Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
File:                     piPcBe58I3DKREMQhN5RMh83pwQ.mft (raw, json)
Hash identifier:          nBxx67ePYtLGT23zulWBBXWffs7kx/PX7UaYt32xyY8=
Subject key identifier:   2C:AC:CD:6F:6A:DF:FB:51:93:4C:10:4C:63:95:19:0D:F3:23:EC:E7
Authority key identifier: A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04
Certificate issuer:       /CN=A9146179/serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
Manifest number:          0136
Signing time:             Mon 01 Jun 2026 06:34:03 +0000
Manifest this update:     Mon 01 Jun 2026 06:34:02 +0000
Manifest next update:     Mon 08 Jun 2026 06:34:02 +0000
Files and hashes:         1: piPcBe58I3DKREMQhN5RMh83pwQ.crl (hash: tbYpwT+UB3qX7PDG0w99VnJT1D7GkoSSvNIDeTnM6Pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146179, serialNumber=A623DC05EE7C2370CA44431084DE51321F37A704
        Validity
            Not Before: Jun  1 06:34:02 2026 GMT
            Not After : Jun  8 06:34:02 2026 GMT
        Subject: CN=6a1d27db-008f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:fa:31:66:36:34:57:16:b8:0e:98:0b:90:
                    e4:1c:98:75:08:21:5c:b6:d2:cd:c0:ac:5a:e8:eb:
                    63:88:39:18:93:ab:19:06:a7:2d:c5:d5:8c:b9:ea:
                    ad:69:46:30:62:41:b6:ac:37:07:b7:d1:e2:b6:33:
                    54:9c:b6:05:14:bc:eb:63:b0:ad:fc:e0:1c:1e:a5:
                    02:1d:62:55:2d:68:49:22:7e:88:a3:dd:4c:93:08:
                    e8:9d:ce:e5:1b:c8:28:24:25:fc:83:e7:91:3d:a1:
                    6d:19:38:0b:59:ce:31:70:32:86:2a:bd:6b:f4:e7:
                    29:71:9b:74:5c:ba:f6:1e:c4:47:79:eb:fe:4b:77:
                    40:62:67:fa:d5:33:94:72:58:14:1c:a6:28:b9:ab:
                    2b:7b:9c:d3:0f:c1:7a:fb:ec:d3:11:80:6b:b7:cf:
                    46:e6:0d:2c:30:42:16:89:35:68:86:78:fd:0c:3b:
                    e0:0e:75:a2:51:ea:18:97:ee:10:2c:51:ff:15:99:
                    ea:90:6d:a3:14:85:c2:19:72:c3:d2:0b:2d:20:0a:
                    43:35:be:4b:a3:56:9d:c7:5e:da:83:f5:d9:21:2d:
                    f5:e6:8b:06:f3:9c:50:9e:a6:19:3c:02:52:a3:58:
                    96:87:5f:70:07:4b:b2:08:37:7d:78:6e:4c:77:e1:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AC:CD:6F:6A:DF:FB:51:93:4C:10:4C:63:95:19:0D:F3:23:EC:E7
            X509v3 Authority Key Identifier:
                keyid:A6:23:DC:05:EE:7C:23:70:CA:44:43:10:84:DE:51:32:1F:37:A7:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piPcBe58I3DKREMQhN5RMh83pwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/4BFD9BBCAA7C11EFA33BFD77C4F9AE02/piPcBe58I3DKREMQhN5RMh83pwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:bf:9c:7e:92:8d:91:e0:78:2b:c8:b3:b8:f7:19:2a:e1:
         7e:95:fe:3a:93:a6:fb:27:bd:19:a6:66:e6:d5:c4:87:89:94:
         d7:1c:06:ba:b2:8b:71:07:36:48:5f:a6:f6:ab:48:ce:30:0d:
         f4:f1:ea:5a:a1:91:a1:b2:8b:fa:d2:9c:19:45:cc:ba:f9:43:
         1b:44:3d:cd:78:5b:88:5b:71:d2:ee:fc:10:a2:b9:a6:21:2c:
         6f:54:7e:ee:7b:fb:90:8c:04:20:39:4e:d0:93:3c:bc:42:61:
         51:21:9d:1d:89:b1:8e:d9:87:0b:11:2c:84:a5:3a:11:ad:e0:
         42:02:15:14:28:9e:93:45:c8:29:3e:0c:2b:49:7e:73:18:0b:
         5a:5b:da:6c:25:f2:bb:3c:ce:be:31:60:1a:ec:aa:91:1d:33:
         52:89:4d:67:38:87:57:a8:f8:aa:5d:60:d9:40:f2:46:c9:1e:
         38:6d:94:b8:96:1b:d1:91:8a:b0:88:a2:de:54:55:a8:eb:6c:
         8f:7a:44:31:d9:55:4e:2f:7b:78:3c:d9:58:25:75:06:c2:68:
         19:3b:d4:91:3e:56:ab:d0:f3:a0:43:07:12:53:b1:88:bc:cb:
         60:be:37:64:4e:98:b8:5c:29:3d:85:b0:20:2d:62:2f:1d:4f:
         09:e7:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:36 2026 by rpki-client