Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
File:                     pZmI7E1t1bpqMPhmUatWLBimo04.mft (raw, json)
Hash identifier:          kgNxZENxB2wQvt0lrrQC+Y7VQx3aIQJ3zUbPLVVSVQk=
Subject key identifier:   DD:A2:E3:28:C5:57:78:E5:A8:79:44:F1:E5:C6:76:20:4F:19:EF:9E
Authority key identifier: A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E
Certificate issuer:       /CN=A9143FF5/serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
Certificate serial:       057D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
Manifest number:          0575
Signing time:             Sat 04 Apr 2026 23:05:08 +0000
Manifest this update:     Sat 04 Apr 2026 23:05:08 +0000
Manifest next update:     Sat 11 Apr 2026 23:05:08 +0000
Files and hashes:         1: pZmI7E1t1bpqMPhmUatWLBimo04.crl (hash: jVZ4MX530JXG1UNs5Hlymyqpr9BYHLqgqwe4OmLygwc=)
                          2: A027E062300911ECAE581534C4F9AE02.roa (hash: XCRNe+IjMfdiRFsViU2603VxuIrA3a9k3c/heY8WZhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl
                          rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FF5, serialNumber=A59988EC4D6DD5BA6A30F86651AB562C18A6A34E
        Validity
            Not Before: Apr  4 23:05:08 2026 GMT
            Not After : Apr 11 23:05:08 2026 GMT
        Subject: CN=69d19924-9f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:1c:d9:7b:9f:8f:02:bf:0f:4c:98:14:ab:
                    87:24:ad:ab:aa:67:98:87:1f:88:70:55:ee:69:ad:
                    75:93:12:57:10:b8:b0:17:5f:bf:d7:5c:c2:67:a9:
                    c0:1a:de:9a:04:74:bd:0a:f3:be:db:21:20:11:2f:
                    e4:2d:f6:1c:45:59:c8:e8:ed:fb:a9:4f:60:3e:30:
                    6a:b6:a2:bf:39:3a:a4:10:de:d0:4c:e0:60:1a:61:
                    da:56:98:50:cd:62:bf:90:4f:4d:ef:8c:97:1b:a6:
                    0a:cf:68:3b:df:9c:bc:b4:68:53:92:dc:f7:16:16:
                    0f:13:16:93:14:04:6b:0f:90:ce:43:24:3d:bb:ec:
                    39:70:b4:fa:84:8a:ab:e0:d7:2c:ea:1a:68:c2:2b:
                    94:1d:12:72:1a:86:d0:c6:54:1c:2b:f7:93:42:ac:
                    48:ca:62:2e:9e:c5:0f:36:d8:48:c3:9d:86:f2:a4:
                    f5:77:70:a5:e1:72:99:57:35:c0:ab:96:fd:00:4e:
                    6c:20:f1:45:24:33:0b:21:e0:05:74:f1:d3:80:52:
                    81:26:53:53:49:ba:b9:40:90:15:3c:73:62:0f:6f:
                    87:30:cf:bc:4a:71:a6:6a:84:7f:10:ac:3b:08:9f:
                    8c:49:0b:62:22:6d:e5:f4:04:c2:e7:31:13:ef:67:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:E3:28:C5:57:78:E5:A8:79:44:F1:E5:C6:76:20:4F:19:EF:9E
            X509v3 Authority Key Identifier:
                keyid:A5:99:88:EC:4D:6D:D5:BA:6A:30:F8:66:51:AB:56:2C:18:A6:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZmI7E1t1bpqMPhmUatWLBimo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FF5/013969B4201C11EC8A173C2CC4F9AE02/pZmI7E1t1bpqMPhmUatWLBimo04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:59:c8:4f:fe:f4:c4:6e:d4:83:70:4c:2e:15:01:a6:58:
         5a:41:bc:11:65:90:1f:1f:75:21:93:42:a7:7a:ec:be:b6:55:
         bc:c5:15:68:7e:4d:e2:d8:44:08:b4:ed:86:5e:1f:e7:32:b4:
         92:2c:55:e7:c4:0b:85:bd:0b:09:1c:95:2c:5f:7f:98:14:3d:
         ac:ca:2b:63:46:52:ae:f7:94:b7:9e:2c:8a:a5:dc:b9:61:1f:
         d0:e0:42:72:31:9a:20:49:de:81:71:0f:35:9e:54:02:70:5c:
         28:68:6a:25:4e:0d:6c:da:6a:4d:0f:14:e0:d6:01:8c:2c:bc:
         47:6d:13:71:36:33:67:0d:16:14:f2:c5:ca:dd:84:bf:81:48:
         50:e5:16:d0:d6:1f:ae:75:d0:b1:ac:73:cd:51:5c:27:48:07:
         32:28:e3:c9:8c:53:c9:0d:36:a7:e5:a8:5a:91:c3:f6:b6:c0:
         4d:d6:8a:d3:9d:5b:d2:da:84:70:e0:33:3c:84:65:e3:0b:98:
         92:03:21:92:e9:1b:a6:00:f6:d4:c3:7b:5c:27:dc:2d:49:ed:
         af:15:b3:8f:77:78:e7:42:eb:b6:36:37:f1:08:eb:e3:1c:0f:
         cf:b0:47:5c:50:77:6c:e8:5b:b9:f1:73:75:3b:3c:e0:4b:ba:
         e3:e7:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:39 2026 by rpki-client