Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
File:                     PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json)
Hash identifier:          U/MjrbIj662stu3MctP2VXwME0T6WNwgp9Uy2RmbaY8=
Subject key identifier:   28:5C:5C:1F:9A:3D:2E:1C:E5:3F:D5:54:46:FA:13:2E:47:C7:9F:D0
Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F
Certificate issuer:       /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
Manifest number:          A8
Signing time:             Mon 21 Sep 2026 07:11:56 +0000
Manifest this update:     Mon 21 Sep 2026 07:11:55 +0000
Manifest next update:     Mon 28 Sep 2026 07:11:55 +0000
Files and hashes:         1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: ob8uodS1WPdfpcJATkx22qfU5b3f94Rrz//XxQjhk6U=)
                          2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: RKJiWEFRRxfC255nnKMBMyY+0j0SvD2OXb6aSU3b+vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl
                          rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F
        Validity
            Not Before: Sep 21 07:11:55 2026 GMT
            Not After : Sep 28 07:11:55 2026 GMT
        Subject: CN=6ab0d8bc-a7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:a0:7a:d2:a9:00:a5:aa:db:82:d7:c5:db:
                    db:6b:d7:86:86:5d:d7:ee:c5:71:f5:1f:73:f0:c2:
                    63:22:07:c4:34:9b:65:b7:ab:8f:d3:63:5d:02:0f:
                    28:d8:50:37:a6:a3:71:13:7e:e6:fa:09:13:dd:aa:
                    55:48:aa:c2:bb:2a:b7:4c:fb:1b:ff:29:9b:99:c2:
                    e1:fa:23:72:3b:30:56:db:dd:c1:bd:bd:bf:c0:a5:
                    45:5b:80:00:e5:32:f0:20:30:07:6e:77:50:a3:79:
                    15:71:72:70:96:95:54:58:18:47:c8:07:43:3b:bd:
                    46:b8:f2:d7:24:d6:7e:6f:bf:58:fd:f3:b5:c9:09:
                    18:a4:4f:ac:b3:ea:f4:87:95:9c:e2:21:a5:0f:89:
                    4c:69:e9:3f:b3:d3:18:e1:f2:6a:19:0e:15:25:7d:
                    71:f9:bc:e4:da:14:1a:6d:e1:20:8a:ca:06:a4:55:
                    d5:bc:d0:2b:cc:47:0f:30:84:ee:43:e8:09:3a:aa:
                    ac:08:c5:54:07:43:f2:5b:53:a2:db:9e:a1:11:1d:
                    fd:15:c2:33:7d:02:cb:a0:eb:e0:7a:db:c3:86:f0:
                    4f:ee:93:45:07:7a:0d:c1:b2:01:10:ef:ae:32:2b:
                    41:e0:52:87:6c:98:07:a4:02:66:74:c8:3f:a3:fb:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5C:5C:1F:9A:3D:2E:1C:E5:3F:D5:54:46:FA:13:2E:47:C7:9F:D0
            X509v3 Authority Key Identifier:
                keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:5d:a0:c5:bb:55:95:ac:d4:2c:34:21:3d:fe:08:4f:a9:
         76:ea:a0:29:53:7f:e3:1d:99:c7:07:5a:c2:36:47:6c:24:6c:
         cf:0b:cb:92:56:8a:4c:2c:9d:e7:cf:17:39:9a:4c:8f:31:05:
         9a:1e:8f:2f:db:23:83:7c:ab:8f:25:78:5e:af:96:f7:62:45:
         d2:ce:10:14:8a:ea:18:ef:34:0e:6b:b0:07:46:8d:14:ad:6a:
         fd:cf:28:b5:45:c7:27:be:5f:87:37:30:ee:a9:0f:75:84:b6:
         40:5f:74:3b:a8:68:36:92:a6:cf:e0:49:16:68:9e:af:6b:d0:
         9e:f7:14:a4:b8:3d:77:94:59:ab:5e:05:02:db:29:0c:dd:1a:
         89:82:43:56:15:6e:ff:87:8e:d9:25:86:fa:6f:15:cc:7d:05:
         c0:31:d9:90:20:a3:c3:63:f3:cb:fa:77:33:d7:81:1f:77:29:
         e6:6e:4e:07:40:4e:8d:23:20:f2:fe:78:de:b3:6f:d2:57:59:
         b0:d5:da:92:8c:02:b9:df:29:bd:ca:4e:7c:c9:c8:2f:94:e6:
         a7:aa:27:31:f7:11:74:f4:73:6a:48:ee:c5:b1:b4:76:fe:c2:
         9a:c3:f4:f8:34:52:6f:59:ae:0e:55:8f:76:18:13:65:ee:36:
         79:a6:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:47 2026 by rpki-client