Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
File:                     pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json)
Hash identifier:          T4cG+2JkoMUW5HinIURn5mHr+Ux95kUzqw7qvfMYqzs=
Subject key identifier:   D4:B7:34:8A:10:F4:46:CF:D9:35:47:9B:2D:5A:2F:16:51:53:B0:B2
Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Certificate issuer:       /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
Manifest number:          0111
Signing time:             Fri 13 Mar 2026 04:57:29 +0000
Manifest this update:     Fri 13 Mar 2026 04:57:29 +0000
Manifest next update:     Fri 20 Mar 2026 04:57:29 +0000
Files and hashes:         1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: lp/f/Wz+OKYYsTbrN20P4gdrEB0B1G0zSB7/mtvDPis=)
                          2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=)
                          3: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
        Validity
            Not Before: Mar 13 04:57:29 2026 GMT
            Not After : Mar 20 04:57:29 2026 GMT
        Subject: CN=69b39939-ad44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7b:6c:d6:8c:63:4c:48:72:44:16:1a:0d:62:
                    6b:d8:c8:42:7a:47:d5:01:57:f6:fe:47:1c:92:24:
                    88:c5:de:0b:c3:6c:e2:05:0e:89:6e:63:af:6b:11:
                    4d:1f:27:82:22:de:79:b1:c0:0f:ad:66:5e:d3:46:
                    b0:75:d5:08:c2:0d:0a:29:3d:a7:32:55:9a:16:90:
                    4f:04:9a:63:39:be:c1:7b:7a:37:61:b0:22:9a:62:
                    e6:b7:16:57:bc:0e:12:ed:34:b9:f3:4c:26:f9:67:
                    a0:fe:c6:43:9f:94:0d:e9:55:aa:eb:52:64:54:b2:
                    0b:07:05:99:1f:9e:97:4b:64:dd:40:ac:fa:47:6d:
                    a4:a7:45:e9:f1:95:5e:d7:d1:db:aa:f6:e6:35:9d:
                    55:0c:62:68:fd:d4:c5:87:31:12:1a:b1:b3:36:11:
                    25:3a:cf:08:65:89:c9:09:71:df:8c:fa:55:4c:b4:
                    d0:7d:a8:05:7c:05:61:aa:e4:fd:e4:64:ef:78:f8:
                    d9:90:2a:f3:e9:35:e8:d6:37:8f:04:f5:31:a2:14:
                    17:f5:4a:11:40:d4:38:74:b6:81:f8:3d:97:ee:52:
                    06:89:e3:35:1a:79:cc:73:7c:eb:65:45:91:c6:5f:
                    cc:80:ad:9d:0f:90:ff:25:d8:56:29:a8:ed:0e:5d:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B7:34:8A:10:F4:46:CF:D9:35:47:9B:2D:5A:2F:16:51:53:B0:B2
            X509v3 Authority Key Identifier:
                keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:4a:8e:93:93:e1:97:c8:ac:72:32:9d:1c:16:31:b4:ba:
         39:d7:a7:d1:99:48:99:35:24:2e:ac:54:16:b7:82:b2:22:0c:
         fd:1c:a6:e6:0f:6c:31:b0:75:47:fd:e5:aa:bf:72:f0:62:37:
         e1:91:b3:7b:f0:2b:93:84:ba:ad:28:80:bb:9d:e8:70:c9:f0:
         3a:49:1c:d4:cf:76:3b:5f:4e:12:9f:53:b4:6d:ba:8f:e1:2d:
         37:c1:04:62:59:63:62:e0:a8:e5:13:ab:4d:f0:6f:6d:77:6d:
         27:7d:a7:3e:21:a8:49:b0:8b:a9:1b:7d:85:a3:fa:90:59:3d:
         ce:2e:58:bc:c3:ec:ab:67:08:d4:6b:fa:79:c0:a8:a1:8e:22:
         ec:61:c3:a0:c4:76:c5:f9:f5:54:30:87:86:4e:3f:ff:f4:16:
         c3:fe:b4:aa:f4:c2:e8:06:f7:61:54:4e:41:a9:9a:ed:cd:02:
         fe:d1:12:9c:fd:ec:88:bd:c1:74:89:7f:ea:c0:34:e3:f7:26:
         73:e1:d5:c1:54:53:17:25:7b:c0:a7:44:45:04:07:28:0f:81:
         be:e3:77:fc:69:78:4b:44:bd:06:0e:6c:15:2a:cf:3d:c9:41:
         ac:e2:ab:da:01:b5:3d:61:7f:56:39:0e:f0:e7:52:6b:44:ab:
         94:65:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:41:05 2026 by rpki-client