Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          s3fbnOiZ75CKTf/c+gyRUkvIlQim6XWJzFJdmZamw/Q=
Subject key identifier:   A1:13:59:C7:44:C7:11:97:A0:3F:6C:C7:6F:71:1A:18:C2:7B:28:8B
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          0805
Signing time:             Sat 04 Apr 2026 21:00:10 +0000
Manifest this update:     Sat 04 Apr 2026 21:00:10 +0000
Manifest next update:     Sat 11 Apr 2026 21:00:10 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: 3rXdM5PIKiMgheuqK0KqxjCRlZOJIzuJ9CSivxSw2kc=)
                          2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
                          3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: Apr  4 21:00:10 2026 GMT
            Not After : Apr 11 21:00:10 2026 GMT
        Subject: CN=69d17bda-f1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:7c:1b:d9:29:7e:08:ef:76:b6:d8:85:54:
                    e4:ae:2d:06:9b:8b:86:b3:d6:5f:be:67:c7:3f:40:
                    cc:98:a3:5f:be:e6:04:d6:8f:f2:59:d7:31:0a:f9:
                    c3:04:c7:b5:d8:34:4b:64:10:25:f5:c6:24:dd:be:
                    49:48:84:6a:0c:8c:79:31:8f:b9:52:bd:ef:67:08:
                    b6:28:04:06:8a:cb:ef:89:10:77:b8:90:53:2c:50:
                    a3:e8:86:42:2b:c5:bd:9d:d1:07:e1:99:d0:29:09:
                    6e:dd:97:2b:8e:2a:ac:be:34:21:1f:db:ba:4d:ae:
                    e1:63:6c:e7:99:41:3c:85:f0:0f:ce:b9:8f:92:2a:
                    f9:e4:5f:af:01:c8:4d:34:d3:99:88:d0:a5:98:4d:
                    44:48:d1:5a:35:ff:4c:05:7a:e5:bf:b3:ca:86:06:
                    ba:38:d9:01:a6:e6:4c:01:53:71:92:a6:28:24:0c:
                    a8:dc:3b:84:74:ff:15:b8:3d:0f:a2:ba:d8:f8:a5:
                    46:ca:82:c8:10:c2:4a:fa:fd:b7:23:a6:11:47:07:
                    b8:5b:0f:0e:41:02:94:28:5d:f5:d6:6d:5a:ab:84:
                    78:ba:87:c2:fe:c4:0c:1b:f0:17:a8:e1:96:3a:bd:
                    13:85:83:25:96:86:29:d6:8d:51:5b:33:89:8f:25:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:13:59:C7:44:C7:11:97:A0:3F:6C:C7:6F:71:1A:18:C2:7B:28:8B
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:cf:e0:2b:8e:7d:ba:22:85:a5:d6:d8:1a:88:42:ed:60:
         cb:bb:5b:57:bb:c1:e8:d5:0c:f0:93:fd:4a:88:7a:46:3e:e0:
         47:b7:af:af:fa:45:74:65:1d:63:3a:61:cc:1e:7f:7c:d1:06:
         3e:c1:48:b6:df:62:90:7b:bf:08:35:9e:b0:79:09:dd:59:a3:
         76:f9:dd:95:c8:f9:74:cf:36:72:87:e0:ce:3d:de:82:44:5b:
         0e:1b:16:34:28:14:ac:8f:37:ad:e1:c3:f8:96:35:ab:95:84:
         77:3f:9b:c7:2b:ad:0d:e9:eb:d5:f4:8e:ce:8d:86:96:31:63:
         f7:3f:d2:b7:9b:4c:44:1c:e8:67:2f:c6:7f:f5:64:94:5b:8b:
         47:22:da:6c:98:2f:b2:75:8d:51:48:fd:53:db:8a:05:13:fc:
         35:16:c4:57:96:ce:ca:0e:0b:a3:3f:3b:44:19:79:d5:8b:88:
         78:d1:2e:4c:b1:ee:1b:5b:81:21:b3:00:ee:48:59:30:98:d1:
         e7:e7:b6:c1:56:58:a8:43:48:55:63:0c:c1:60:34:f5:cf:3c:
         51:91:38:79:21:c2:b1:99:68:a8:99:83:5c:d3:a1:3e:12:7c:
         ef:9b:f2:a1:8f:f4:34:26:67:00:21:a8:f5:dc:f9:a2:a3:7a:
         b3:a3:9d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:36 2026 by rpki-client