Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File:                     pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier:          9yw3gxDuvy+eTmBbmoxjqufKH7gwL6u9tO/vUAUEgXQ=
Subject key identifier:   46:1B:4C:30:8E:F9:A3:8F:7A:EE:94:B5:7F:AB:49:55:B6:BC:E1:FC
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number:          018D
Signing time:             Sun 05 Apr 2026 03:54:54 +0000
Manifest this update:     Sun 05 Apr 2026 03:54:53 +0000
Manifest next update:     Sun 12 Apr 2026 03:54:53 +0000
Files and hashes:         1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: dPIOgevsB248BU0eRY/AQQocC9dxijjVuFPP26AIAAg=)
                          2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: mtMrgn8E6rJ7Yx0iQX63xtbQeZIjjv/MdEQJpqPZR5c=)
                          3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: 33xsa1I7dTsH1mG4g4Z5bezPgV/Y0HHBZjYGiwsfW78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
        Validity
            Not Before: Apr  5 03:54:53 2026 GMT
            Not After : Apr 12 03:54:53 2026 GMT
        Subject: CN=69d1dd0e-6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:1c:1e:fd:0a:fb:78:b8:d0:94:ae:a8:cc:
                    77:c6:e4:24:f6:52:6c:9e:87:fb:2c:e1:90:75:bd:
                    41:f1:d9:79:e5:bc:9a:12:6d:a8:ef:4d:ef:0a:bc:
                    cb:fc:9f:c6:17:f8:5f:60:da:1d:91:25:3c:92:58:
                    80:8b:0a:95:ff:43:40:81:dc:8b:d3:83:2b:36:33:
                    55:dc:c8:6d:7d:ec:40:f3:0f:e7:ee:1e:54:4b:09:
                    e8:1a:8a:bf:67:0a:4f:7d:a4:5a:cd:13:b7:e8:96:
                    ad:bc:68:be:76:41:99:7b:34:c5:41:37:5e:5e:f9:
                    0f:53:9a:4c:05:6f:70:d4:d6:14:fc:b5:dc:53:dc:
                    4d:bc:c5:15:27:6f:3a:0e:51:30:37:da:3b:4c:2f:
                    67:03:6f:00:f3:34:e8:1b:0d:ea:80:f3:90:ee:20:
                    db:a8:a2:da:50:90:5c:b2:d3:6d:c6:60:5b:54:aa:
                    9b:4a:74:f9:6a:ce:dc:21:7c:5d:99:e1:c5:ae:f7:
                    d9:eb:2b:32:7c:e2:22:81:85:a5:b2:55:4d:15:c8:
                    cb:18:c5:5e:55:50:27:da:c2:7a:5d:61:73:43:48:
                    95:d6:2e:a4:0e:32:88:dc:1d:dc:a6:53:11:04:2b:
                    0d:aa:14:4a:34:19:59:f4:f1:ee:fa:fe:63:27:7a:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1B:4C:30:8E:F9:A3:8F:7A:EE:94:B5:7F:AB:49:55:B6:BC:E1:FC
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:16:53:f7:b7:ac:4b:35:f6:18:92:71:ae:ee:e3:7a:78:
         84:87:84:12:95:6c:51:06:e1:fa:65:c7:9a:be:59:59:60:33:
         02:37:f4:29:2c:5b:c4:72:5a:a7:73:d7:d5:9c:8c:c3:20:7d:
         8d:c1:55:fa:e5:bd:65:7f:ad:d7:d4:9a:eb:f1:ee:3f:e8:dc:
         c8:80:79:2c:dd:91:71:9b:5c:e0:6d:db:f5:7a:58:56:8b:a0:
         89:a1:1f:d6:b1:3d:7b:07:2a:bd:e9:b0:16:28:af:ce:12:7f:
         e2:9b:da:45:3e:e3:9b:fa:ff:bb:17:cc:73:9c:39:1d:f5:f8:
         a8:bc:60:f4:cb:a8:ef:80:8f:5e:14:cf:1e:eb:b0:1a:d5:c5:
         d1:ec:50:b0:01:6f:78:11:7f:09:59:01:50:48:e7:13:5e:fb:
         35:9e:82:5e:18:88:3b:2e:ad:29:71:c8:6e:8f:e5:02:2a:89:
         3b:bf:5b:ef:bb:5d:fb:b2:93:cc:5f:d3:1f:14:31:fd:39:5b:
         b1:f5:b0:63:fe:96:32:8e:30:b6:3f:89:57:0c:47:cc:ca:ea:
         af:ad:86:a5:ce:1c:60:1d:d0:fa:82:81:12:bf:37:d2:ce:ef:
         d9:76:a4:b0:ce:3d:52:ff:7e:db:9b:2d:24:04:b0:56:60:23:
         52:a7:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:36 2026 by rpki-client