Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
File:                     pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json)
Hash identifier:          c3cWP52avH2RA++9o2GTsKPqyj5IiGuJSIJYTp89oGk=
Subject key identifier:   78:91:4C:B5:57:DA:05:DE:7E:D9:9F:16:24:0C:A9:83:C1:63:CC:D2
Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8
Certificate issuer:       /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
Manifest number:          058E
Signing time:             Sat 26 Sep 2026 23:19:29 +0000
Manifest this update:     Sat 26 Sep 2026 23:19:29 +0000
Manifest next update:     Sat 03 Oct 2026 23:19:29 +0000
Files and hashes:         1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: N8lAuy2IYVuQDS6zHXPJFGglp/InvdhgQDiiCggVF2k=)
                          2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: Rt3TK51O88nSTbrQi7M6zmvfejUXKL1ItfboEtNWTOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl
                          rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8
        Validity
            Not Before: Sep 26 23:19:29 2026 GMT
            Not After : Oct  3 23:19:29 2026 GMT
        Subject: CN=6ab85301-0224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:01:4b:d1:a2:7e:1a:50:40:85:34:59:a8:5e:
                    09:0c:e2:29:22:30:b0:69:52:0a:82:aa:81:fc:b8:
                    98:9a:8a:af:f0:bb:49:67:0f:37:84:92:18:4f:17:
                    e3:4f:cf:cf:7a:c0:c3:55:84:96:31:da:2c:48:82:
                    31:ba:9b:44:ca:e8:08:13:93:06:6c:55:9b:f7:56:
                    6a:e4:0a:55:f5:4d:5c:65:b5:ea:2c:9d:9f:93:ff:
                    d0:7e:a2:fb:55:2b:84:fe:40:38:81:ba:32:b1:ca:
                    36:da:49:96:5d:63:14:3a:3d:b6:10:b9:7f:e8:18:
                    1a:2a:7f:d3:bb:fb:c9:ca:58:b7:f0:15:c0:c8:a2:
                    a6:f6:2d:26:d2:d6:3b:3a:e6:bb:e9:f7:f7:a3:64:
                    48:90:9e:bc:f8:e3:22:2c:7e:13:ef:69:70:ae:eb:
                    f8:37:cf:9c:08:09:ce:a3:32:c9:61:dd:fa:10:1e:
                    71:6b:37:d4:69:10:23:72:08:68:36:10:2b:d6:7a:
                    37:a1:3f:8a:a6:f2:d0:5b:11:94:10:3d:20:a8:d5:
                    ec:b9:ac:26:5a:58:ae:8e:13:c9:fd:78:a5:d6:6f:
                    f4:f4:34:9d:27:fe:a7:0f:35:7d:bc:19:92:0f:15:
                    e6:1f:14:8e:17:45:e3:e7:08:66:7e:dd:fd:57:be:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:91:4C:B5:57:DA:05:DE:7E:D9:9F:16:24:0C:A9:83:C1:63:CC:D2
            X509v3 Authority Key Identifier:
                keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:c3:3b:1b:45:2b:65:45:b1:ae:ce:ab:5f:02:60:8f:52:
         f2:12:08:fb:83:17:1b:b2:98:54:cc:9c:04:42:57:60:0d:c2:
         a9:3f:f2:d6:42:33:ae:0d:b0:13:c9:e2:fa:e3:70:2f:ee:4b:
         58:76:7f:9b:b1:bb:0d:df:2a:3c:e1:ab:27:af:b8:c8:bb:74:
         97:9b:25:4c:66:f1:e6:26:e8:a3:a7:7b:80:a0:2f:19:38:62:
         0f:92:65:5f:e1:96:5b:00:28:2d:fc:73:0a:90:10:0d:af:98:
         8f:91:42:c9:40:06:ac:a6:db:5b:9b:19:6b:41:b2:c7:9a:4f:
         db:eb:ee:62:37:81:2a:ac:ea:77:b7:3d:08:71:24:0b:ee:5c:
         a9:f2:ba:dc:92:01:33:96:76:70:1a:28:00:55:7a:a6:e9:a2:
         3d:53:9f:e8:ec:ea:a6:2b:db:45:ad:d5:51:7e:5c:c2:1f:54:
         c1:72:9e:ef:20:16:83:ca:06:17:92:3a:3d:f5:af:24:37:fa:
         aa:49:01:2b:c5:3a:e1:67:3d:04:5c:5a:05:ad:da:00:1e:f8:
         3d:3a:66:c3:2a:fe:67:b5:d7:72:a1:3e:3f:c5:ee:5f:cb:ba:
         25:75:a8:26:a9:d6:1a:85:42:7d:cc:0f:58:67:c1:f2:e7:1a:
         20:b8:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:15:20 2026 by rpki-client