Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
File:                     pih1evOkgoa9_fg6tOZOJNguDGs.mft (raw, json)
Hash identifier:          6WfriSePvvIY/YuEa7S0q+TWKnSFL2CS0jNzNAEJspw=
Subject key identifier:   B4:17:C7:80:5A:01:D5:8B:E7:56:00:E0:F3:C6:C6:99:A8:D1:CB:5F
Authority key identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
Certificate issuer:       /CN=A91C4FBE/serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
Manifest number:          C2
Signing time:             Fri 25 Sep 2026 06:59:44 +0000
Manifest this update:     Fri 25 Sep 2026 06:59:44 +0000
Manifest next update:     Fri 02 Oct 2026 06:59:44 +0000
Files and hashes:         1: pih1evOkgoa9_fg6tOZOJNguDGs.crl (hash: XgCp1SxeNsubn+VCGg6BhTPytXJ4P0Er9xV0rKAvNf4=)
                          2: 0B4BDC0E993311F08534326BC4F9AE02.roa (hash: O+71+qKIlOFF91ThgD2M6TfIMpzWxUeWVNEtSknMhWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FBE, serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
        Validity
            Not Before: Sep 25 06:59:44 2026 GMT
            Not After : Oct  2 06:59:44 2026 GMT
        Subject: CN=6ab61be0-7deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:38:4b:99:28:45:a0:a6:c0:5b:ec:7d:6f:
                    7d:72:ee:83:d2:cd:dc:cf:0f:c6:ae:9e:24:29:49:
                    24:48:77:3f:4f:1a:e3:d7:eb:74:eb:5b:d8:b5:b9:
                    dd:10:64:cc:64:3b:74:b1:ca:c8:04:6d:4f:95:72:
                    a2:63:55:ab:07:0d:99:b3:34:e7:00:64:09:6f:d1:
                    8e:6c:4f:ed:9d:a6:d3:7f:0a:4d:de:3e:02:8d:65:
                    14:3f:27:56:8d:1b:ce:4b:d8:57:3a:32:fa:a9:52:
                    56:68:5b:0f:c3:cc:38:e9:6a:8b:73:cb:bc:ce:7c:
                    a0:d2:72:e1:e6:e5:69:81:66:30:35:f0:04:1e:0d:
                    f4:0c:4d:14:e4:07:5e:0b:de:b4:06:c3:6b:ae:cb:
                    7b:94:90:3b:a3:7d:e3:48:4c:18:06:68:f8:fa:0d:
                    89:c5:ed:07:34:1e:9b:a9:52:87:cf:16:20:c3:c0:
                    0b:14:fc:1d:65:8d:dd:d3:b1:94:76:a1:88:d7:f8:
                    23:8f:95:a4:5a:eb:27:d0:7e:36:4e:00:f8:77:73:
                    cc:37:c9:3a:00:ed:ef:71:ac:92:4d:7d:72:27:36:
                    44:cb:2a:82:58:a1:2a:30:60:a3:64:dc:9c:32:5d:
                    27:d1:ad:54:cd:a4:a6:e2:c9:e3:65:51:5a:db:6c:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:17:C7:80:5A:01:D5:8B:E7:56:00:E0:F3:C6:C6:99:A8:D1:CB:5F
            X509v3 Authority Key Identifier:
                keyid:A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:0e:c8:18:e0:6b:52:9b:58:1b:20:51:a6:bb:6f:a6:50:be:
         d9:f3:f6:c3:0b:a8:ae:97:d0:3c:fd:eb:97:07:37:32:70:be:
         2b:c3:0f:01:3b:e4:b1:cd:a5:17:8a:1d:3f:06:78:87:5b:bb:
         94:b2:71:84:35:84:a8:a3:88:f9:12:59:fb:2f:3f:78:81:ac:
         c9:e4:b4:30:98:41:22:47:a7:ef:33:7a:04:28:e4:f6:f3:8d:
         65:0f:51:35:5c:ae:91:87:c6:c6:4e:67:3b:67:fc:73:b5:91:
         ea:bc:54:8b:82:bd:2b:2c:de:54:00:75:c0:7f:b3:40:aa:a9:
         e1:77:70:fd:ad:6c:31:31:59:ce:70:d2:e9:c0:5d:91:54:09:
         cc:2b:3b:aa:db:f2:48:dd:2d:af:3a:fb:18:b9:fc:c2:9c:5f:
         16:65:29:14:b8:ee:5b:7c:6c:a6:60:a9:da:7b:1e:46:bc:7b:
         33:dc:6d:40:46:bb:4d:d8:95:ff:cb:fb:76:3f:84:a2:bc:83:
         b3:7e:cf:4d:8d:c3:9d:fb:1a:e0:92:5a:2a:0b:69:09:73:53:
         12:f1:d2:24:d1:3e:b4:f5:d4:07:52:3e:f1:c8:e2:f7:bc:fb:
         47:f8:43:1e:0d:2a:03:b6:23:98:a7:7d:8b:ce:42:cf:74:f6:
         ab:be:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:08 2026 by rpki-client