Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
File:                     piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft (raw, json)
Hash identifier:          zANeJbRyPyx+UniNE7HUT8ayG5g4KOKagVjwoqFHhDo=
Subject key identifier:   F7:8E:64:A0:25:47:A1:6C:92:C3:73:A7:34:66:55:17:E7:4E:E1:2F
Authority key identifier: A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4
Certificate issuer:       /CN=A91878B3/serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
Manifest number:          A1
Signing time:             Sat 17 Oct 2026 07:59:47 +0000
Manifest this update:     Sat 17 Oct 2026 07:59:47 +0000
Manifest next update:     Sat 24 Oct 2026 07:59:47 +0000
Files and hashes:         1: piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl (hash: b92AySYTS3Tr63uf5+1foZUojRhwUZoykjJzwoGKrVI=)
                          2: 276AF720D4EE11F09328C93FC4F9AE02.roa (hash: yvWe793LFDv60yfRRzGNrVWi5via5iRanXNLPGkIsZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 07:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B3, serialNumber=A6216FB1D8BC7855F770735D45128A87C713AFC4
        Validity
            Not Before: Oct 17 07:59:47 2026 GMT
            Not After : Oct 24 07:59:47 2026 GMT
        Subject: CN=6ad32af3-8afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1c:ca:c8:7d:d8:44:85:64:53:72:66:a3:2c:
                    82:f4:76:8c:e4:b7:19:b9:ae:61:99:74:97:a7:fd:
                    c4:2e:87:5f:8c:62:14:25:03:3a:b3:b5:dc:93:d2:
                    dc:7a:a3:49:8e:45:84:30:a1:2b:c9:8a:6d:26:6b:
                    42:84:f7:84:e9:59:49:75:93:db:eb:32:8f:81:e7:
                    30:05:23:fb:c1:d9:31:eb:d5:27:37:08:93:fc:c1:
                    bd:6c:05:92:da:1f:fe:d7:bc:a0:c6:77:2b:27:9c:
                    69:e3:06:03:34:e9:cf:ce:38:fd:59:9e:5d:d3:3b:
                    e9:8b:93:f9:6b:b6:2d:9f:90:23:75:b6:3d:b4:fb:
                    27:e6:98:29:cf:21:4b:72:29:f9:ab:eb:c5:26:c0:
                    f0:95:27:c7:fa:76:bf:80:67:dc:8b:b0:b2:2b:49:
                    a0:fc:7c:77:8d:c8:37:a9:f6:82:34:32:fc:3d:ad:
                    73:6a:67:5e:7c:9d:f5:d9:93:7c:60:b1:35:cf:bd:
                    99:04:ad:a2:79:87:87:f2:4b:74:8f:4e:b6:bf:34:
                    98:71:33:b3:48:4e:46:7c:e5:47:85:43:43:c8:73:
                    81:23:a4:58:ad:a0:c0:d4:ad:f2:41:7e:d4:c9:20:
                    73:74:f2:cf:8e:d5:54:53:f2:48:02:ee:c7:e1:f9:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:64:A0:25:47:A1:6C:92:C3:73:A7:34:66:55:17:E7:4E:E1:2F
            X509v3 Authority Key Identifier:
                keyid:A6:21:6F:B1:D8:BC:78:55:F7:70:73:5D:45:12:8A:87:C7:13:AF:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/piFvsdi8eFX3cHNdRRKKh8cTr8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B3/1E530FCCD4BE11F0BF9FE216C4F9AE02/piFvsdi8eFX3cHNdRRKKh8cTr8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:94:4d:a6:76:a9:76:3a:39:39:bf:10:3c:b6:bc:18:9e:
         4e:40:82:d1:26:95:45:8d:a8:e9:ec:44:7d:67:39:f5:0e:c7:
         46:77:2c:77:c7:7c:48:8c:b4:87:01:d4:fc:76:6e:91:00:6d:
         e9:a3:90:31:08:9a:e2:9e:f7:f1:37:88:f7:a9:5e:ac:be:20:
         64:4d:f2:4b:75:16:66:cb:ee:a7:22:81:d2:48:9d:05:6a:13:
         5b:20:f8:a9:f2:42:92:70:1f:d5:a8:2d:d1:2b:25:3f:c8:01:
         0e:2c:90:28:8b:17:6b:27:e2:d3:8b:42:e0:61:97:6f:bc:5e:
         25:12:fe:c6:ce:cd:2b:9f:91:7d:b6:5f:1e:f0:e3:95:8a:21:
         71:e3:c7:22:94:58:7c:7a:97:ea:2e:af:0b:76:8d:42:74:6b:
         d3:6c:df:98:95:c7:57:b5:ad:ea:0f:5f:94:9b:b3:f8:0c:b1:
         a1:f0:ab:70:8c:98:40:ab:c9:97:ea:00:55:11:c0:e1:c4:e5:
         29:0e:0f:cc:6a:18:94:66:2b:8f:f3:e5:41:4f:0a:85:05:e9:
         dc:12:9d:06:98:c9:e8:e5:42:54:c0:74:c5:d0:ce:1c:b8:ad:
         ec:3e:17:6c:50:98:08:67:e5:8d:e2:dd:22:0d:4d:51:c2:32:
         c7:67:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:14:12 2026 by rpki-client