Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          u94/nlM1RP0gaXb3NVXpCV5Dxnpl6Oc5FMqHVXWC5DY=
Subject key identifier:   5A:D2:F6:C4:01:15:F8:C1:62:22:23:F0:DB:CE:72:AC:31:C0:FA:DA
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          AE
Signing time:             Sat 03 Oct 2026 07:47:52 +0000
Manifest this update:     Sat 03 Oct 2026 07:47:51 +0000
Manifest next update:     Sat 10 Oct 2026 07:47:51 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: KtHySPsmQQTj0NxW833T6Bm60ZOsTC1Ixlufu664fyg=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: RKJiWEFRRxfC255nnKMBMyY+0j0SvD2OXb6aSU3b+vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: Oct  3 07:47:51 2026 GMT
            Not After : Oct 10 07:47:51 2026 GMT
        Subject: CN=6ac0b328-1d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:d8:6b:a5:2f:1e:2a:b5:ac:ab:ac:87:3c:
                    9f:87:f5:d0:8d:28:37:6b:66:da:1b:cc:15:2e:75:
                    c2:6c:e0:7c:9e:4f:51:d3:fd:c3:c9:d3:5d:2a:81:
                    45:f5:c7:9f:8c:a5:d2:c9:2b:d2:b2:50:ed:52:bf:
                    f9:f9:b4:94:b1:ed:f9:4f:81:b9:f2:d3:0d:67:c1:
                    e3:26:44:fa:59:56:2d:cc:41:c5:fc:9c:60:32:5a:
                    60:06:1b:b1:94:e9:4b:24:3d:24:ce:5a:5d:78:83:
                    ee:ea:72:97:db:94:72:37:df:08:91:78:6c:09:df:
                    c4:1c:fa:59:83:6b:7b:4e:4a:ac:00:5e:66:a6:93:
                    2d:94:79:54:b7:3c:ca:26:e3:9f:00:7d:f2:a6:3a:
                    02:12:b8:81:55:be:8b:b2:89:d4:76:96:de:4b:16:
                    e1:45:3a:e8:8d:21:88:f0:e5:4c:09:3d:da:6c:9d:
                    fb:b4:8e:17:a9:ae:ed:30:8c:af:e5:dc:9f:00:aa:
                    52:57:bd:a7:92:ea:4e:e0:fa:1a:09:09:fd:63:12:
                    4a:fa:44:18:00:bc:f3:da:08:d6:cd:fe:58:8f:ee:
                    79:56:cd:03:43:11:19:81:c8:6a:17:cb:f4:9c:26:
                    fd:29:d6:99:5f:c4:37:79:36:2a:59:ba:0b:a5:75:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:F6:C4:01:15:F8:C1:62:22:23:F0:DB:CE:72:AC:31:C0:FA:DA
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fe:83:ad:b5:1a:a7:3f:aa:5a:ff:25:fc:2c:a7:69:d3:e8:
         41:d7:b5:77:93:8f:60:4e:1a:5e:d7:ac:bc:27:42:8c:2a:f3:
         87:10:d3:92:a6:58:eb:d1:03:60:04:c3:f0:10:80:c4:ba:4b:
         98:52:38:99:2f:3e:a2:db:82:93:6c:9c:04:64:46:51:a6:67:
         5c:46:59:a2:56:f4:ba:76:01:ca:18:45:ab:54:f1:30:17:19:
         23:a3:39:8a:45:42:e6:07:4e:d0:87:9e:13:ab:a0:58:9d:93:
         58:d8:a3:24:b1:d0:b3:53:38:a8:14:d0:d7:8c:ba:2d:14:85:
         f5:fd:31:86:d0:5f:3f:35:5f:4f:44:67:43:d5:ec:f8:21:be:
         19:f0:d6:68:e1:1f:eb:5c:e3:b5:e6:c6:dd:66:2f:94:65:b7:
         74:97:0f:c3:f1:74:7b:ad:7b:0c:71:50:64:9b:38:c0:4a:81:
         ff:e3:ad:c0:b3:fb:36:4b:9d:f9:3b:b7:7b:3c:3c:c7:12:9e:
         40:45:00:cc:3a:4d:ac:b7:de:f5:9f:bf:c9:5b:50:9d:14:76:
         da:53:13:bf:f2:3a:33:37:fc:15:a2:4f:db:3a:bb:0c:35:df:
         bb:fa:e0:d1:0c:a8:8b:a4:51:cb:97:ae:72:65:c9:eb:4b:3c:
         f9:6c:7f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:59:29 2026 by rpki-client