Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
File:                     pv84Girr6m3M_g3mXUGWBAJx_pQ.mft (raw, json)
Hash identifier:          k2NzxNMEk+z6kHVpPw4gzx8/XV9DfpAkzZTcXs5Xu2s=
Subject key identifier:   07:92:13:CB:A1:B0:7B:EC:30:C8:C7:A7:A5:DE:0A:35:55:22:B7:26
Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94
Certificate issuer:       /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
Certificate serial:       0BCF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
Manifest number:          0BAC
Signing time:             Sat 28 Mar 2026 18:55:39 +0000
Manifest this update:     Sat 28 Mar 2026 18:55:39 +0000
Manifest next update:     Sat 04 Apr 2026 18:55:39 +0000
Files and hashes:         1: pv84Girr6m3M_g3mXUGWBAJx_pQ.crl (hash: agSXJ8RpyBOlxTV1366G2QfRk88ITp6H7R39MEUyYAU=)
                          2: 1DC0E5BC419811EAA268D964C4F9AE02.roa (hash: 2YRxMG7YO0sA77A0UNRyYRbSzxsD+ZJ1u+28GJUZh2M=)
                          3: 1E7D7344419811EAA268D964C4F9AE02.roa (hash: Hk8MYeDrcTehISfWRW8h+pEubI0TX43br5gNDb2uf6w=)
                          4: 1FC6B062419811EAA268D964C4F9AE02.roa (hash: hpHKLBPP8wI8/Ci6WbVWhmTT7Wqg4z+ABMYaCRqkCvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 18:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3023 (0xbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94
        Validity
            Not Before: Mar 28 18:55:39 2026 GMT
            Not After : Apr  4 18:55:39 2026 GMT
        Subject: CN=69c8242b-491d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:0a:87:ad:d7:26:6a:31:29:36:51:db:dc:
                    0c:13:28:0a:1e:df:bb:29:78:66:0a:89:50:49:09:
                    10:4c:7d:33:04:12:4d:31:08:bb:61:0c:d3:af:63:
                    dc:08:19:4a:18:96:0e:fc:c4:b8:2c:18:5e:75:20:
                    98:da:8d:6b:46:90:0e:dc:89:38:f9:58:f9:32:d4:
                    ac:7e:0d:5f:19:0e:e4:ca:89:92:e9:48:3f:af:35:
                    24:87:1c:6e:88:83:04:e9:26:c8:d5:1a:8b:4a:8d:
                    81:ae:b6:ab:96:84:06:ca:f2:42:26:85:b2:ce:cd:
                    ed:ac:6a:c4:71:a5:d9:1c:24:e5:70:9e:1c:ff:11:
                    97:11:87:9c:13:5d:0f:fc:5e:d9:07:59:b2:a9:36:
                    17:e1:c8:8d:b7:94:f2:eb:2e:4a:c2:70:53:f8:29:
                    29:ef:d4:c3:03:d6:cd:88:8d:86:dc:65:fa:c5:ab:
                    7d:6c:e8:cc:24:12:97:5a:0e:f6:0b:62:82:50:29:
                    eb:56:38:f8:95:eb:61:6b:47:b9:b8:d0:fa:d3:6b:
                    5b:d6:92:78:7e:89:6c:1f:98:b2:37:08:7c:22:d4:
                    31:aa:05:31:85:90:79:52:02:b4:7d:62:fd:5c:b7:
                    2f:89:9e:35:2d:db:a9:ab:c2:20:5f:c0:99:a7:05:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:92:13:CB:A1:B0:7B:EC:30:C8:C7:A7:A5:DE:0A:35:55:22:B7:26
            X509v3 Authority Key Identifier:
                keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:f3:18:79:f1:dd:3e:3f:23:df:b8:93:a8:f4:6c:af:6b:
         e2:88:99:67:fb:d2:f8:54:5e:53:65:9c:d7:5b:d6:b2:4e:62:
         ec:77:7d:93:21:dd:86:b0:3c:e8:7e:7c:9a:3b:47:d9:00:ab:
         01:2a:b8:d0:c7:ec:30:df:6d:8e:3d:0e:59:02:11:12:83:10:
         7c:68:f1:03:85:2e:eb:e2:cd:37:a1:e3:19:8b:72:2f:e1:63:
         e3:8c:42:14:21:7e:e2:a5:4d:4d:59:ba:d4:ac:16:60:4c:e2:
         92:6f:b0:54:44:02:c0:29:10:ec:8a:5f:df:c0:d7:10:42:83:
         86:a3:8c:4a:bc:ca:99:ae:2b:b4:73:d9:50:12:58:6a:37:3a:
         79:65:c3:37:9e:c7:80:ec:61:bf:ca:76:a6:29:56:62:cd:0d:
         f8:36:61:6c:8b:45:69:b9:4a:39:0a:a7:7b:a9:a6:90:5d:1b:
         85:32:ab:68:a0:a9:ea:5b:f2:9f:78:9f:7f:b5:ef:6f:cf:78:
         9b:21:8d:45:01:11:e4:a7:98:98:36:d2:53:d4:35:d6:e1:f2:
         e4:b6:88:08:15:31:f0:fc:63:4a:6b:16:01:7c:97:80:55:df:
         b6:a4:d6:ef:df:f1:c1:96:56:54:a7:9b:89:22:e9:c4:97:b6:
         12:27:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:44:04 2026 by rpki-client