Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
File:                     pTZ74UJBVZweuH0NXqPuxZPtz-w.mft (raw, json)
Hash identifier:          SNrypIsBLyAAGbskAZSa8Yq00rkoGM/wyl+Ma9+u9h0=
Subject key identifier:   B3:5E:5D:44:C2:43:B1:57:BD:E7:61:C6:EE:5C:81:6E:8D:65:97:06
Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC
Certificate issuer:       /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
Manifest number:          3533
Signing time:             Sat 04 Apr 2026 14:40:51 +0000
Manifest this update:     Sat 04 Apr 2026 14:40:50 +0000
Manifest next update:     Sat 11 Apr 2026 14:40:50 +0000
Files and hashes:         1: pTZ74UJBVZweuH0NXqPuxZPtz-w.crl (hash: dodaO/BgUJ9r5Ci0nSswn13hKlWCQQg259evNy/TrvY=)
                          2: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (hash: XRI5mHaTfsQ5P4tZOTRljrYvxsKQSjEVMe5uuC/lXuc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl
                          rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC
        Validity
            Not Before: Apr  4 14:40:50 2026 GMT
            Not After : Apr 11 14:40:50 2026 GMT
        Subject: CN=69d122f2-421c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:2e:d8:fc:d1:7b:47:08:4c:63:47:b5:05:
                    db:0c:e2:16:89:0d:7c:2f:d8:65:b2:a2:a6:89:62:
                    23:08:63:f1:94:3a:ca:15:1f:a1:44:c0:14:0a:ca:
                    75:41:99:7a:c7:79:ae:59:c1:75:12:c0:74:84:a0:
                    1a:7c:2f:58:b6:cf:8d:38:ae:bf:99:67:72:37:13:
                    9e:f0:d0:77:63:9c:dd:2e:2d:29:e7:83:a7:df:f4:
                    c6:fb:f3:97:a9:69:dc:7e:06:4a:0a:26:fe:e7:3f:
                    f5:5f:c6:50:19:84:af:05:76:c5:c1:d0:79:77:1e:
                    18:05:3f:38:29:6c:2d:d1:76:7e:40:fa:97:a1:66:
                    2f:16:be:3b:29:14:a3:b9:b0:3a:ef:a3:ee:0b:8a:
                    bd:5f:49:d6:e4:ba:58:57:c2:8f:1d:5b:53:68:0f:
                    38:ad:0c:1c:af:7f:07:e0:10:72:5d:64:77:51:64:
                    fb:57:16:0c:24:cf:92:4c:f2:b8:4d:a6:89:e0:74:
                    32:ae:b8:ff:72:e2:e9:82:3c:10:48:2f:6f:c8:5e:
                    ac:b4:76:90:da:67:d3:ad:59:77:99:24:8b:2d:a3:
                    26:58:ec:79:79:a8:38:77:59:2f:73:ad:ae:7f:73:
                    ce:c5:1f:87:fb:05:4b:16:65:53:f3:d7:8d:e2:ec:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:5D:44:C2:43:B1:57:BD:E7:61:C6:EE:5C:81:6E:8D:65:97:06
            X509v3 Authority Key Identifier:
                keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:19:d0:01:de:33:72:23:67:ca:96:9e:39:b1:29:2f:34:
         b0:3f:e6:86:93:fd:be:a1:71:75:37:82:0e:25:4f:43:d3:59:
         2a:2f:cc:2a:e0:2a:0d:71:c1:2b:a6:8d:d7:bc:9b:24:e5:7f:
         6a:13:79:f1:54:dd:5e:69:2c:06:db:46:a6:6f:61:ef:6b:1f:
         49:af:f2:26:9d:80:7d:c6:48:9b:e3:bc:77:e8:70:e1:23:f9:
         68:f8:34:3e:30:d0:41:71:d5:b6:4c:97:c9:dd:b0:f8:f6:eb:
         fc:03:e2:98:66:a5:bf:2f:30:16:09:fe:84:af:49:c5:84:c4:
         87:1d:fd:5b:c4:fc:c8:e1:ce:d1:23:f6:74:9d:c8:98:b3:85:
         4c:20:2e:55:3f:a3:c8:54:97:db:09:f1:1f:ac:30:56:40:e6:
         45:9e:3c:b6:b8:94:e9:7d:d9:a9:f5:e5:ad:e7:10:15:07:7c:
         69:10:e4:99:d3:c1:c5:25:ab:3c:e4:d0:c6:ef:82:bb:5a:fd:
         8c:a2:c1:69:68:4f:17:c8:1c:43:b4:59:5a:c0:20:be:84:a2:
         cb:b6:6d:ef:56:3f:7b:50:82:a8:fc:28:68:6d:4e:e1:fa:73:
         44:59:50:b6:81:f5:7b:6d:a2:22:0f:67:df:f1:8c:6a:ec:7a:
         ab:78:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:44 2026 by rpki-client