Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File:                     PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier:          w4oT9cYYwU7qrL+H0FOgmosSQ3W5TjStMHnNLmTc+Wk=
Subject key identifier:   F1:CD:3B:76:CB:E6:1F:52:64:3C:15:54:94:11:C4:FA:84:7C:A4:AB
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer:       /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number:          0252
Signing time:             Thu 21 May 2026 02:31:41 +0000
Manifest this update:     Thu 21 May 2026 02:31:40 +0000
Manifest next update:     Thu 28 May 2026 02:31:40 +0000
Files and hashes:         1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: 1kwCAWeA+cSwkMh3tgSut4n/zL1X6mKNVhv7aAIuwg8=)
                          2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: dhqZez1CmQoNnl7tme2Gyw601Mw62gYrcOQDDpPCTCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
                          rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
        Validity
            Not Before: May 21 02:31:40 2026 GMT
            Not After : May 28 02:31:40 2026 GMT
        Subject: CN=6a0e6e8c-e93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:31:74:94:4e:97:ad:9d:10:33:ed:99:d0:
                    f5:53:a7:ec:3c:53:f6:b8:7e:82:92:db:08:21:03:
                    5d:96:94:40:db:b9:39:16:da:2a:54:be:04:29:ed:
                    3b:fe:89:7a:7d:1e:13:54:51:89:53:30:38:5a:1f:
                    24:ff:f9:5d:30:7d:c3:5f:fc:5f:7b:bd:ef:7d:89:
                    71:16:42:de:25:0a:70:fc:a8:42:46:c8:30:a9:62:
                    e5:31:ca:17:4d:c7:83:96:3f:a7:cb:3a:71:8a:1f:
                    ac:62:b6:73:a1:10:73:a6:7a:df:ed:14:33:ed:a1:
                    7d:d2:5e:e6:25:ba:02:de:83:70:57:e8:b2:33:c5:
                    7a:82:b5:25:5b:96:13:d6:2e:53:7e:5c:83:16:b6:
                    a3:b8:0c:a2:81:99:a1:09:0b:55:ff:73:9f:59:cd:
                    e0:af:63:5b:fa:52:d8:07:31:43:cb:83:47:7d:de:
                    74:0c:f9:bc:ff:e9:28:af:1a:f5:90:20:b0:70:0f:
                    da:9a:14:69:ce:3b:c3:a7:d3:ac:39:65:e3:7f:24:
                    61:62:83:9d:ef:3e:b4:9e:96:f9:cd:b4:42:7a:93:
                    29:62:7f:69:aa:97:d8:f3:75:0e:12:5b:fe:56:44:
                    a2:5a:15:f7:bc:93:30:03:7e:4f:8a:33:89:11:ee:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CD:3B:76:CB:E6:1F:52:64:3C:15:54:94:11:C4:FA:84:7C:A4:AB
            X509v3 Authority Key Identifier:
                keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:23:97:21:af:27:d2:1e:d7:e7:5d:d4:01:c5:da:ed:ee:
         87:60:62:2a:5b:26:b4:7c:c0:a4:4b:5e:a1:41:30:f7:5b:ef:
         58:13:16:32:9d:3d:ff:73:2a:31:3c:b0:b5:2a:d8:15:a7:b2:
         7d:5c:0d:bf:4c:96:1a:3c:ce:cb:a6:04:93:49:59:90:f0:31:
         bf:d9:a4:23:10:95:bd:b7:93:d7:1d:62:32:e5:5b:68:6e:5b:
         d6:98:c2:e3:5a:1c:22:bc:28:85:94:4f:c1:28:46:f1:39:d0:
         f7:23:c3:2a:34:39:fa:60:cf:35:42:47:b8:ea:18:64:2c:58:
         e3:20:65:ef:c8:05:f2:51:9b:b5:b6:b7:b5:54:7d:6e:7b:47:
         4b:30:08:9c:57:80:fb:bf:8e:f9:b0:45:d5:81:41:3a:ca:64:
         05:81:47:a6:90:af:00:50:b0:b6:4f:e6:6f:b7:f5:23:73:80:
         7b:87:c4:47:57:db:93:49:e7:b2:3c:64:79:e5:12:a9:da:10:
         8e:62:0a:8f:bb:cd:fb:b4:60:3d:c3:88:8e:0d:29:61:08:11:
         2f:c4:82:a0:b7:cc:32:de:e6:49:f8:a9:6f:18:b8:c7:63:ce:
         12:9c:08:26:1d:14:1c:dd:90:27:8d:70:e9:66:d9:2e:78:7c:
         b6:cb:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:59 2026 by rpki-client