Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
File:                     PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json)
Hash identifier:          Z50ecz0Y00+RYcpiPoltRvuVjPFruHuJ00JqYhPnaFA=
Subject key identifier:   EF:13:B0:FA:C6:EA:D0:9D:6D:19:38:12:EB:96:91:F2:D4:6C:87:07
Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19
Certificate issuer:       /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
Manifest number:          01A5
Signing time:             Sun 05 Apr 2026 03:36:36 +0000
Manifest this update:     Sun 05 Apr 2026 03:36:36 +0000
Manifest next update:     Sun 12 Apr 2026 03:36:36 +0000
Files and hashes:         1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: TfUAKXz5TlHrMASn5k6ZfGc0uS4uuGzlB6rioAeCeb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19
        Validity
            Not Before: Apr  5 03:36:36 2026 GMT
            Not After : Apr 12 03:36:36 2026 GMT
        Subject: CN=69d1d8c4-034e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:4f:76:50:99:54:ff:a5:69:83:11:ce:73:
                    64:54:60:48:8a:a9:a5:33:0b:6a:22:5a:33:8f:ea:
                    fe:22:45:73:68:8f:56:35:75:9a:ca:96:57:6b:68:
                    a1:07:6e:a1:20:db:86:44:e3:73:18:51:a5:a7:45:
                    19:36:69:b1:23:47:08:b6:b1:5a:27:29:56:3d:c3:
                    5a:80:cf:06:37:31:c7:80:7e:8e:21:7f:5a:32:13:
                    fa:81:b1:00:4a:3c:66:61:95:05:72:79:67:8c:e4:
                    ab:8b:fa:e2:66:33:37:f0:0c:09:c7:00:bd:72:4e:
                    67:47:62:33:32:91:54:6b:36:56:50:31:7d:e9:d1:
                    34:ed:6a:14:e6:f3:8a:f7:6a:93:27:40:e0:e9:02:
                    ba:eb:a0:b9:58:af:50:af:ee:41:b8:b4:e8:8f:84:
                    09:05:33:d5:17:be:71:65:9b:ac:da:69:10:58:13:
                    31:82:f6:21:b9:17:84:4d:45:cd:bc:e5:86:74:13:
                    45:19:c3:f5:9b:87:57:31:b4:12:80:cb:51:2e:6a:
                    2c:c7:b2:80:41:ab:46:0a:e4:95:de:91:24:39:ec:
                    e0:65:67:d8:3e:49:22:2d:86:a3:b6:30:2c:0f:15:
                    de:c5:ca:f2:ab:a9:c0:af:9a:65:d6:74:fb:73:6e:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:B0:FA:C6:EA:D0:9D:6D:19:38:12:EB:96:91:F2:D4:6C:87:07
            X509v3 Authority Key Identifier:
                keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8a:01:d9:b6:b4:cf:f1:4e:37:a5:d8:99:c0:c7:e4:a2:99:
         d1:8b:ee:2d:69:53:8f:12:d1:43:65:59:f4:99:70:1c:6b:b7:
         c7:cd:66:7f:ac:4f:69:88:65:d8:0b:fc:ee:28:51:f0:57:af:
         c5:ba:ea:56:e9:a5:68:f6:f1:da:5b:78:b3:e2:10:1e:7e:9a:
         92:7b:58:a0:2d:52:20:db:72:e7:89:e6:a2:9e:d2:81:68:e4:
         46:96:51:ee:dd:e0:97:da:5d:e3:8e:d3:e4:01:37:b9:9a:30:
         d6:90:eb:f0:52:51:74:0c:72:ba:a0:91:47:8a:88:d0:2a:94:
         64:3c:6c:fd:4b:8b:73:bb:58:93:67:04:54:f7:37:49:b1:89:
         c1:a7:64:cf:3a:33:25:7f:56:a3:f3:35:5a:53:b1:d0:01:b2:
         ff:ad:5d:50:78:00:3b:33:44:89:1d:7d:2e:1a:44:19:7b:83:
         ec:72:23:64:17:57:77:dc:b3:aa:66:8f:c6:1f:fe:da:e8:03:
         b3:fe:f9:13:4f:58:29:64:4c:3a:53:64:57:92:ed:50:eb:26:
         79:cf:38:70:de:c0:fd:71:a7:a7:d7:c2:44:82:ca:09:de:fd:
         6e:c0:51:ba:76:23:06:e0:da:29:45:39:f8:68:30:fc:80:c2:
         3a:ab:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:49 2026 by rpki-client