Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
File:                     plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft (raw, json)
Hash identifier:          EG8jCxoSFdvneP5ZyMqdfIKxiiCwfLDcuL1q76lB0Uo=
Subject key identifier:   0A:B6:95:15:3B:3E:13:AA:5D:6B:36:9B:7F:F9:47:FA:83:71:B5:20
Authority key identifier: A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58
Certificate issuer:       /CN=A9120974/serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
Certificate serial:       1123
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
Manifest number:          1118
Signing time:             Thu 04 Jun 2026 17:16:18 +0000
Manifest this update:     Thu 04 Jun 2026 17:16:18 +0000
Manifest next update:     Thu 11 Jun 2026 17:16:18 +0000
Files and hashes:         1: plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl (hash: RmPV/lZhLU7dwx5cxnubtb2vao03tMRaEA+PSMx17L8=)
                          2: A87BA1063A4B11E99182B31BC4F9AE02.roa (hash: 5aLn/8Q1nDDPD6ZFyv/iHuTYqfmizbO2KDvpSPnF/0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4387 (0x1123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=A65104DC76A8E0E6A3D92146789680B73DDE5F58
        Validity
            Not Before: Jun  4 17:16:18 2026 GMT
            Not After : Jun 11 17:16:18 2026 GMT
        Subject: CN=6a21b2e2-0bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:63:8f:00:69:0a:61:35:9c:59:6b:36:94:
                    ab:fc:e3:71:46:98:23:b2:95:1b:78:b6:0b:ac:f4:
                    64:35:1a:a8:4d:48:b7:02:3f:8b:c5:c6:e1:cb:f9:
                    6a:70:29:63:d9:23:9d:45:52:a7:ab:76:20:9b:2c:
                    62:03:d6:03:05:1e:c0:9f:45:ae:dd:90:ad:06:76:
                    74:9d:1b:ee:53:5a:c0:83:f0:22:8e:31:6d:95:4a:
                    26:66:d3:ee:57:b5:13:82:17:ba:7b:40:f6:a7:ff:
                    33:3f:87:49:25:7e:09:c9:8f:f9:cf:65:90:f2:ab:
                    94:ed:28:c5:63:24:2a:7c:32:73:ce:4a:62:3e:fa:
                    fd:2d:02:84:82:4b:9d:e9:e4:ef:94:a9:c8:e3:60:
                    2e:c1:79:8d:27:e6:bc:24:4d:b5:0a:a6:f8:0b:59:
                    50:dc:c0:28:da:c0:15:34:e5:37:39:6b:c6:50:f9:
                    64:ea:e4:54:60:c8:ea:de:13:78:5b:06:e0:b4:a9:
                    f9:06:98:fa:60:cf:d3:1c:e7:e5:e5:eb:3e:3f:4c:
                    ed:d8:7b:8f:35:fa:50:19:58:eb:a6:03:7b:0f:c3:
                    69:7e:a6:ea:59:5d:6f:d9:f2:21:74:76:3c:ec:0b:
                    03:57:f5:07:49:a2:ed:5b:4f:71:2f:9f:61:6c:ff:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B6:95:15:3B:3E:13:AA:5D:6B:36:9B:7F:F9:47:FA:83:71:B5:20
            X509v3 Authority Key Identifier:
                keyid:A6:51:04:DC:76:A8:E0:E6:A3:D9:21:46:78:96:80:B7:3D:DE:5F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/plEE3Hao4Oaj2SFGeJaAtz3eX1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/033240C03A4A11E9940F2D16C4F9AE02/plEE3Hao4Oaj2SFGeJaAtz3eX1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9a:8b:5e:ee:d0:01:5f:5a:e8:f0:13:b6:07:9e:65:9a:c3:
         56:14:35:f6:b5:ac:cd:93:19:5e:44:2c:47:b6:35:9a:0b:82:
         4a:7b:25:1a:b5:87:82:14:46:35:83:cd:b0:44:c7:49:4e:43:
         35:63:b1:f0:15:bd:3c:13:d9:ec:e2:d8:0a:5e:4b:14:a5:50:
         4e:1e:48:d9:45:af:cc:bf:84:49:3a:ba:a0:6c:55:46:c0:ad:
         50:3f:93:26:c1:af:a6:a0:d4:ce:62:d5:5c:b3:aa:32:2a:1a:
         2a:5a:12:8c:ad:cb:25:19:ce:21:a0:96:d9:5c:70:83:dc:72:
         9e:6d:08:9f:72:56:cc:25:69:a3:58:11:5a:82:99:68:d6:85:
         13:f9:3d:ef:16:bd:26:d2:1b:0d:9e:aa:f4:85:d4:1c:12:9e:
         dd:44:b0:dd:b5:74:84:e3:40:ef:55:a1:ca:2b:51:a5:c1:57:
         97:de:06:ba:2e:6e:ad:d2:83:7a:09:4f:83:c4:6b:a4:7f:2d:
         d6:b9:ab:6c:f1:b8:e7:59:30:0f:db:f2:ef:8f:eb:77:49:ea:
         e3:59:e4:9c:30:a6:85:ec:ff:00:ea:19:71:ab:07:00:57:40:
         c9:a4:83:90:0d:7e:22:17:d2:4e:12:84:36:2f:a1:94:2f:ee:
         ad:22:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:14 2026 by rpki-client