Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
File:                     pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json)
Hash identifier:          uowVJaImWbwmoWheuHs+TGIP8t70fWw67qcOeiSgoYU=
Subject key identifier:   6D:9D:FC:92:F9:5B:D1:FB:C8:D0:A9:2C:A7:0D:84:DD:46:F1:E9:71
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       1204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
Manifest number:          11E8
Signing time:             Sat 04 Apr 2026 17:03:36 +0000
Manifest this update:     Sat 04 Apr 2026 17:03:35 +0000
Manifest next update:     Sat 11 Apr 2026 17:03:35 +0000
Files and hashes:         1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: OU/IBYKjmUIG//Q5niJaPTCCcJVrXep88P1to8Oyvx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4612 (0x1204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: Apr  4 17:03:35 2026 GMT
            Not After : Apr 11 17:03:35 2026 GMT
        Subject: CN=69d14468-f872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2e:5e:e1:97:94:c7:c7:ed:2b:68:0e:57:ab:
                    60:48:d3:76:a0:67:77:ea:a2:fc:7d:33:66:26:b7:
                    f3:b4:39:f8:4c:08:bd:c5:b6:9f:23:84:cf:e2:88:
                    47:af:31:22:41:bb:b2:31:e2:0e:8f:d9:8c:df:76:
                    c0:2f:b7:bb:34:0b:1f:8e:a5:0e:a7:f3:ef:a3:dd:
                    f6:78:7d:3f:e8:f1:68:cd:aa:1c:23:c3:1b:f5:78:
                    33:3b:16:8b:2b:15:67:49:32:9d:48:2b:84:20:94:
                    8c:db:99:dd:65:77:3d:c7:9d:16:e6:95:f8:cc:a3:
                    98:7d:b2:a3:35:eb:23:ca:9a:6a:0b:74:4b:72:39:
                    6f:b8:15:6e:df:69:97:5d:e9:6c:0e:5d:19:5c:6e:
                    d2:0a:ca:f0:ad:49:b8:e6:7d:4b:65:7b:fc:e7:80:
                    49:f8:5b:cc:9b:9d:7f:d6:27:58:2e:c8:83:19:94:
                    51:b3:7c:50:4d:47:0c:43:be:b6:77:c1:88:57:53:
                    d3:f6:89:5f:4b:fb:19:01:9d:fc:00:23:45:52:69:
                    c8:7a:92:e4:55:c0:bf:2d:1c:fe:6d:0d:f4:bd:d6:
                    8e:b7:1c:e8:e8:31:e8:a8:b4:8c:ab:4c:19:d3:c5:
                    08:d2:bc:49:3f:17:72:95:66:27:32:d8:23:a1:be:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:FC:92:F9:5B:D1:FB:C8:D0:A9:2C:A7:0D:84:DD:46:F1:E9:71
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:de:47:3b:4c:65:4a:a1:4b:49:a4:aa:82:24:94:d0:fe:0a:
         05:0c:f4:a4:ef:b0:26:83:92:bb:da:47:c4:c8:92:98:87:a2:
         15:d0:99:91:2a:43:ed:a6:a1:94:43:c7:a1:f5:f9:08:51:52:
         e8:40:60:84:e1:c0:09:a1:51:37:96:20:2e:a4:9e:d0:c7:b1:
         dc:12:34:37:3b:bb:b9:78:5b:e2:63:16:fc:2f:31:21:d8:e7:
         b3:bc:d5:b2:e3:0f:04:90:8b:b4:3b:e6:ba:ea:7e:0e:a8:9b:
         32:46:e1:92:eb:3e:4d:0a:fe:2a:62:aa:ea:d3:a2:06:5c:d1:
         dc:37:d6:35:c3:7c:2a:91:02:d0:99:6f:20:c1:91:45:31:a0:
         16:76:f8:a0:fe:f6:37:76:25:6c:a8:c3:fb:7a:64:cf:94:59:
         ba:4a:2d:52:03:23:78:a1:30:47:e3:73:f0:1c:05:57:e4:47:
         21:a9:17:56:90:6b:9a:7e:cd:ba:ed:cd:cc:a6:49:89:74:c6:
         a1:a8:02:c9:70:3f:48:16:a8:14:28:db:06:ae:0b:1a:90:8d:
         7d:7e:96:0b:4b:c5:1e:77:62:16:51:cf:63:5b:e1:3c:f3:44:
         aa:a2:e7:30:7c:6b:8e:d3:84:53:a5:b9:f6:d9:8a:cb:c6:85:
         84:bd:30:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE
MjdDMkIwMkMwHhcNMjYwNDA0MTcwMzM1WhcNMjYwNDExMTcwMzM1WjAYMRYwFAYD
VQQDEw02OWQxNDQ2OC1mODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjC5e4ZeUx8ftK2gOV6tgSNN2oGd36qL8fTNmJrfztDn4TAi9xbafI4TP4ohH
rzEiQbuyMeIOj9mM33bAL7e7NAsfjqUOp/Pvo932eH0/6PFozaocI8Mb9XgzOxaL
KxVnSTKdSCuEIJSM25ndZXc9x50W5pX4zKOYfbKjNesjyppqC3RLcjlvuBVu32mX
XelsDl0ZXG7SCsrwrUm45n1LZXv854BJ+FvMm51/1idYLsiDGZRRs3xQTUcMQ762
d8GIV1PT9olfS/sZAZ38ACNFUmnIepLkVcC/LRz+bQ30vdaOtxzo6DHoqLSMq0wZ
08UI0rxJPxdylWYnMtgjob7P6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2d/JL5
W9H7yNCpLKcNhN1G8elxMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB
MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp
NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ95HO0xlSqFLSaSqgiSU0P4KBQz0pO+wJoOSu9pHxMiSmIeiFdCZkSpD7aah
lEPHofX5CFFS6EBghOHACaFRN5YgLqSe0Mex3BI0Nzu7uXhb4mMW/C8xIdjns7zV
suMPBJCLtDvmuup+DqibMkbhkus+TQr+KmKq6tOiBlzR3DfWNcN8KpEC0JlvIMGR
RTGgFnb4oP72N3YlbKjD+3pkz5RZukotUgMjeKEwR+Nz8BwFV+RHIakXVpBrmn7N
uu3NzKZJiXTGoagCyXA/SBaoFCjbBq4LGpCNfX6WC0vFHndiFlHPY1vhPPNEqqLn
MHxrjtOEU6W59tmKy8aFhL0wdg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:05 2026 by rpki-client