Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File:                     PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier:          CLDAE1LX72oJm7nSQC17mLYA3Xfe84uitloUQMoQ4B0=
Subject key identifier:   55:B6:5B:45:D3:3F:D4:F7:0F:8C:BD:94:3F:E6:0B:A6:E3:A9:C7:3A
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer:       /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number:          011B
Signing time:             Sun 05 Apr 2026 05:15:45 +0000
Manifest this update:     Sun 05 Apr 2026 05:15:44 +0000
Manifest next update:     Sun 12 Apr 2026 05:15:44 +0000
Files and hashes:         1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: ooDC4/xmKNCss/2Cgpxk8NGASP08vmjr6rTer9MyVrs=)
                          2: 02B9688489EF11F0850AA959C4F9AE02.roa (hash: g6Ap4btn5Dr6jvAfzwN9O4vlhSQj8j0AjLOLHcxiHRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
                          rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
        Validity
            Not Before: Apr  5 05:15:44 2026 GMT
            Not After : Apr 12 05:15:44 2026 GMT
        Subject: CN=69d1f001-ac04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:ad:f4:f6:8e:e0:e7:29:a3:d9:fe:eb:0f:
                    8b:26:99:bb:32:62:ee:f1:aa:4e:96:1b:74:78:dc:
                    16:d3:c4:4d:1c:1a:a7:dd:6c:09:f2:26:e0:c8:24:
                    15:a1:90:3b:10:10:c5:5f:9c:de:6a:cf:e0:25:99:
                    75:95:4b:cd:3e:59:b6:90:05:c5:6a:e9:05:0e:9d:
                    f5:94:3b:78:0d:b5:6e:9f:c9:a7:b2:e5:1f:21:40:
                    9a:ce:0c:cc:98:e7:14:0a:b9:60:93:36:0c:f8:9e:
                    76:23:77:1c:ca:81:fd:64:4b:ed:17:64:97:c6:2b:
                    5d:18:f0:f1:85:81:7e:3c:ee:c8:10:bf:03:99:76:
                    e6:78:3b:be:bc:e5:96:69:13:f5:f6:31:fd:d0:d7:
                    d4:8f:4c:13:30:bd:92:11:9d:9e:62:4b:9d:5a:36:
                    1a:7f:54:35:41:7e:a0:0a:55:c1:28:a6:b5:85:cf:
                    df:57:a5:80:3e:48:cd:6d:d3:32:9f:df:44:b9:5d:
                    5f:2f:62:cc:78:e1:62:73:ab:28:22:90:d7:3a:cc:
                    72:65:bc:25:4b:d2:7b:bb:45:27:ab:53:80:3b:0f:
                    15:56:26:2b:69:24:2f:fc:89:1d:20:c5:26:b0:bc:
                    61:7d:0f:d5:85:fd:b4:b5:47:82:b8:a0:0d:6a:4a:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:5B:45:D3:3F:D4:F7:0F:8C:BD:94:3F:E6:0B:A6:E3:A9:C7:3A
            X509v3 Authority Key Identifier:
                keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:48:e6:ad:84:ce:5a:dc:3f:2f:96:ee:07:df:42:dc:a3:
         aa:0d:bf:9b:de:12:5a:bd:15:4a:5c:0f:b0:da:1c:42:26:eb:
         f0:3f:a3:03:15:53:eb:77:99:0a:24:b0:11:ae:f4:c4:12:9e:
         27:7c:10:9b:c4:5e:35:3c:06:12:b8:86:e9:3e:27:d7:ad:a1:
         7c:f2:76:fe:de:d8:5d:a9:7c:5c:d6:22:2a:18:33:04:36:87:
         5a:93:5e:2b:4c:94:d6:f7:d8:6d:9e:3a:c0:0d:a7:83:47:7e:
         b6:55:41:a7:a2:fc:23:0c:81:48:8e:20:8a:eb:38:53:61:a8:
         ba:9b:2a:c0:ad:d9:be:4c:d0:78:3c:d2:db:d3:dd:9d:aa:33:
         e0:11:8d:be:28:3e:cb:75:32:d1:87:b8:d1:14:ef:85:39:39:
         79:c6:c5:57:de:53:68:b0:fa:f5:9a:58:17:b5:bb:ff:33:5e:
         64:45:e7:db:12:d4:ab:ac:89:a1:21:c4:58:3e:ea:83:f5:59:
         1d:9b:db:6b:3d:3d:47:17:d1:7c:31:16:2d:9c:c3:20:6a:ff:
         9c:11:5d:ef:6b:ed:99:4d:6d:30:da:dd:c1:d3:2b:48:85:42:
         83:84:2d:95:6f:07:9e:45:37:df:1a:2a:0f:8d:06:6e:df:94:
         7b:1c:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:02 2026 by rpki-client