Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File:                     pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier:          sUE0H5T2Oj2CB77XyERpN2B8MRQEiKmAsf1hkshxMzg=
Subject key identifier:   7F:49:3E:22:57:47:58:90:33:D1:FA:81:DC:FC:CE:5C:75:90:6F:46
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer:       /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number:          0229
Signing time:             Wed 23 Sep 2026 02:48:26 +0000
Manifest this update:     Wed 23 Sep 2026 02:48:26 +0000
Manifest next update:     Wed 30 Sep 2026 02:48:26 +0000
Files and hashes:         1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: BdCPYubD/vS9/jP2sXyzGV/tWtquhEkREvQ9F1FyiuQ=)
                          2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: Pn3t7Q2xH1MHU013jHPh+VPRQQXIgRH1a2aFUOJ0g9I=)
                          3: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: 24csX/QK3Rfd0VNE+KVxc4JCo6pG7QuAjIc0XCJ9N5M=)
                          4: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: V73rrflKLTiVNK5j3ada2jgTwgOJk55X18oFDRCNd5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
                          rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
        Validity
            Not Before: Sep 23 02:48:26 2026 GMT
            Not After : Sep 30 02:48:26 2026 GMT
        Subject: CN=6ab33dfa-6250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:82:d5:c3:7f:c8:3d:63:a5:99:27:86:90:
                    ec:01:cd:06:26:3e:a2:6d:11:da:f8:3f:3a:69:34:
                    f4:6e:8d:eb:81:fd:50:52:b0:e6:52:9b:d6:f7:31:
                    aa:06:0f:b1:58:ee:7e:00:65:26:e0:05:b0:4f:d9:
                    fd:35:bc:80:9e:a4:91:a7:cf:9c:19:88:9d:8d:8b:
                    87:80:7d:e1:84:0f:e2:3c:b9:d7:55:9b:6c:bd:66:
                    24:0b:32:a0:15:1e:30:de:f1:78:5e:38:de:30:b3:
                    e7:32:3b:ee:91:78:11:56:f3:79:a3:3c:96:0b:1c:
                    99:62:99:02:c4:9d:b3:72:91:b7:ec:0f:ad:ac:b0:
                    c7:53:ae:ec:de:06:44:00:98:03:fb:03:b9:22:3d:
                    46:ab:23:fd:1f:c5:23:15:cb:48:eb:d9:b8:07:c2:
                    b9:2b:85:2f:86:23:60:59:8a:22:aa:f5:ae:6a:be:
                    db:22:26:11:e7:66:6b:04:24:af:11:5c:11:47:4b:
                    c5:2d:92:6b:75:b7:a9:0e:fe:ea:76:63:cf:5b:38:
                    8b:d8:83:a5:85:2a:3c:fc:91:de:63:d7:3b:79:d5:
                    2b:40:f2:37:d1:0f:4c:ab:fb:f1:22:14:42:37:58:
                    9e:4c:1c:13:35:b3:b5:c2:8e:19:ca:b3:b8:eb:08:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:3E:22:57:47:58:90:33:D1:FA:81:DC:FC:CE:5C:75:90:6F:46
            X509v3 Authority Key Identifier:
                keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:9a:01:70:d1:98:25:63:e7:ea:64:e9:76:94:f3:cc:07:
         7b:e2:9d:7c:8c:ba:a2:0b:0c:e5:98:05:64:56:8c:31:cb:0c:
         fe:9e:fe:cb:f3:be:63:f9:e1:95:df:e4:c6:32:c1:12:65:fb:
         da:6f:87:0e:55:f0:c6:2a:ca:98:99:6b:2f:83:19:f8:ec:a1:
         64:d8:18:b7:a6:39:e8:8d:a9:dd:d4:22:cc:6d:f2:bb:c4:99:
         cf:fa:dc:6b:69:49:55:f0:00:f1:8d:10:f5:39:26:d9:0e:b5:
         75:a6:ed:a0:53:ab:f5:82:02:df:e6:65:78:70:52:4b:ef:6e:
         07:b5:ce:16:bc:99:3c:dc:60:ba:59:6d:6c:cf:07:4e:1e:18:
         d6:be:c9:12:79:12:bb:cd:65:41:c5:63:49:1d:d8:8c:b4:ff:
         92:db:95:4d:f0:14:e3:aa:4b:e3:ce:bf:48:88:2c:4c:a0:ff:
         5d:c0:ec:9f:91:93:b8:36:8f:e5:ba:31:8a:de:61:e7:e1:4f:
         17:1d:1e:af:86:39:6b:89:ba:ce:4d:66:c3:b6:30:22:05:21:
         f2:05:38:fe:d7:1d:21:23:63:10:e4:39:bd:b8:73:8c:08:79:
         1c:90:50:da:6b:cd:fe:8e:f5:41:36:00:9d:0e:1c:11:c6:94:
         17:b5:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:47 2026 by rpki-client