Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File:                     pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier:          mBxd1rlTY+NtzELWfEyIqrPcvqvKzy9v0lMyEiK7hV0=
Subject key identifier:   40:22:7A:61:B1:35:88:67:3B:5F:26:1B:76:62:4E:D9:C9:B0:45:60
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer:       /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial:       03BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number:          03B3
Signing time:             Sun 05 Apr 2026 00:28:18 +0000
Manifest this update:     Sun 05 Apr 2026 00:28:18 +0000
Manifest next update:     Sun 12 Apr 2026 00:28:18 +0000
Files and hashes:         1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: rGMFYBapIFxNSfElvpw1Cnn3o/NDyIgzOMPe4tLeWfU=)
                          2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: 4C5vaV8XTy4jKNN6jrtdqFgnURjoJYHwa1sm4fkGiqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
        Validity
            Not Before: Apr  5 00:28:18 2026 GMT
            Not After : Apr 12 00:28:18 2026 GMT
        Subject: CN=69d1aca2-3d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:6b:29:37:2f:4f:a6:6f:13:0a:4e:f2:03:
                    74:4d:73:b2:b4:86:b1:3e:4f:c7:3d:a5:7c:84:8a:
                    f6:d5:fa:79:6d:2b:63:6b:30:24:8d:3e:79:3a:37:
                    1c:cf:ac:cc:05:a1:ba:4a:00:07:f8:d4:75:7c:05:
                    40:d8:ec:13:65:04:31:3d:ec:5f:2b:7c:5e:18:cb:
                    34:9a:6d:e0:e7:28:4e:5b:42:d2:d6:7d:2d:d3:8c:
                    b6:6c:91:5a:30:32:a9:01:04:56:49:a7:31:9a:2d:
                    21:bc:d0:fe:42:4e:8b:d3:81:2c:5f:d2:c9:a2:c9:
                    97:a2:6b:4d:91:7f:02:9f:ae:2b:3c:2e:7c:dc:f6:
                    5a:4d:e6:02:ab:79:54:ee:ed:31:04:c9:26:f1:94:
                    8b:59:0b:97:65:88:fc:03:a4:eb:ee:cb:5d:c1:e8:
                    92:d9:52:34:d4:eb:4a:15:0c:c1:42:ff:56:12:26:
                    f2:e9:f9:eb:78:6b:6b:c5:c8:6d:fa:92:eb:ea:0c:
                    5f:5f:e7:b7:25:21:39:7c:e1:2b:73:1d:9b:bd:08:
                    dd:35:2d:3a:5f:fb:9d:de:0d:bc:a9:29:e2:49:aa:
                    79:0a:4f:74:ce:78:4c:a1:b0:8a:a9:ca:87:c5:4e:
                    6a:1d:6c:bd:d8:e9:21:80:6b:70:ab:37:d9:a9:0e:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:22:7A:61:B1:35:88:67:3B:5F:26:1B:76:62:4E:D9:C9:B0:45:60
            X509v3 Authority Key Identifier:
                keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:26:ed:fb:73:44:80:7f:25:b6:7f:ac:e3:7f:4f:a6:20:8e:
         4b:52:57:4e:2a:9d:07:fe:cf:92:e1:ef:4b:31:cd:7a:3e:3b:
         d8:9b:e6:d4:1b:a2:12:66:df:71:a2:50:51:12:76:5e:7d:60:
         0e:49:1c:bf:4d:86:c3:d8:dc:2f:6e:b0:14:71:72:3c:ce:4b:
         b9:39:8a:5b:71:8f:fc:a3:e3:0c:55:11:82:01:2c:30:19:a6:
         48:3e:b3:1f:48:77:ad:72:37:6d:af:37:55:c4:86:e3:a8:53:
         c4:84:d6:01:2d:3f:57:77:97:4f:8c:0d:83:91:55:30:92:1e:
         47:ac:5f:70:1a:93:fd:bc:7e:6a:8a:2f:cb:4f:85:a8:b4:73:
         93:38:ae:27:46:91:6b:f3:41:09:2e:cf:57:a8:db:9e:b9:0d:
         f6:e6:d0:90:b3:3d:b6:e3:37:ce:f2:18:85:79:e1:c8:d4:df:
         57:0f:30:20:3f:02:5f:d6:5a:29:79:70:ea:b0:3c:f5:b0:f2:
         dd:40:bc:60:f2:2a:be:54:64:c6:ca:21:e7:73:ff:b3:b5:7f:
         5d:99:79:51:8f:1a:ef:12:b4:f7:05:96:e6:2f:c4:b6:13:26:
         72:ef:a4:38:31:1e:98:10:8e:8c:07:25:87:cd:a1:96:a4:24:
         de:25:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:11 2026 by rpki-client