Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
File:                     piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json)
Hash identifier:          XAK8DzdywIseANQQE5dzZUdYJ8pzlo8zNf8gteuuCJE=
Subject key identifier:   E5:10:E2:30:EE:03:06:0C:FC:11:EE:1E:8C:A4:4F:C2:4A:0B:D0:D3
Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Certificate issuer:       /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Certificate serial:       0169
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
Manifest number:          01A8
Signing time:             Wed 23 Sep 2026 04:57:50 +0000
Manifest this update:     Wed 23 Sep 2026 04:57:49 +0000
Manifest next update:     Wed 30 Sep 2026 04:57:49 +0000
Files and hashes:         1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: JSXdTGIPWNKSQzueWsEXwcLHaZGLFDEp/mKw+FPp+6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 361 (0x169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
        Validity
            Not Before: Sep 23 04:57:49 2026 GMT
            Not After : Sep 30 04:57:49 2026 GMT
        Subject: CN=6ab35c4e-fb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:5b:69:cf:97:23:65:85:5c:bc:02:17:9a:
                    b0:fe:08:17:a5:8e:cf:eb:53:7a:7e:9e:cc:31:f8:
                    d2:ea:c9:ff:1f:7a:de:42:ff:43:b3:66:d2:49:50:
                    f8:31:44:1c:5b:3c:5d:4e:c8:51:f6:89:47:9b:b0:
                    a9:fc:ff:bd:8d:7c:aa:7a:53:47:9c:71:7f:80:b8:
                    c1:57:0b:af:fa:1e:f4:de:29:c7:db:cf:e9:45:94:
                    50:5a:f2:c1:3a:c5:b0:3c:2e:fd:e7:a3:18:51:61:
                    2d:9b:22:20:ca:58:5a:d4:b5:84:0d:dd:cf:da:a8:
                    9c:0f:ed:14:9b:de:58:6f:7e:a4:8e:1f:88:39:7f:
                    f2:80:80:9c:2f:25:6d:14:e5:c0:76:93:e0:28:f7:
                    d0:a2:0d:f7:c5:f6:57:7a:7c:af:c0:9a:e9:3a:bc:
                    9e:c5:36:69:73:93:80:79:4b:83:4d:9f:fe:7b:54:
                    ba:11:bf:e8:4f:1d:63:08:b2:10:91:c0:a3:d9:74:
                    6f:0c:7b:d0:a6:01:80:29:2e:19:39:fb:51:83:11:
                    01:e2:3a:99:be:61:bb:78:6f:b1:7e:01:8a:60:b1:
                    41:9f:10:89:d3:5d:11:4c:a5:e9:75:1a:3e:1c:bd:
                    53:f7:67:96:c3:27:d6:8e:38:00:65:b6:6f:0c:70:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:10:E2:30:EE:03:06:0C:FC:11:EE:1E:8C:A4:4F:C2:4A:0B:D0:D3
            X509v3 Authority Key Identifier:
                keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:0d:cf:35:3c:12:c8:8e:f8:6c:1f:1f:59:cc:93:15:be:
         25:9a:c6:07:a3:b4:81:a9:57:8f:71:ed:0e:11:44:78:d5:1e:
         b4:a4:8e:c7:4a:77:7e:f7:85:2b:fb:80:9e:a1:e2:a3:e7:96:
         42:3a:0c:9e:5b:ae:40:02:ac:8d:2f:1e:38:9d:6d:0b:6e:5b:
         31:df:7d:9d:f1:9f:49:4d:e0:c5:5f:6c:69:7d:7a:be:02:aa:
         2f:53:4b:6e:38:48:f4:69:90:18:3c:8d:1f:45:2a:ab:1e:14:
         3f:88:56:6d:ef:33:20:00:79:3c:cc:d2:5b:a7:94:f3:b1:d0:
         fb:68:e6:50:30:82:69:b2:98:a8:54:97:a4:e1:ca:3f:82:d0:
         f6:1e:b8:27:c9:54:75:ee:35:54:e2:0a:1c:9a:ba:fb:eb:95:
         f4:36:22:e6:3d:00:d4:44:a2:3a:e0:29:55:26:fd:f8:7a:08:
         64:68:36:ba:1d:5c:eb:44:b6:d4:93:e5:05:f3:d4:df:77:e8:
         d3:ec:06:a3:fa:85:ad:07:41:e7:e6:ba:45:20:75:f8:cc:9c:
         a4:b3:29:fe:cd:3e:0f:80:44:68:bb:5c:4d:16:8b:55:b3:82:
         c2:6a:88:b6:8b:f5:d4:d8:c2:14:60:63:d0:ab:1f:bb:26:c5:
         d7:8e:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:41:13 2026 by rpki-client