Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
File:                     PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json)
Hash identifier:          Uf72lPKtmzsX9e80j46NIXvoeHQQ+76/ghg9p15Xk/0=
Subject key identifier:   61:3B:E1:CC:D2:D0:29:8D:0E:94:06:CB:EB:82:3B:47:BB:77:BF:4C
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       0580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
Manifest number:          055C
Signing time:             Sat 04 Apr 2026 23:15:10 +0000
Manifest this update:     Sat 04 Apr 2026 23:15:09 +0000
Manifest next update:     Sat 11 Apr 2026 23:15:09 +0000
Files and hashes:         1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: fRkxZbubkxhAxaRRVSuKmtWI0nR0pSXG5JGMwx9Pjv8=)
                          2: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: arq5+h3KHX6t5y5Zj2CBCAg4COLqYpvoHOLbprQdcjc=)
                          3: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: MgGvtEJxOhpocdjEABKQeXDE9AITBRXrKCKdxOChgec=)
                          4: EFFA034837D111EC9337B812C4F9AE02.roa (hash: N/0bVIyC0MPM6KEQ2d3ilkuUkeyn80eIzEQ24nUZdi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Apr  4 23:15:09 2026 GMT
            Not After : Apr 11 23:15:09 2026 GMT
        Subject: CN=69d19b7d-1583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:b9:d4:9f:4c:e1:27:9e:57:a3:93:32:46:
                    ce:ec:de:14:04:65:21:18:cc:29:fd:51:6c:c7:80:
                    93:7e:83:3c:51:87:5b:b2:f7:e2:f2:6b:11:f0:05:
                    b5:28:69:d5:b9:b4:28:5c:27:2f:0a:f1:70:4a:9e:
                    0a:da:b6:f5:54:b5:9f:db:b5:cb:a3:1a:40:f5:b1:
                    d0:46:aa:bc:ae:ae:81:b5:dd:99:3c:c4:30:7b:18:
                    7d:2c:74:f4:7f:e8:d6:8c:60:10:85:fe:bc:41:18:
                    97:42:24:af:ee:21:5a:56:05:7b:59:59:23:69:a2:
                    a5:63:cf:99:7a:8a:cb:7b:63:88:5f:62:68:a8:52:
                    b7:18:cd:27:60:dd:37:31:58:db:69:65:da:a2:9d:
                    78:53:a0:a3:e9:6d:68:9e:5c:4d:d7:df:c9:a8:0f:
                    18:6d:50:be:2a:4e:c1:a9:5b:32:3c:d9:50:47:da:
                    88:45:f6:09:b5:d6:0c:47:a0:0e:14:ee:98:47:a4:
                    53:18:63:e5:d2:ea:54:d3:df:8b:30:6f:1a:ff:fa:
                    09:6e:9d:b0:91:d9:48:da:e4:79:3e:f0:ff:78:cb:
                    80:ac:3c:17:c1:dc:40:d3:fa:fd:4e:d5:61:04:44:
                    af:6f:2e:00:6f:f7:be:9d:3a:6c:3a:36:95:72:a1:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:E1:CC:D2:D0:29:8D:0E:94:06:CB:EB:82:3B:47:BB:77:BF:4C
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:72:79:ce:95:2e:4e:b6:9a:ee:c8:96:23:29:7f:06:0c:49:
         c9:28:53:23:cc:d3:72:24:20:58:c4:fe:2b:e9:17:b7:86:ac:
         c7:67:07:1b:ef:6f:fa:da:a4:64:c1:73:0f:bd:0c:92:0f:e6:
         32:5d:74:1f:9f:a1:9e:6d:29:bb:55:9e:aa:48:4b:21:22:4e:
         5c:b9:15:ba:d5:ca:f2:8d:d1:7c:c0:63:e5:34:04:6a:76:9f:
         38:22:7f:42:04:96:c8:0d:59:18:8d:c0:67:e4:ce:db:a8:ae:
         13:e6:cc:dd:92:1a:9a:c7:49:45:93:e5:51:e9:0f:bf:6c:b9:
         dd:50:ff:60:ea:12:7b:48:03:be:fc:0c:bf:93:29:91:fa:2f:
         14:65:5b:27:6f:0d:f8:90:36:0b:c7:f7:29:e8:8b:dc:79:b6:
         3e:cc:68:00:85:43:b4:ce:43:4b:24:6b:97:fd:f3:36:e7:f2:
         92:f8:9e:9d:b0:6f:cc:6a:69:0d:46:98:14:46:6f:18:e7:b5:
         5e:f0:83:db:4c:b2:5a:ad:3a:5a:1e:15:77:6e:d2:c7:51:1f:
         03:3f:6e:84:b4:4e:90:cf:be:3f:c9:8b:ef:d7:32:8e:c9:88:
         af:aa:c7:c9:f5:ea:bb:1a:1b:e7:dc:92:30:f5:b3:4c:1a:d2:
         7b:0a:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:37:05 2026 by rpki-client