Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File:                     pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier:          c0rda3OJqxRDM+0JYBA9r8HK1m2cf+79TNw8oyITX0g=
Subject key identifier:   12:3B:5B:15:21:AF:52:7A:0A:89:BD:4C:98:CE:32:8E:35:1E:77:BD
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       121C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number:          1200
Signing time:             Wed 20 May 2026 17:09:28 +0000
Manifest this update:     Wed 20 May 2026 17:09:28 +0000
Manifest next update:     Wed 27 May 2026 17:09:28 +0000
Files and hashes:         1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: SCf9e/fqkD3EOYPc/1hSAva7Vg5LMrYs146Hziw2+K0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4636 (0x121c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: May 20 17:09:28 2026 GMT
            Not After : May 27 17:09:28 2026 GMT
        Subject: CN=6a0deac8-65d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:52:3e:15:a8:61:38:ea:6e:80:b7:b8:b1:
                    62:da:2c:ae:00:f2:23:a7:17:98:18:74:b5:63:49:
                    33:b5:fd:bb:f2:30:4f:b4:0f:6b:fd:cb:9f:6a:1e:
                    46:08:13:2f:15:76:54:13:34:52:10:61:93:7d:52:
                    7d:5c:14:dc:21:12:ce:fd:d6:e7:1a:97:b0:32:4d:
                    45:da:4c:2b:6e:48:1f:17:95:99:06:4c:43:14:8c:
                    48:25:7a:e1:e3:cb:7d:3a:0e:4a:ec:b5:2c:a4:12:
                    8e:09:97:47:36:2e:c3:5e:07:df:ba:a2:9d:dd:b3:
                    4b:73:2e:af:8c:3b:19:b1:63:02:3a:74:36:1a:f7:
                    22:2c:e4:0f:7b:64:2f:8f:13:7c:76:9d:39:ed:14:
                    e8:92:6a:a1:62:ec:92:3b:2c:5f:b0:2e:ad:e3:b1:
                    63:ea:7e:0c:17:02:76:14:33:d4:3b:8b:95:8c:46:
                    3f:7a:21:5f:6c:cd:27:88:1b:4f:3f:4d:ff:2f:d6:
                    64:ed:a2:bb:b4:e3:b7:58:52:19:9e:9d:58:15:18:
                    21:ac:9f:52:4d:20:36:d6:b6:5c:7b:14:80:60:01:
                    ca:04:bf:a0:c9:b3:2d:c7:b8:a2:b3:13:6b:4c:72:
                    1d:3a:33:19:79:9e:d4:ff:da:cf:e0:14:0a:69:3b:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:5B:15:21:AF:52:7A:0A:89:BD:4C:98:CE:32:8E:35:1E:77:BD
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:87:cd:1a:3b:6d:16:88:9a:1d:1e:f3:50:de:a2:c0:48:61:
         6b:65:a2:a3:4b:1c:b1:21:74:f5:44:cb:dc:bd:ae:8d:fe:ad:
         86:e7:67:8d:42:1e:da:bc:23:c2:00:04:05:9a:e1:17:ea:36:
         c8:31:2b:0a:5e:38:aa:77:81:9f:ec:5f:30:b8:9e:9e:c4:56:
         0f:56:97:f4:ea:45:00:c2:d7:f3:71:ad:f1:f0:69:e4:65:f7:
         bc:32:20:f0:32:8b:c4:6d:2a:fb:d7:12:37:ef:02:5a:22:91:
         a8:64:f0:10:19:3f:d9:91:dc:91:ee:3c:e9:58:56:b7:a3:12:
         80:69:3a:f5:95:5b:d7:d0:b2:e8:01:86:41:55:3b:f8:3a:10:
         e3:a5:11:f1:7b:24:3b:cb:5b:76:f1:30:05:8d:32:37:e9:79:
         b4:8d:57:3c:a2:97:e5:8f:3c:58:09:68:ad:c0:f5:08:48:76:
         0e:85:89:4a:0b:59:06:96:99:90:5e:93:29:94:5a:73:92:e5:
         25:76:37:0d:4f:fa:bc:60:aa:ba:af:4b:cf:07:c0:ec:a3:db:
         48:22:3c:18:8a:08:57:79:b1:0b:fd:1c:dc:c3:18:87:18:ce:
         26:32:c3:92:e8:d3:0b:18:bb:83:15:a3:c3:35:60:37:5e:8f:
         24:66:22:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE
MjdDMkIwMkMwHhcNMjYwNTIwMTcwOTI4WhcNMjYwNTI3MTcwOTI4WjAYMRYwFAYD
VQQDEw02YTBkZWFjOC02NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13BSPhWoYTjqboC3uLFi2iyuAPIjpxeYGHS1Y0kztf278jBPtA9r/cufah5G
CBMvFXZUEzRSEGGTfVJ9XBTcIRLO/dbnGpewMk1F2kwrbkgfF5WZBkxDFIxIJXrh
48t9Og5K7LUspBKOCZdHNi7DXgffuqKd3bNLcy6vjDsZsWMCOnQ2GvciLOQPe2Qv
jxN8dp057RTokmqhYuySOyxfsC6t47Fj6n4MFwJ2FDPUO4uVjEY/eiFfbM0niBtP
P03/L9Zk7aK7tOO3WFIZnp1YFRghrJ9STSA21rZcexSAYAHKBL+gybMtx7iisxNr
THIdOjMZeZ7U/9rP4BQKaTtNVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBI7WxUh
r1J6Com9TJjOMo41Hne9MB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB
MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp
NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaYfNGjttFoiaHR7zUN6iwEhha2Wio0scsSF09UTL3L2ujf6thudnjUIe2rwj
wgAEBZrhF+o2yDErCl44qneBn+xfMLiensRWD1aX9OpFAMLX83Gt8fBp5GX3vDIg
8DKLxG0q+9cSN+8CWiKRqGTwEBk/2ZHcke486VhWt6MSgGk69ZVb19Cy6AGGQVU7
+DoQ46UR8XskO8tbdvEwBY0yN+l5tI1XPKKX5Y88WAlorcD1CEh2DoWJSgtZBpaZ
kF6TKZRac5LlJXY3DU/6vGCquq9LzwfA7KPbSCI8GIoIV3mxC/0c3MMYhxjOJjLD
kujTCxi7gxWjwzVgN16PJGYiTg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:13 2026 by rpki-client