Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
File:                     PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json)
Hash identifier:          H+WaHgXCxIJ158S0FnpywZjreoCxT2Ykb3QNbIWpYcw=
Subject key identifier:   2E:3B:CE:2D:9C:E1:CD:FA:2B:71:83:4E:95:EC:DD:C9:7B:E4:0C:72
Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2
Certificate issuer:       /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
Manifest number:          BC
Signing time:             Sun 05 Apr 2026 06:22:16 +0000
Manifest this update:     Sun 05 Apr 2026 06:22:15 +0000
Manifest next update:     Sun 12 Apr 2026 06:22:15 +0000
Files and hashes:         1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: ciUBXbTxgqsmfZX9NmcNn27uXUNNmioUVDzgqBEyJwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl
                          rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2
        Validity
            Not Before: Apr  5 06:22:15 2026 GMT
            Not After : Apr 12 06:22:15 2026 GMT
        Subject: CN=69d1ff97-8008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:9c:c1:64:33:56:c9:75:db:b9:94:10:ff:
                    39:4b:1e:30:de:2f:f8:a2:4b:98:2a:f8:5e:41:01:
                    5b:ec:4a:ac:ce:9f:63:9e:6b:1b:9d:83:c5:3f:ec:
                    00:d5:a0:f6:57:6c:3d:d4:d8:eb:88:1a:e7:42:cb:
                    7d:cd:66:34:ed:b4:88:43:f1:72:46:21:21:c3:63:
                    96:72:b2:ae:79:4e:ca:d4:af:e5:16:24:41:f5:02:
                    2c:48:c7:f1:28:4e:b8:73:08:9e:fd:eb:7c:26:80:
                    06:d3:7a:02:26:db:ed:fd:e4:6e:9f:21:5e:4c:45:
                    00:e3:dc:ad:d9:ef:76:e7:23:0c:81:40:c8:d3:07:
                    82:6c:f5:dc:95:12:5c:b2:ff:a7:97:7b:86:3b:e7:
                    43:26:40:d5:92:31:09:c2:ce:54:76:a3:c1:cd:9a:
                    68:e7:bf:b7:2b:9b:1a:ca:27:d1:68:1c:cc:b8:b7:
                    d2:bc:7c:23:ca:2b:a8:5f:ee:4d:ae:7f:bf:48:ac:
                    ee:f4:6f:08:c1:ab:bf:af:06:d5:06:a5:bb:3d:3f:
                    2b:1d:1c:26:df:56:28:11:c0:59:0f:0c:72:2d:2b:
                    31:94:3d:84:9d:8a:54:98:97:3d:0e:23:22:78:e5:
                    5b:c5:47:ce:a6:4c:ea:02:a5:af:fd:51:fb:48:30:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:CE:2D:9C:E1:CD:FA:2B:71:83:4E:95:EC:DD:C9:7B:E4:0C:72
            X509v3 Authority Key Identifier:
                keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:b1:9b:47:fc:dc:96:52:af:3b:78:76:2b:13:50:49:ec:c8:
         40:e5:7c:99:14:a5:d7:74:bb:90:31:bb:03:16:06:ef:c0:c4:
         e7:22:c2:f8:e0:1b:34:d1:a2:8a:5f:5a:30:f6:b3:1e:fa:5a:
         22:c6:ef:32:06:fe:8b:4b:59:ac:ba:d8:a0:ff:83:1d:e8:d6:
         dd:e3:3a:79:c5:25:04:de:a3:06:7c:b3:54:2f:6b:c8:8e:69:
         d2:e3:9f:91:30:53:5c:3d:f4:29:e2:a6:fe:d4:f8:62:8f:6c:
         d0:96:d4:d1:3e:f7:7b:14:5f:11:1a:c9:25:c6:e9:a4:6a:1f:
         21:c1:b9:f9:3d:c0:9f:5a:a2:d3:89:ee:12:4d:d3:af:0d:d8:
         af:fc:b7:12:01:83:c8:be:e4:98:8a:c5:13:15:30:bb:31:7f:
         6b:41:06:1d:43:01:7c:96:eb:1c:93:ba:ca:ae:fa:1b:a7:1a:
         33:93:c9:a0:58:66:2f:c1:09:6b:f5:7c:96:c9:90:37:a1:6b:
         68:53:89:32:3c:73:aa:ad:94:04:6b:f5:ac:08:55:5d:ad:0d:
         96:a2:c5:0e:05:04:4b:aa:b7:27:9f:98:8d:59:90:42:5b:2b:
         5b:47:df:f8:4c:8d:a1:ea:fe:23:6b:97:25:42:62:86:e2:f6:
         0a:46:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client