Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
File:                     PC3463wb1QIzAvYRqX4F14QXCTs.mft (raw, json)
Hash identifier:          5nLNcRiM8rAmC1WQtXcJUBfiCt4pKRVOGQYOelfSxQg=
Subject key identifier:   CF:6A:8D:77:32:4C:0F:D3:AA:FB:CB:B7:9C:39:D9:FB:0A:2F:DD:F1
Authority key identifier: 3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B
Certificate issuer:       /CN=A91334F0/serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
Manifest number:          01A2
Signing time:             Mon 21 Sep 2026 04:09:11 +0000
Manifest this update:     Mon 21 Sep 2026 04:09:11 +0000
Manifest next update:     Mon 28 Sep 2026 04:09:11 +0000
Files and hashes:         1: PC3463wb1QIzAvYRqX4F14QXCTs.crl (hash: nJ3gHKOXiPOurTbT1zsr6U2erQZPKCdeUJQCo236OA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=3C2DF8EB7C1BD5023302F611A97E05D78417093B
        Validity
            Not Before: Sep 21 04:09:11 2026 GMT
            Not After : Sep 28 04:09:11 2026 GMT
        Subject: CN=6ab0ade7-237f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:de:a0:76:1a:1d:63:44:a1:2a:98:8a:44:
                    16:d4:a6:4b:5f:ae:bf:38:50:d7:bd:ca:3b:00:7d:
                    a7:34:c4:85:1b:fd:a4:bf:8b:ea:3c:97:8e:86:22:
                    aa:4a:4b:35:0a:4e:9c:72:d7:0a:54:c7:e3:0d:7f:
                    56:e9:6d:45:27:41:c0:41:ba:a0:24:e8:7f:93:e3:
                    03:62:55:68:4f:a0:67:02:0b:f1:9d:19:b8:ea:9d:
                    29:0f:a3:3b:a7:4d:ff:ba:33:23:02:cf:24:e2:01:
                    7d:f9:ca:53:7d:32:fd:9c:d8:46:93:bd:a9:02:fa:
                    82:86:43:0d:37:51:32:0c:e4:1f:51:94:4c:f2:07:
                    e7:88:7c:8c:79:64:da:41:be:13:a0:1f:36:c1:e7:
                    3e:97:18:f3:32:f8:41:da:1f:11:3f:a7:23:f7:4e:
                    02:ae:1d:4b:5c:64:5d:35:62:f3:cf:86:e9:49:7d:
                    d5:0a:d8:09:8e:79:34:bc:ac:ea:c1:86:b8:54:92:
                    18:95:c8:52:94:fe:a7:fc:5d:9a:c9:cd:e7:04:cc:
                    58:4a:1f:8f:35:0a:cb:ce:9e:b8:ed:ea:9d:d6:7d:
                    8d:74:b0:b1:19:e0:f8:73:1b:9e:0a:70:cd:5d:be:
                    aa:82:7e:71:1d:4b:09:8d:be:2c:3a:a3:c4:7c:90:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:8D:77:32:4C:0F:D3:AA:FB:CB:B7:9C:39:D9:FB:0A:2F:DD:F1
            X509v3 Authority Key Identifier:
                keyid:3C:2D:F8:EB:7C:1B:D5:02:33:02:F6:11:A9:7E:05:D7:84:17:09:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PC3463wb1QIzAvYRqX4F14QXCTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/160CAB3A340011EF94779540C4F9AE02/PC3463wb1QIzAvYRqX4F14QXCTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:07:5b:24:1b:c9:ff:cb:fe:da:85:51:6c:3f:0c:91:ac:
         15:a9:29:d3:03:59:a4:61:06:ad:31:74:80:c2:8f:38:ef:a6:
         4b:73:75:df:85:35:f2:b6:e5:c0:d7:21:65:74:62:db:ad:c0:
         cb:47:43:40:b9:19:82:51:b6:fd:36:26:ad:21:fb:01:39:8c:
         b5:f6:a3:69:3a:28:9a:d7:30:21:01:8d:19:98:48:f5:78:90:
         b7:6a:9e:8d:b1:f6:6f:cc:b3:50:02:71:31:48:ba:d7:cc:10:
         c3:70:4c:8e:ef:d0:41:0b:a9:be:4c:aa:82:28:d3:1c:71:6a:
         a8:53:59:10:fc:71:38:73:2c:b1:77:65:89:52:99:0e:d3:b6:
         02:2e:9b:64:d0:a7:53:11:9f:ff:8b:fb:0d:67:86:5b:dc:41:
         1d:17:50:21:05:51:2b:68:dc:6b:61:5f:5e:ad:3a:61:b8:15:
         fb:73:37:45:59:96:53:a0:2e:78:b7:7e:f5:00:5b:e5:17:a3:
         8e:96:23:e2:77:b0:ea:4c:e7:ae:88:34:35:6c:a7:fa:cc:10:
         df:9f:96:0f:91:24:4c:a1:de:1f:0e:6f:aa:02:a3:ad:f3:2f:
         17:0e:db:4c:ef:1a:55:ca:9c:f8:05:a5:d5:0f:f9:15:d5:e9:
         c9:69:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:12:49 2026 by rpki-client