Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File:                     pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier:          rlIWdnbMzlFDL7edmKp6NZVAQoM/w+N90x+HZgx9U1U=
Subject key identifier:   15:B0:D0:F6:B2:DC:58:7F:E9:68:DB:A1:13:01:D1:AB:B0:72:7E:3A
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer:       /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial:       0C1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number:          0C13
Signing time:             Wed 22 Jul 2026 19:07:37 +0000
Manifest this update:     Wed 22 Jul 2026 19:07:36 +0000
Manifest next update:     Wed 29 Jul 2026 19:07:36 +0000
Files and hashes:         1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: PlG147Vyyt/chfAKdqwN4fzQ0D73k8dn9InLRH5Qddc=)
                          2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: miF3Bd+XSLHucz0FC/5HkJ/vce5TslwDpsNS9Q4tZB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
                          rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
        Validity
            Not Before: Jul 22 19:07:36 2026 GMT
            Not After : Jul 29 19:07:36 2026 GMT
        Subject: CN=6a6114f8-bfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:44:02:37:c4:41:28:6a:f4:69:3d:47:b4:
                    47:18:51:0f:26:22:f4:96:9e:47:4b:d0:72:80:d7:
                    2b:78:71:1d:7c:3e:fb:7b:ee:49:8e:f8:cb:27:87:
                    8b:60:5c:16:ce:cf:74:ce:b3:3d:f2:d4:6c:5c:bd:
                    a1:24:39:35:7b:78:04:94:cb:07:c7:e9:75:0e:57:
                    9f:8c:88:f7:24:d0:59:82:2a:13:c7:a6:4a:5b:6c:
                    aa:7f:4d:62:03:9f:78:b4:56:7f:a8:28:d1:fd:d7:
                    c0:8c:2a:ba:e1:cd:39:6f:b1:5f:84:5f:5e:d8:e3:
                    d1:78:86:ca:b3:8b:23:cb:ca:55:99:9e:62:8b:fa:
                    28:fc:50:57:7a:34:8d:31:7d:ed:3b:af:bc:e0:e4:
                    2b:0d:51:8d:6b:b9:52:d4:cc:f2:1b:53:12:f0:ed:
                    77:df:8c:eb:a3:80:71:22:59:08:36:9c:c0:fb:26:
                    cf:a4:00:d8:c7:6f:02:9a:bb:13:53:53:86:63:2e:
                    25:88:11:c0:14:e1:c0:e0:05:5a:65:e5:c3:48:a2:
                    f8:a8:6c:bb:4c:1f:7b:f5:a9:16:9d:a2:51:91:1c:
                    a2:1e:68:ca:b3:5d:68:b5:3a:73:25:31:09:82:29:
                    9c:31:d7:9a:37:c8:e8:c1:01:be:75:33:75:88:fd:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:D0:F6:B2:DC:58:7F:E9:68:DB:A1:13:01:D1:AB:B0:72:7E:3A
            X509v3 Authority Key Identifier:
                keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:01:ae:34:b6:a7:f8:70:1e:92:58:4b:ad:fa:35:f4:64:
         53:d3:75:8f:cd:0f:24:a8:c2:b9:85:48:bd:65:2c:97:35:91:
         26:d3:d2:3c:50:3d:ad:7b:87:2e:88:0f:85:ad:2c:f3:7c:3b:
         c1:6b:65:94:75:88:0e:70:75:93:24:11:ba:27:cc:44:37:10:
         8f:3b:ca:7a:7f:1d:54:97:3a:b6:d9:19:65:c3:48:c5:0f:7b:
         66:4b:d9:86:0c:07:cf:71:00:b5:66:c0:d7:93:b7:43:31:1c:
         d5:da:e3:9f:4f:98:b1:0a:f0:a6:2b:43:f8:43:ed:9a:43:ab:
         54:0a:65:fd:92:2c:54:b6:68:35:6a:e6:6f:0e:c4:a1:7c:a5:
         e1:ee:bb:96:dd:c8:90:ea:3c:c9:13:2d:2c:aa:64:21:c0:34:
         bb:14:0a:79:66:c8:7f:39:79:e9:3c:56:0b:87:27:b8:5e:0c:
         a7:cd:64:9f:67:6d:96:45:4b:2c:06:0e:e4:a5:02:4d:f2:15:
         84:75:13:10:f0:d1:03:c1:fe:17:7a:fc:1d:21:84:42:62:38:
         ab:02:2d:da:64:70:35:75:14:64:f5:2f:77:8a:86:b4:a2:f4:
         0c:af:62:37:6f:a2:6b:69:8f:95:db:01:8a:48:4f:0b:5b:00:
         07:34:b5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:24 2026 by rpki-client