Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
File:                     pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json)
Hash identifier:          OmvIdNrlykZjoiW4duKeDQUNPpkY/JmLbV0JqEiosAw=
Subject key identifier:   1E:E1:74:D9:E2:04:60:F9:1D:57:3D:2F:8F:55:1F:C4:3F:F6:9A:F7
Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28
Certificate issuer:       /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
Certificate serial:       0940
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
Manifest number:          092F
Signing time:             Sat 04 Apr 2026 20:00:41 +0000
Manifest this update:     Sat 04 Apr 2026 20:00:41 +0000
Manifest next update:     Sat 11 Apr 2026 20:00:41 +0000
Files and hashes:         1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: V2AgIz0h+ll3h+bLGzhcMKs46Tn1C0IuUNl7E3UrdkY=)
                          2: D41A51DE20C311F197B90590083D8C67.roa (hash: dKPEHvEXlheUH6KmSU9/eB38o9t5KYQIp5NmXFvQZKk=)
                          3: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: q9LAdQP4pbK6C2KkR/sjb3Jr08te9azMTAwrksN5OUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl
                          rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368 (0x940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28
        Validity
            Not Before: Apr  4 20:00:41 2026 GMT
            Not After : Apr 11 20:00:41 2026 GMT
        Subject: CN=69d16de9-6cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:5f:0d:e5:f6:94:ca:4d:ca:1f:e4:d2:86:
                    b2:f1:7f:14:a5:5f:3c:64:ea:39:5b:2c:c5:93:6b:
                    52:d6:f8:ad:9f:00:f8:e3:7e:ca:34:80:54:4d:54:
                    52:ad:12:71:d2:32:55:c5:8e:14:90:2c:ed:30:ab:
                    65:43:f4:d2:6c:92:0b:36:a8:64:c0:b3:80:2f:0f:
                    4c:77:95:84:c5:14:5d:7a:ad:0c:e4:68:75:7e:46:
                    4e:2a:cb:94:b9:d2:ba:e5:3d:0f:7d:9d:74:29:b1:
                    a5:57:f6:a7:69:41:65:24:d9:d3:2e:0e:3c:43:b7:
                    82:cc:72:80:86:22:70:56:de:81:34:10:da:86:af:
                    3b:4a:44:f8:f1:62:af:f0:c0:4f:08:b9:8e:38:a7:
                    7e:e9:62:c8:b8:d3:8c:6a:ca:87:bc:b9:58:4b:cc:
                    49:62:1e:e9:f4:d2:78:fe:bc:dd:e2:33:19:9f:f2:
                    da:ce:8b:8a:d8:97:85:10:e2:71:91:bf:48:fe:8f:
                    1c:f6:37:82:06:e2:2b:fd:97:cb:c4:1c:5c:89:97:
                    cb:ca:3d:c7:a5:34:41:fa:57:50:70:0a:bd:ad:af:
                    d5:73:ca:a7:03:85:93:ad:7d:35:d7:dc:14:a5:fb:
                    65:62:07:fc:43:80:d9:27:a0:1f:62:4d:56:9e:58:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:74:D9:E2:04:60:F9:1D:57:3D:2F:8F:55:1F:C4:3F:F6:9A:F7
            X509v3 Authority Key Identifier:
                keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:58:a9:e8:5d:c4:28:df:b9:dd:c1:d2:17:27:ad:9b:ad:
         4f:55:ec:1b:89:0d:b5:4b:83:03:a2:89:a5:0a:04:9b:36:39:
         b7:84:c3:75:ca:c7:1a:93:cc:ec:45:e0:43:fe:1b:0a:cb:7e:
         9b:c0:45:6b:c7:20:0e:a0:79:ed:9d:2a:cb:99:92:55:36:92:
         b8:e5:b4:32:e1:3c:eb:97:e2:b7:1d:9c:22:f5:51:af:00:18:
         2d:c0:cf:7c:ae:92:12:86:05:5d:ef:e3:84:cc:98:49:52:85:
         f9:08:7f:fc:90:58:c5:ac:5d:a8:9c:9b:41:c2:28:16:ff:e9:
         98:16:22:27:56:7c:82:c9:7d:76:da:49:39:1f:fd:77:7b:40:
         67:40:4b:e0:50:90:42:04:c7:82:71:0e:5e:1f:9f:55:cd:f5:
         17:56:d4:e5:2a:7a:b3:07:40:d0:91:d3:82:aa:4c:19:7d:f8:
         02:7a:7f:a5:76:16:b5:d8:fa:c9:55:3f:cc:46:44:6b:47:45:
         1c:5e:b8:68:c5:83:14:db:79:e9:37:36:d7:41:47:6d:04:e4:
         28:d8:0b:1b:bb:34:64:29:5e:52:1f:5e:16:d3:08:c6:05:8b:
         78:18:51:f1:e3:cc:1c:cb:7b:b1:54:12:70:f5:2d:ec:09:e9:
         88:a5:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:26 2026 by rpki-client