Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
File:                     pcdj6Klfa5qyQRNgHagVOhWRJu4.mft (raw, json)
Hash identifier:          aYI4L+RNhfHw3pRUn2gc2f/XJg17kRWqLBnaXRS7ReM=
Subject key identifier:   81:2B:36:FD:CB:D4:2C:EC:6B:FF:39:65:28:24:1B:CE:A4:0E:BE:8F
Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE
Certificate issuer:       /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
Manifest number:          0758
Signing time:             Sun 04 Oct 2026 21:55:19 +0000
Manifest this update:     Sun 04 Oct 2026 21:55:19 +0000
Manifest next update:     Sun 11 Oct 2026 21:55:19 +0000
Files and hashes:         1: pcdj6Klfa5qyQRNgHagVOhWRJu4.crl (hash: xS2s+TxSG5Y+xuBjKtOHiNiEPEujHlrKa2JqYOBZE6E=)
                          2: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (hash: 2xHsPM7bcGVz8Rr9wRjmhJDwISgV2Z6k7eJJ+IsrWxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl
                          rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
        Validity
            Not Before: Oct  4 21:55:19 2026 GMT
            Not After : Oct 11 21:55:19 2026 GMT
        Subject: CN=6ac2cb47-9d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:ee:88:c8:55:c4:46:a9:b5:04:2b:9a:00:
                    24:87:a2:a7:71:bb:6f:de:cd:46:8a:41:fa:64:1a:
                    9c:fd:d5:f6:43:7e:5f:cf:17:6c:2a:30:95:9e:4a:
                    01:30:de:e0:18:22:cd:4d:36:f2:46:4a:50:c9:90:
                    41:bc:a6:cf:01:9a:5a:19:cc:5d:37:00:4a:20:83:
                    f2:4b:8d:c3:f2:f1:44:93:7c:c4:e6:52:cc:8d:f8:
                    4e:53:7a:c6:36:aa:3f:6f:fe:4f:29:6e:53:63:73:
                    82:c6:5e:72:b8:dc:ea:1e:1d:f7:09:09:30:71:4a:
                    67:a8:38:69:6f:1f:3c:94:1c:6e:cd:42:bf:70:c1:
                    d6:13:49:0d:0c:2c:a5:13:5f:64:45:88:ed:06:20:
                    9b:5f:97:90:47:b1:dc:23:04:48:83:4d:26:b8:e3:
                    13:f4:5c:18:04:5d:fe:26:04:ac:36:00:09:db:40:
                    5a:b8:92:af:0f:e5:52:87:8a:19:3b:eb:6d:49:ee:
                    fc:41:86:bf:8e:03:a8:49:75:cb:2d:8b:b7:40:34:
                    ec:34:43:62:b4:2d:1f:cb:fc:96:59:a6:47:0e:f1:
                    f1:9d:38:43:15:86:44:e1:c0:ae:3a:de:ab:e6:d2:
                    df:d2:03:ed:1e:6f:28:a6:18:1a:6f:96:7e:26:d1:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:36:FD:CB:D4:2C:EC:6B:FF:39:65:28:24:1B:CE:A4:0E:BE:8F
            X509v3 Authority Key Identifier:
                keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:1a:44:fc:98:d0:f2:77:d0:71:54:37:62:99:1a:a5:08:31:
         ed:3e:c5:20:6c:fc:74:d8:b9:c5:e9:0a:5b:f5:e7:92:a5:f6:
         e0:6b:e5:cf:08:27:f6:d4:93:bf:e9:0b:f7:58:28:12:4b:3c:
         6f:f9:77:81:68:cf:d1:5f:0f:1c:aa:27:c4:c6:bf:66:3e:ea:
         3d:79:54:12:7e:7b:60:e5:a5:e2:2f:e0:16:4f:e0:89:c9:0e:
         bc:ae:c0:a1:bc:f3:2d:20:22:24:33:bd:c3:b5:bc:14:53:86:
         4b:79:fc:00:bc:8c:c6:93:07:17:3c:67:3c:6f:ba:6e:78:0b:
         39:2e:a2:0b:22:c5:6d:be:26:43:37:05:a9:ac:b9:b9:a6:f8:
         35:f0:3a:52:de:b6:39:ef:68:f8:f5:ce:c0:69:20:51:63:5e:
         95:d6:a2:0e:22:38:19:b1:9e:b2:6a:0c:11:4f:fa:b9:4b:fb:
         df:be:8c:e8:01:84:b2:b4:d1:1d:3b:50:36:08:9c:d9:83:c3:
         b2:20:74:c2:5a:b5:9a:ee:09:a9:db:7f:5a:9f:b1:60:44:d1:
         da:51:e2:02:05:b5:3b:17:8c:c4:2d:4b:a5:a2:ef:6a:2d:e7:
         b3:bb:9a:11:93:c6:bb:8c:7f:8c:27:43:ed:2f:e0:2b:82:87:
         27:cf:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:48:08 2026 by rpki-client