Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File:                     PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier:          +QJxcq2U4LloNEeskQZ5WC2i06iz2yi6sYYxiFkLJWQ=
Subject key identifier:   50:64:49:39:06:EF:09:AB:1B:58:38:80:B7:50:26:69:CD:A4:0A:04
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       0422
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number:          0412
Signing time:             Sun 05 Apr 2026 00:11:43 +0000
Manifest this update:     Sun 05 Apr 2026 00:11:43 +0000
Manifest next update:     Sun 12 Apr 2026 00:11:43 +0000
Files and hashes:         1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: orox4I1X0eUJDgvy745yIfUPrNP9WQSTZh5EaWzmTZ4=)
                          2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: z2OhdPMwGARwsygkXKL5+seQhn3qhypW7aqEbjuQNjw=)
                          3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: UqMTyedDOgPXx2/ApOobJtWh/Yn3PViSxGTlstMiJvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: Apr  5 00:11:43 2026 GMT
            Not After : Apr 12 00:11:43 2026 GMT
        Subject: CN=69d1a8bf-e5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:cb:fc:87:4b:f4:61:89:5f:3f:26:76:19:
                    1f:65:16:35:19:04:91:a5:b2:ad:7b:15:37:ae:3e:
                    5f:3d:6b:c3:a0:69:bd:12:01:3c:ce:5d:1e:4d:66:
                    e4:90:4b:a1:d7:91:83:56:76:48:e1:b4:3d:7c:ae:
                    3d:32:72:c2:b5:07:a1:a6:ef:1c:8a:5b:c3:73:ea:
                    cc:f3:3f:4e:39:60:e2:e4:ca:5a:e2:93:7b:51:8c:
                    b9:8b:07:ed:49:10:30:b5:27:9c:5b:13:3d:68:aa:
                    9b:13:fd:50:44:ad:a9:8c:e6:24:82:c7:72:4e:28:
                    9d:a1:3f:c4:8d:4d:23:2f:db:67:fd:63:8a:a3:ed:
                    c2:d4:fd:8b:5d:5e:eb:23:a7:a3:9c:17:d9:43:01:
                    52:2e:96:9f:4d:3b:41:84:24:e3:13:74:a7:d6:c2:
                    ba:f4:71:8e:1c:25:b1:51:95:f6:2e:bb:8a:b0:e6:
                    8a:78:9f:d6:e7:d1:a9:9a:bd:44:7a:d4:78:d7:84:
                    06:66:1c:5c:33:d7:03:fd:c8:a3:e3:2d:fa:4c:47:
                    7d:82:d1:c6:46:d3:0d:e0:2a:92:53:a3:7e:5e:8e:
                    50:01:13:68:4a:da:71:a8:0c:54:02:60:14:5f:0a:
                    ef:81:1a:60:c0:42:65:0e:15:52:f9:9a:d9:dc:cd:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:64:49:39:06:EF:09:AB:1B:58:38:80:B7:50:26:69:CD:A4:0A:04
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:df:a3:b5:e0:84:13:63:2d:96:fe:81:ef:12:5c:26:b4:ed:
         aa:13:9d:4f:19:03:f3:23:05:c4:84:e1:8f:be:a3:3b:50:c7:
         f7:1c:20:f2:f4:af:03:1c:a6:77:cb:55:81:df:4e:28:21:30:
         e9:63:94:bb:25:91:23:f9:b5:d8:c6:8f:07:37:d5:f8:df:89:
         86:8c:05:ab:c1:61:9a:83:1f:27:f8:b8:92:24:c3:bf:c7:de:
         3f:74:c9:72:d9:ba:7f:db:5f:f1:33:04:cf:6d:98:cb:d0:23:
         cc:85:c8:38:c5:ee:42:73:a9:27:e9:e8:94:18:8d:55:f7:63:
         b7:0d:4d:a5:be:57:6d:ec:dd:08:c5:ee:02:24:db:94:dd:43:
         f8:6c:68:e8:28:c6:09:48:6f:21:26:99:d8:12:9f:fd:6d:b6:
         77:3b:7c:b1:ce:a8:09:f3:19:4a:65:0e:15:c8:78:c2:d7:ae:
         3c:4f:23:5d:63:d6:2b:ac:44:1c:aa:22:37:64:17:9a:97:cd:
         a5:64:55:90:0a:39:a7:00:fd:db:52:81:0d:4f:48:cf:4a:a4:
         d8:96:27:29:53:11:5c:29:6b:01:c6:0f:23:13:de:7f:71:2f:
         22:71:98:e1:74:52:5b:64:7b:da:48:fd:38:ad:46:92:bd:12:
         84:0a:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:27 2026 by rpki-client