Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File:                     pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier:          nRJzAUbRfqhxjuYlMxtQlsGYRCNQfuFdEPkZ/J5LpRM=
Subject key identifier:   25:B5:69:A7:03:78:BA:5B:5B:DD:0A:1C:5E:4B:7D:07:AF:91:C3:8D
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer:       /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial:       0BEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number:          0BE2
Signing time:             Thu 16 Apr 2026 18:48:33 +0000
Manifest this update:     Thu 16 Apr 2026 18:48:33 +0000
Manifest next update:     Thu 23 Apr 2026 18:48:33 +0000
Files and hashes:         1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: LPnC0y7XrMb5lsRstOIy3L8wSb3UjhrHB4N6xyC+dZ8=)
                          2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: miF3Bd+XSLHucz0FC/5HkJ/vce5TslwDpsNS9Q4tZB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
                          rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3051 (0xbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
        Validity
            Not Before: Apr 16 18:48:33 2026 GMT
            Not After : Apr 23 18:48:33 2026 GMT
        Subject: CN=69e12f01-12ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:f4:d9:cd:c1:ab:2c:70:20:d6:2e:99:fe:
                    4c:80:b8:b4:02:4c:02:94:a5:38:9a:29:2f:52:52:
                    27:5b:70:de:22:dc:a2:9a:fa:64:ed:52:31:2f:f7:
                    b6:e6:a6:64:5c:95:10:bb:3a:48:5f:c0:b1:fa:18:
                    6f:58:65:52:7f:35:9f:ba:75:93:57:f1:1f:9f:2c:
                    c6:f7:97:a8:d7:55:62:48:d5:c0:d9:fc:4c:3c:59:
                    74:aa:21:36:46:2b:37:d4:21:d8:91:27:e9:f3:00:
                    4f:4a:ce:f3:e9:ad:61:c5:1e:28:69:6d:31:97:fd:
                    a4:c5:00:8c:32:4d:f4:36:67:0e:f5:dd:e8:ad:1f:
                    fd:ea:2e:5b:b8:50:41:35:8c:11:96:28:26:e0:55:
                    70:1e:d8:06:a7:b2:e5:a5:08:cd:35:5c:36:b7:fc:
                    29:2b:98:c5:4c:e1:19:38:a0:8d:a4:44:1f:fd:9d:
                    97:d4:0b:e3:d9:8a:b5:9f:cf:1a:21:21:b8:b0:6c:
                    eb:12:82:f5:1d:0b:d9:16:df:48:e8:da:95:ba:9f:
                    f4:9f:3f:8c:eb:b6:14:04:9e:52:b4:12:f8:d2:88:
                    8c:3a:d6:1b:37:fc:85:f9:f5:d5:c1:e9:0a:d4:ac:
                    b4:2c:2d:1c:2a:54:4e:37:45:ef:b5:9b:2c:16:72:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B5:69:A7:03:78:BA:5B:5B:DD:0A:1C:5E:4B:7D:07:AF:91:C3:8D
            X509v3 Authority Key Identifier:
                keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:f3:f7:ad:28:39:2d:f1:af:1a:3d:6f:5f:af:3a:89:a2:
         63:55:bd:a4:9f:60:cc:1c:bb:9e:e6:23:8b:20:b5:86:ce:e0:
         4b:5c:f4:f7:54:d5:5c:0f:74:c2:86:9f:72:b0:03:fd:9b:00:
         40:9a:f8:03:e6:a3:03:e9:c1:24:6b:ff:81:8c:f6:c6:f9:70:
         c6:89:41:25:fd:58:42:c2:19:7d:db:91:f1:34:e3:79:68:3b:
         8d:b3:a2:de:9d:62:d2:d0:65:39:3d:7c:90:81:7a:f8:d1:7b:
         09:61:60:06:70:bb:1f:d2:9f:f2:c0:9e:59:c6:7d:c0:2c:05:
         e9:4b:a4:44:58:72:c7:3c:61:22:d5:05:3b:73:28:7a:68:f9:
         9b:99:95:88:28:e3:a6:6e:9c:2e:63:a8:9b:13:9c:ef:4d:f1:
         bb:0e:f6:fd:b9:aa:83:08:81:50:2f:08:4c:45:9f:6b:fa:cb:
         9a:df:12:2e:4f:18:b8:41:22:9d:93:71:21:27:e5:1f:9f:58:
         cd:eb:48:aa:47:ad:d2:36:b0:3d:40:9c:55:5f:85:33:91:de:
         e4:fe:e5:8e:f9:9f:fd:04:cc:fb:db:04:ad:b6:5b:ad:93:63:
         96:cf:87:1c:82:8d:c0:c2:0b:a4:d9:52:82:3d:50:f9:aa:49:
         b8:9f:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:06:56 2026 by rpki-client