Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File:                     pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier:          TKfwdm6KLWq7xFclXpRb8MAlq/pKSowZ0vYQiNlMayw=
Subject key identifier:   57:00:89:25:53:90:A4:AD:38:7C:77:11:03:83:C4:0F:22:15:6D:2E
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer:       /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial:       08AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number:          2B98
Signing time:             Sat 04 Apr 2026 16:48:06 +0000
Manifest this update:     Sat 04 Apr 2026 16:48:05 +0000
Manifest next update:     Sat 11 Apr 2026 16:48:05 +0000
Files and hashes:         1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: rCYM7bQ3ZtAM4wFTEvMr4QPc4N/DMSazHRp3KzrvVwk=)
                          2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: mArjBsuPuC5Q3ZktuoIgTu/EDyCpSzqID2aSQCKZt6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
        Validity
            Not Before: Apr  4 16:48:05 2026 GMT
            Not After : Apr 11 16:48:05 2026 GMT
        Subject: CN=69d140c6-9237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:35:1e:c1:cb:fd:fd:c4:a6:09:d8:c0:97:
                    ff:45:05:63:06:53:fd:7e:7a:9e:e9:ba:42:9b:76:
                    78:da:60:b7:4d:09:e8:a4:4f:3a:d3:78:36:fa:2c:
                    99:b5:b1:88:9c:87:97:29:dd:1f:de:ec:72:61:93:
                    e0:c9:68:27:db:75:d7:29:5c:b3:3a:9c:0d:c4:03:
                    aa:39:80:a4:82:32:a9:f1:66:4c:4f:c7:17:8a:be:
                    d7:a0:62:33:3c:41:ad:49:2e:de:5f:39:c7:74:b5:
                    73:d7:c1:2f:eb:99:ba:1f:6f:d2:36:f1:b6:67:f6:
                    ba:06:fd:96:70:74:9b:ed:0c:ea:45:e6:db:af:c6:
                    24:fc:38:73:cc:ea:46:d6:77:d2:56:90:f9:e0:bc:
                    18:80:06:3c:e4:61:93:89:a6:62:9e:7c:12:0e:69:
                    0f:22:60:91:0e:c9:11:bd:ec:5b:d2:b2:80:62:78:
                    8a:27:3d:47:37:60:72:2b:dc:1c:fe:ba:c8:c0:68:
                    f7:a5:6e:e0:5e:e9:71:d1:b3:35:96:b3:b3:62:50:
                    ae:82:e4:f4:81:45:66:9d:97:e5:61:52:de:3b:5b:
                    d2:92:c6:b1:b7:c8:4d:75:d1:07:ba:67:69:04:b9:
                    b1:d7:c2:3f:d4:ce:e0:b3:38:96:75:5b:91:0e:2d:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:00:89:25:53:90:A4:AD:38:7C:77:11:03:83:C4:0F:22:15:6D:2E
            X509v3 Authority Key Identifier:
                keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:46:89:9c:5e:fc:d5:48:4c:3a:ee:22:dc:5e:d2:c8:40:43:
         7e:bd:ea:fb:ca:29:6e:9c:dd:4c:13:a9:0d:1a:8b:05:ef:f8:
         f3:83:b7:74:f2:a1:91:b1:81:df:ad:5e:72:d2:06:81:10:5c:
         16:e4:31:fd:7b:e2:82:6f:25:db:9f:85:c0:80:4c:14:25:84:
         ea:e1:6b:a7:8a:0b:fc:69:63:0e:95:7e:9e:1c:28:97:20:99:
         74:3c:46:23:8a:03:30:ca:a7:fe:0b:1d:6e:2c:df:88:6c:91:
         7e:a2:af:34:ec:7f:c6:26:8b:45:0b:d4:3d:ef:6b:65:b2:29:
         bb:33:b2:22:78:3b:a9:6d:48:64:40:87:89:97:63:f3:46:18:
         bd:cc:9b:0f:7f:ab:2f:46:20:22:20:5e:d8:6d:b0:1f:7d:1d:
         f4:58:40:db:eb:6f:68:56:1f:cf:6b:86:bc:d9:91:5c:d9:3c:
         dc:08:ea:d8:83:8f:8d:1c:dd:55:f3:ec:7c:b2:ce:74:50:ef:
         c5:dd:4c:84:46:6a:d8:2a:ad:73:74:40:be:06:a4:df:d1:67:
         ea:a4:a9:2f:90:54:a7:b0:41:9f:9e:ac:39:1d:09:a8:59:37:
         24:04:9f:1e:39:93:11:7e:13:22:69:fb:63:48:ae:87:0c:16:
         27:0b:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:25 2026 by rpki-client