Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File:                     PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier:          ecr6zxT4EvZ8O8+2+nCA+GtSAuLlSfYXjNM/5wVOcws=
Subject key identifier:   47:6D:BE:62:E9:EC:7F:53:63:04:01:D1:48:A9:95:2D:DC:42:8B:D3
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer:       /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial:       09DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number:          09AE
Signing time:             Sat 04 Apr 2026 19:50:25 +0000
Manifest this update:     Sat 04 Apr 2026 19:50:24 +0000
Manifest next update:     Sat 11 Apr 2026 19:50:24 +0000
Files and hashes:         1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: hKEl8Jwkxpl0vgai7RL5sVv/voF5j6OKEL7cuVbNjzg=)
                          2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: yPQ68Wi4BYWR2BigdVLY6aIZpd03CRX9NxKeTmERqZc=)
                          3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: PxIP/jXK2VGNJ4cEOD340rrzNHlKanWqUrz7QZmA3+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
                          rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525 (0x9dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Validity
            Not Before: Apr  4 19:50:24 2026 GMT
            Not After : Apr 11 19:50:24 2026 GMT
        Subject: CN=69d16b81-077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:11:0e:da:12:19:25:6c:89:e9:21:e5:1f:
                    74:cc:7b:0e:a6:7a:37:5c:d2:bf:45:87:67:19:fb:
                    49:3a:32:74:df:a0:48:ed:48:35:b7:df:ac:13:76:
                    50:d5:8a:31:5b:29:27:50:9d:ca:2f:51:1b:cf:e3:
                    40:33:63:c9:20:f0:c0:2d:eb:f7:fb:89:c4:2e:23:
                    f4:95:7a:ab:14:f0:db:62:b3:b1:d3:ab:a0:b7:a6:
                    e0:d3:c9:68:96:bf:85:2f:4d:35:84:73:ae:8f:46:
                    ec:3a:36:da:6b:fb:62:6e:7e:7d:c7:15:47:c4:df:
                    91:fa:d3:ac:78:e4:1c:02:81:02:c2:42:57:3d:b1:
                    f1:5d:a0:22:36:6b:ba:82:02:e5:6a:14:42:19:d1:
                    53:13:11:d8:a7:4c:90:24:30:09:8f:18:f6:4c:42:
                    e9:9c:6f:af:ff:45:d7:ec:60:1d:b8:70:54:55:df:
                    78:7c:b5:90:f6:6a:c5:e9:7c:99:98:1a:07:18:7d:
                    3a:1f:03:45:66:86:08:94:ca:bc:8c:f3:b5:c8:b6:
                    22:fd:38:6a:9f:a8:e0:6d:06:da:74:6d:11:df:2f:
                    84:d0:4c:fe:b7:07:6b:49:ae:88:10:48:18:0d:2c:
                    42:3f:89:7f:1b:64:0c:a9:79:5c:a3:67:9e:d9:79:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6D:BE:62:E9:EC:7F:53:63:04:01:D1:48:A9:95:2D:DC:42:8B:D3
            X509v3 Authority Key Identifier:
                keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:75:b0:02:01:3f:7a:a2:b0:bb:e5:04:ae:f9:43:60:f7:0a:
         8d:a6:ff:87:f8:b5:53:a9:63:7d:2a:fd:9c:c4:b7:26:da:fa:
         78:14:6f:a4:f9:99:b4:43:cb:a5:13:db:bc:02:25:0d:aa:b2:
         a6:50:9b:b3:89:19:08:37:61:39:3c:4e:87:f4:7a:23:f6:da:
         47:01:47:2e:3a:1a:2d:14:b1:12:93:a2:6b:51:d8:05:0e:2c:
         ff:c0:7a:21:3b:4a:79:c1:9c:68:1b:e6:cf:75:43:bd:e8:ef:
         1c:1f:3f:30:c3:c9:b4:c8:cd:dd:c2:59:fb:cd:41:0c:46:c5:
         06:ed:09:56:40:50:9e:be:2c:56:20:2e:ff:d7:ea:03:3f:67:
         cd:0a:11:19:a6:de:fa:aa:74:7a:c0:91:92:d3:c4:c3:14:ad:
         cb:fb:48:94:a5:d2:83:d9:e1:90:b4:df:9f:5e:a8:c6:f2:f8:
         2e:71:09:ec:3b:8d:c4:04:76:3c:6d:66:a0:13:56:34:5b:2a:
         1c:08:b9:44:e2:d2:c7:f8:33:77:a8:f2:3a:d2:b3:a9:00:ff:
         a8:ef:c6:54:2b:56:36:c8:c0:a7:df:49:f8:18:4f:c5:32:ce:
         d2:a0:4c:27:f0:25:12:4f:a8:08:aa:b1:94:8d:f1:0e:c2:0a:
         11:76:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:01 2026 by rpki-client