b:8a:69:ca:
                    d6:34:11:4f:b2:68:4a:c5:83:de:10:64:73:77:2d:
                    a9:b7:b9:93:3e:66:c8:5e:1a:4c:41:15:03:92:a6:
                    ad:ec:7a:3a:1c:88:79:8e:b1:a3:6e:56:96:89:aa:
                    ed:6a:79:b7:b3:0b:f6:c3:9f:65:d0:1c:31:25:e7:
                    2b:f1:69:ac:a3:68:f1:aa:c6:40:94:2c:74:26:e2:
                    e7:df:51:1f:fa:39:9a:ba:70:3f:9a:86:e7:0a:5c:
                    87:e4:f4:88:cb:6c:6c:5c:cb:6a:f9:f8:cb:71:fe:
                    33:4c:7d:69:2f:12:fa:9e:ed:3d:2c:d4:4a:1b:06:
                    32:cc:53:34:d2:c8:09:09:c5:53:ef:9e:09:f7:ea:
                    27:8b:7b:23:54:76:83:93:0e:1d:d4:ab:25:50:7a:
                    66:a7:18:34:03:db:31:8c:64:dd:7b:9a:95:1a:35:
                    9f:32:00:1d:75:0d:62:23:2e:8b:6a:a1:36:af:24:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:B0:23:4B:5D:F1:74:76:3B:E2:F3:52:43:2D:68:84:3E:DF:4A
            X509v3 Authority Key Identifier:
                keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:c7:56:64:8a:3d:c3:c3:a6:5e:7f:c2:26:40:6c:5a:55:
         5f:14:27:f9:f3:d5:df:7b:89:76:23:4f:81:b3:4c:c1:a8:0a:
         93:cd:a4:26:8f:0c:0d:6e:62:ec:a1:b5:7d:40:a4:0a:ce:a6:
         e0:e3:e4:66:d8:7f:f3:bf:0f:0f:f4:37:bf:9c:ba:ea:b7:3b:
         f6:97:c2:41:ab:99:5d:03:f9:64:cb:d3:c3:e1:ad:d6:37:90:
         52:b1:86:3f:60:d4:7b:71:cb:5f:aa:83:96:6e:a6:14:d4:26:
         95:bb:b8:13:30:02:97:14:b1:8d:e1:48:34:27:9e:54:66:e1:
         5b:13:37:76:83:fc:13:11:f3:ba:59:d2:b8:e9:bc:71:e0:f8:
         d3:60:de:74:1e:72:4a:34:1a:75:92:e3:2e:5d:f0:21:37:32:
         a1:da:73:43:fa:74:70:f9:aa:50:3a:60:f5:bb:57:72:49:56:
         c3:6c:ac:47:e2:98:b5:c2:5e:fc:b8:93:05:bb:72:dc:59:23:
         b0:ec:f1:84:0e:a3:f0:57:f3:60:6e:c3:66:72:ed:e6:d5:6c:
         bd:0a:0d:cc:5d:9f:6b:2e:23:ad:66:dc:27:30:72:5a:2e:97:
         e2:56:45:b3:0a:a0:e5:29:be:36:ce:8f:c2:8c:4c:c6:be:2f:
         69:e7:33:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB
MTU5MTI2RUUwHhcNMjYwNDA0MjE1NTEwWhcNMjYwNDExMjE1NTEwWjAYMRYwFAYD
VQQDEw02OWQxODhiZS1lMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0csNODCWcfA4WDB7jE82Iq66ElVncC/5xGg2UJR82a8j1lkhSsy1XvJRx+jJ
zjamv5554AIqxUlIreuIaFzqV8LqcMjSk5uKacrWNBFPsmhKxYPeEGRzdy2pt7mT
PmbIXhpMQRUDkqat7Ho6HIh5jrGjblaWiartanm3swv2w59l0BwxJecr8Wmso2jx
qsZAlCx0JuLn31Ef+jmaunA/mobnClyH5PSIy2xsXMtq+fjLcf4zTH1pLxL6nu09
LNRKGwYyzFM00sgJCcVT754J9+oni3sjVHaDkw4d1KslUHpmpxg0A9sxjGTde5qV
GjWfMgAddQ1iIy6LaqE2ryTYwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSGsCNL
XfF0djvi81JDLWiEPt9KMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD
RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzUzRC84NEI1OEY2NjhDRkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1
cXlRUk5nSGFnVk9oV1JKdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQbnHVmSKPcPDpl5/wiZAbFpVXxQn+fPV33uJdiNPgbNMwagKk82kJo8MDW5i
7KG1fUCkCs6m4OPkZth/878PD/Q3v5y66rc79pfCQauZXQP5ZMvTw+Gt1jeQUrGG
P2DUe3HLX6qDlm6mFNQmlbu4EzAClxSxjeFINCeeVGbhWxM3doP8ExHzulnSuOm8
ceD402DedB5ySjQadZLjLl3wITcyodpzQ/p0cPmqUDpg9btXcklWw2ysR+KYtcJe
/LiTBbty3FkjsOzxhA6j8FfzYG7DZnLt5tVsvQoNzF2fay4jrWbcJzByWi6X4lZF
swqg5Sm+Ns6PwoxMxr4vaeczyA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:02 2026 by rpki-client