Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
File:                     pjicd02tZdiN8ubU9D3ioLVy7no.mft (raw, json)
Hash identifier:          y5NXiTZ1NkajOhL9x8gmUL6I2AEfyGGiN/oykBHcdsM=
Subject key identifier:   E1:86:60:39:09:C7:EF:1B:CF:27:F4:72:FB:0E:67:AE:1E:62:C7:EC
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Certificate issuer:       /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial:       035D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
Manifest number:          034D
Signing time:             Wed 07 Oct 2026 01:07:54 +0000
Manifest this update:     Wed 07 Oct 2026 01:07:54 +0000
Manifest next update:     Wed 14 Oct 2026 01:07:54 +0000
Files and hashes:         1: pjicd02tZdiN8ubU9D3ioLVy7no.crl (hash: hxGFvlv9OUOMCi/nPgxUrhgBblTa0+thFDkobDft4fI=)
                          2: 9995D8D6276011EDAF21D06DC4F9AE02.roa (hash: 61DuBM+MCyfc3RH02er6otIL3gR9WQxTQ4whfuHgBx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
                          rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
        Validity
            Not Before: Oct  7 01:07:54 2026 GMT
            Not After : Oct 14 01:07:54 2026 GMT
        Subject: CN=6ac59b6a-712e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:94:1f:bf:44:aa:2a:cf:ff:86:ac:19:30:
                    ea:6e:c1:c9:c4:8d:f3:74:ab:64:24:bf:d7:34:c0:
                    40:3c:75:76:0b:11:19:86:a0:1a:63:24:56:97:36:
                    f9:7d:1b:32:ea:7d:51:d9:f5:c7:a5:bb:ba:67:4b:
                    8e:77:18:28:01:8f:a1:d0:22:e2:f2:83:e3:4b:8b:
                    1c:6f:c6:02:bd:aa:93:27:f8:52:60:27:42:90:1d:
                    ab:1a:f6:c0:b1:eb:8d:77:43:65:c4:d6:69:be:24:
                    9f:46:af:41:77:db:2b:b5:c6:f6:b6:f1:be:ed:3a:
                    f1:3f:af:f0:ca:7e:51:0f:d5:63:5b:0c:4b:a2:f3:
                    29:5e:63:05:ac:2e:37:3f:06:7a:54:85:30:56:53:
                    3c:6f:24:75:b9:ad:ce:d4:68:96:81:64:52:22:ca:
                    fc:fc:58:e7:d2:44:71:30:e1:a4:dd:f0:15:56:ca:
                    5a:79:7a:66:0a:ff:4a:50:2d:ee:73:cf:b5:ae:9b:
                    20:9f:ff:c5:38:7d:ea:f4:ef:93:58:07:62:c7:d4:
                    77:ee:49:d3:5d:1d:57:84:51:c4:87:ec:8d:38:d3:
                    8b:67:ca:68:9d:3e:e6:6a:8e:a4:aa:f9:ce:45:04:
                    63:4c:8d:ea:db:a5:12:81:0c:06:ca:48:23:bf:96:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:86:60:39:09:C7:EF:1B:CF:27:F4:72:FB:0E:67:AE:1E:62:C7:EC
            X509v3 Authority Key Identifier:
                keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:1a:9c:be:d3:99:18:b2:6d:5b:bb:88:eb:b1:a7:bd:d9:
         ff:22:9a:16:22:85:77:20:3a:cc:a5:3d:44:6e:21:78:4e:3c:
         7d:e8:1d:02:b8:33:67:8d:e8:98:81:c3:76:ba:13:74:f0:e7:
         d5:0d:8c:d8:af:f3:9a:52:42:60:82:54:c6:0a:3e:5e:b0:00:
         b8:0c:49:10:a5:87:81:68:a9:0b:1a:61:07:a1:cc:e4:a1:4a:
         59:e6:32:5b:85:d8:a4:68:31:48:c7:15:d7:3b:d2:19:8e:27:
         a4:59:ff:c9:40:4e:dc:56:52:0e:43:2c:87:92:62:0a:fa:d7:
         f1:e4:57:5b:0c:ae:ef:ea:72:98:1b:58:66:15:e0:be:39:52:
         af:13:35:d4:8c:9a:0f:a6:75:04:e3:06:76:5c:7a:aa:f0:40:
         56:b0:ee:7f:f2:2a:13:ff:12:2b:df:cb:cd:65:e7:ae:83:0d:
         bf:af:da:7e:4b:7a:63:c6:01:8a:e1:e3:dc:08:14:03:e2:e4:
         5b:6f:12:e5:53:10:27:c7:67:64:f5:36:41:62:de:d6:ca:c0:
         0d:83:82:2e:ed:02:e7:49:27:ef:14:81:80:71:9e:c2:b5:23:
         e5:bd:e0:61:0d:ca:43:5b:80:be:42:cd:b5:a2:81:8a:14:14:
         bb:2f:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:01:35 2026 by rpki-client