Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
File:                     pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json)
Hash identifier:          PaKObQTyRxmpGjEIdgBPs1q3AmRomZJgAq3G3/xTZlY=
Subject key identifier:   60:3C:62:A4:6C:4D:E1:E9:CA:33:FD:28:3A:CB:4A:A7:2C:5A:19:8D
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Certificate issuer:       /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial:       02E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
Manifest number:          02D7
Signing time:             Sun 27 Sep 2026 01:22:25 +0000
Manifest this update:     Sun 27 Sep 2026 01:22:24 +0000
Manifest next update:     Sun 04 Oct 2026 01:22:24 +0000
Files and hashes:         1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: CxYn6bcNzBfZbyYvxIJSaNAzlWOs7TcXxTkohHRakS0=)
                          2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: kAImmlpJ7hpxSNEY+fje33YtCljiGxmlUux8CnBgP6w=)
                          3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: Pyj+QJw64+qPNXcBEJdy/nVnkRC2hvv2n61yRAdON2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
                          rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
        Validity
            Not Before: Sep 27 01:22:24 2026 GMT
            Not After : Oct  4 01:22:24 2026 GMT
        Subject: CN=6ab86fd1-e27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:a5:ab:b8:45:96:f5:09:8b:cb:fb:02:01:
                    6b:a6:70:67:26:c2:5e:2f:0f:e1:f0:17:43:04:7e:
                    5b:5d:25:ba:17:83:2f:e1:a4:ac:d4:53:b2:3b:0b:
                    1f:2d:90:af:30:38:cd:af:7e:6e:90:be:c8:28:f5:
                    a3:d1:9f:74:a2:d6:de:50:96:3b:31:05:fb:23:e1:
                    5b:48:ca:03:bf:2a:b0:84:cc:8a:c1:ac:7a:f9:ee:
                    b3:dd:5a:df:5c:67:92:39:27:80:45:46:fd:5d:1c:
                    02:c0:fa:49:86:79:c3:b5:19:77:5d:9d:40:c4:7d:
                    ca:1e:bf:52:d0:29:4e:06:54:eb:ea:84:da:2b:1e:
                    f3:4f:80:77:f0:a6:67:d4:76:07:85:ed:cf:10:c1:
                    42:41:40:df:87:ce:dc:61:da:48:5f:17:c0:6a:a7:
                    7b:d0:f1:ca:1f:d8:86:ab:0b:8f:b3:6b:c2:d9:c0:
                    61:9e:55:82:82:64:67:cd:72:6e:96:fa:b8:c2:75:
                    ff:64:67:64:a2:f5:c8:64:6a:de:37:ca:74:bc:f4:
                    c5:fc:ce:a1:12:82:32:4e:a3:cd:4b:95:a3:a3:71:
                    00:70:da:ac:7b:f7:77:5c:3f:32:8f:6c:c5:66:3d:
                    e3:54:57:4f:b7:67:33:e0:a1:a5:f0:b8:87:7d:08:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3C:62:A4:6C:4D:E1:E9:CA:33:FD:28:3A:CB:4A:A7:2C:5A:19:8D
            X509v3 Authority Key Identifier:
                keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:d6:65:17:a0:87:b8:c4:de:78:00:ca:bf:27:d5:57:a4:
         c8:f6:63:df:9a:d2:b0:d7:9e:99:a6:c2:6f:55:67:bd:c1:7f:
         84:c7:e8:5f:d2:0d:e8:d3:a6:9f:45:b4:eb:8d:2c:a2:44:cf:
         e1:2d:d6:03:aa:53:6d:d7:c2:86:52:6e:1e:77:b8:2b:50:e3:
         87:56:58:68:27:32:69:f8:f6:98:f4:9a:a3:62:d9:87:d2:e3:
         5b:03:b8:94:58:82:4d:e9:7e:ce:74:0c:8d:08:50:ac:65:71:
         7b:66:74:c8:97:e0:72:c8:d1:c1:77:d7:94:a5:32:45:4a:50:
         ff:14:1a:bd:7f:ec:e0:48:20:46:db:3a:2d:57:12:47:dc:95:
         d2:d0:94:35:5c:88:b6:b2:d5:4a:b2:91:d4:dd:13:f9:65:74:
         28:cd:65:5c:ab:ca:a2:2c:c8:57:48:36:5e:61:5d:80:86:fb:
         e9:b6:93:40:66:73:e3:a8:13:87:36:c9:7a:c8:c7:8d:1c:42:
         96:ff:4c:c4:36:9f:a2:85:8a:5a:54:95:f3:8d:ea:74:19:98:
         69:bf:d0:df:09:bd:6e:6d:e3:76:fa:4e:d1:f9:62:27:d9:13:
         15:a7:5b:36:f3:97:4c:93:6b:ab:aa:f9:f4:d4:a0:6a:06:a2:
         ab:85:87:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4
NUUwMEZFOUIwHhcNMjYwOTI3MDEyMjI0WhcNMjYxMDA0MDEyMjI0WjAYMRYwFAYD
VQQDEw02YWI4NmZkMS1lMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurOlq7hFlvUJi8v7AgFrpnBnJsJeLw/h8BdDBH5bXSW6F4Mv4aSs1FOyOwsf
LZCvMDjNr35ukL7IKPWj0Z90otbeUJY7MQX7I+FbSMoDvyqwhMyKwax6+e6z3Vrf
XGeSOSeARUb9XRwCwPpJhnnDtRl3XZ1AxH3KHr9S0ClOBlTr6oTaKx7zT4B38KZn
1HYHhe3PEMFCQUDfh87cYdpIXxfAaqd70PHKH9iGqwuPs2vC2cBhnlWCgmRnzXJu
lvq4wnX/ZGdkovXIZGreN8p0vPTF/M6hEoIyTqPNS5Wjo3EAcNqse/d3XD8yj2zF
Zj3jVFdPt2cz4KGl8LiHfQijJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGA8YqRs
TeHpyjP9KDrLSqcsWhmNMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF
NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzM2NS8wOUZCNTE4QTVFNDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQ
UnBkZDZNbTBaeS1GNEFfcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUm/WZRegh7jE3ngAyr8n1VekyPZj35rSsNeemabCb1VnvcF/hMfoX9IN6NOm
n0W0640sokTP4S3WA6pTbdfChlJuHne4K1Djh1ZYaCcyafj2mPSao2LZh9LjWwO4
lFiCTel+znQMjQhQrGVxe2Z0yJfgcsjRwXfXlKUyRUpQ/xQavX/s4EggRts6LVcS
R9yV0tCUNVyItrLVSrKR1N0T+WV0KM1lXKvKoizIV0g2XmFdgIb76baTQGZz46gT
hzbJesjHjRxClv9MxDafooWKWlSV843qdBmYab/Q3wm9bm3jdvpO0fliJ9kTFadb
NvOXTJNrq6r59NSgagaiq4WHAw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:23:24 2026 by rpki-client