Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File:                     pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier:          cjDR/5a+PtcqCRgryk7Iqtg1BGQIZUEVuP3V+r5Eel0=
Subject key identifier:   83:85:0B:6A:18:E1:8E:3F:69:89:C8:F2:4D:70:AC:B5:33:5D:BC:06
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer:       /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial:       0C45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number:          0C3B
Signing time:             Sun 04 Oct 2026 18:48:46 +0000
Manifest this update:     Sun 04 Oct 2026 18:48:45 +0000
Manifest next update:     Sun 11 Oct 2026 18:48:45 +0000
Files and hashes:         1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: mqi88md960XDqXI9jjvQlSMnyl+m8BxCRqsRUKgxPIU=)
                          2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: SUySTCjdxnI+cxS2bLgTY8Om9FwHon+t3aXtW/eo6yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
                          rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3141 (0xc45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
        Validity
            Not Before: Oct  4 18:48:45 2026 GMT
            Not After : Oct 11 18:48:45 2026 GMT
        Subject: CN=6ac29f8e-c604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ae:6c:21:21:3f:19:f6:70:7a:7b:15:e4:67:
                    86:73:26:c1:d8:71:0a:da:bd:db:73:20:da:cc:d7:
                    19:20:fd:1a:25:6e:5e:05:8f:54:b3:56:db:db:72:
                    3e:30:69:44:66:32:0b:70:59:e4:5a:94:ce:f5:c0:
                    0f:5e:d3:12:d7:bf:62:37:e6:db:03:9c:7f:97:e4:
                    3b:a8:41:b5:a7:a7:ea:c0:a3:c2:c3:76:20:d2:03:
                    0f:c3:44:c8:45:42:33:e6:86:36:4f:d9:be:e0:65:
                    57:b4:2d:a5:b4:ce:02:46:81:f1:0b:ee:e2:e9:1c:
                    00:09:e2:74:fc:4f:cc:d6:c4:93:6c:ef:31:14:7e:
                    29:32:fc:b6:5f:c2:16:fa:a4:4e:b7:d0:d6:b9:17:
                    67:c4:bc:ec:d9:d2:84:30:5c:a3:b0:f6:cc:0c:a3:
                    ea:86:dc:29:1f:d1:cf:bf:f7:ec:00:31:97:26:fd:
                    78:0e:7e:88:e9:28:ca:00:dd:89:42:19:94:88:6e:
                    f7:dd:21:43:10:04:3c:83:a9:b2:cc:16:59:c1:93:
                    17:0b:7b:42:37:0a:83:11:86:c8:1a:23:d9:50:6e:
                    b6:c8:35:d2:a1:65:a4:1c:44:58:8f:3b:36:22:45:
                    5c:bd:1f:e9:0b:da:72:50:0a:b6:46:78:97:c8:e5:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:0B:6A:18:E1:8E:3F:69:89:C8:F2:4D:70:AC:B5:33:5D:BC:06
            X509v3 Authority Key Identifier:
                keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:47:78:5f:49:22:3e:0b:72:ea:21:43:61:54:92:a8:e2:
         67:e7:8f:ee:b1:12:9f:2b:d8:cb:38:90:e2:83:46:54:83:63:
         8f:c4:df:38:ec:2f:6a:cf:5b:21:b6:89:42:e0:91:af:9c:8a:
         e6:55:7e:49:eb:0f:87:80:be:7d:38:f0:d3:d2:72:27:1f:cb:
         4c:81:40:31:76:f1:3b:d9:5b:44:27:9e:73:eb:64:f1:78:10:
         44:51:35:45:04:6c:af:5f:46:83:e2:f9:2c:f6:ef:83:c6:4a:
         4e:45:52:56:4b:cf:7f:84:7b:40:bf:f2:6d:cd:81:46:26:c0:
         e6:4f:3e:83:33:66:f2:19:b6:e8:a4:39:a7:98:39:2f:31:9c:
         ad:7f:e1:c8:73:f0:20:2c:35:0f:7b:01:91:f4:7a:d0:e1:ed:
         89:1e:30:b6:1b:ef:b9:02:23:27:14:7d:f8:40:81:1e:7f:b5:
         75:3b:79:f7:d8:d3:96:e1:09:ee:b1:3f:f2:2b:5d:45:81:ef:
         97:99:86:95:d0:c3:85:72:bc:88:c5:01:31:81:ec:ca:a5:a2:
         bd:5d:cd:5c:2c:22:8c:f2:9b:3c:0d:c1:ed:1c:ed:84:78:94:
         e5:59:7e:02:3e:5f:0f:80:36:97:8b:82:d2:80:58:35:8b:d4:
         be:ed:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:49:28 2026 by rpki-client