Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File:                     Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier:          poOB6ukW755xqvAD8P32jjw36CdpC9BXR0dtjDqexf0=
Subject key identifier:   2B:86:34:C5:B0:A2:BD:F3:8E:37:3C:A9:A6:41:69:31:32:B0:5F:17
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2D0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number:          2CE6
Signing time:             Thu 08 Oct 2026 15:32:35 +0000
Manifest this update:     Thu 08 Oct 2026 15:32:34 +0000
Manifest next update:     Thu 15 Oct 2026 15:32:34 +0000
Files and hashes:         1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: Ex1Rx7KyAhTrLw4PFs8cMonoT5w5f7zXKWuzqIXn/PY=)
                          2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: SANw9dLH9bXdcBVHXUebGfCRir+vdFPmPdYxlp8aviU=)
                          3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: YAU3ILtOw6FXLUFev8JWBOKxyiChialBJy1oqxPurUE=)
                          4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: m42CkLhr+GKHo0TtapwYGoLo4QIiXG0fyh2xqAw/LvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11534 (0x2d0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Oct  8 15:32:34 2026 GMT
            Not After : Oct 15 15:32:34 2026 GMT
        Subject: CN=6ac7b793-3516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:0d:00:ac:f6:de:f1:58:f2:62:2d:01:85:
                    4b:59:34:5a:96:16:ad:ed:02:d6:b2:b0:f1:3b:b6:
                    e2:d1:b2:3e:c9:e3:76:18:79:a5:b4:f1:33:99:15:
                    7e:3b:4e:7a:9a:6a:70:97:55:a1:29:2f:be:76:18:
                    87:8c:0a:ab:b3:8a:33:80:cb:6e:95:76:8b:71:7f:
                    bf:26:6c:e4:41:96:8e:dd:ee:ce:d5:1a:fd:05:16:
                    33:60:d0:77:46:f5:d3:9b:dc:05:b4:28:e7:c2:09:
                    b3:e2:ef:1f:f3:c5:44:87:b5:27:ba:28:0e:25:52:
                    ee:45:68:ec:62:3c:cc:77:69:6c:95:00:54:80:fc:
                    7b:00:2b:45:db:e1:50:b7:f7:fd:0c:b9:73:5d:cb:
                    43:d9:66:ea:ab:73:68:f7:dd:9a:49:0c:f5:04:31:
                    09:fc:2f:f4:f7:70:a9:ab:97:fa:f4:83:38:15:52:
                    35:d1:1d:13:6e:3c:26:c6:7c:2e:32:91:12:f6:3d:
                    21:9f:92:e3:4d:27:dd:68:9a:1c:1c:e4:9c:d2:3f:
                    5d:28:cd:08:7c:30:83:49:23:d5:00:54:09:5e:70:
                    a5:a7:30:03:37:ab:23:ad:72:b7:fd:b4:50:63:3d:
                    d8:0d:eb:a9:4f:5a:1d:2d:b6:67:3a:9d:4d:72:62:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:86:34:C5:B0:A2:BD:F3:8E:37:3C:A9:A6:41:69:31:32:B0:5F:17
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:53:b5:c5:54:12:75:ac:66:22:84:22:fd:af:aa:e0:8b:
         6b:a5:b9:1c:1d:d7:db:df:57:e6:09:83:e3:54:ab:5f:d2:bf:
         47:86:e8:ac:c5:7c:95:28:ee:5e:8d:ab:05:38:c4:f7:a1:4f:
         01:96:87:8a:69:97:d7:37:c7:f5:f7:52:7a:85:03:ee:e6:34:
         b6:f0:29:52:0e:5e:18:4d:c9:9b:6d:97:e0:3f:ae:7d:fd:c8:
         f5:7d:4f:80:89:08:1d:60:f4:6a:06:dc:fb:9a:34:cd:b3:46:
         4a:3f:6d:ab:e3:0d:32:9a:a5:b8:1b:28:d0:0f:e3:cf:71:6a:
         30:30:50:3e:b4:43:85:a3:b5:9d:9f:93:81:03:4a:d3:bf:ef:
         47:f4:82:ef:d2:e7:34:56:c7:a1:4b:78:c9:b4:27:15:f2:44:
         9f:dc:80:d2:b9:f0:61:77:6d:1c:9e:4a:7b:b7:dc:cf:99:06:
         cc:82:e6:5f:86:cb:2e:77:2a:65:75:e5:d1:8d:5a:46:70:1c:
         f5:1f:d8:5b:a8:bb:03:ed:e4:be:31:58:0a:6b:7d:ed:69:3e:
         22:bd:fa:88:f0:46:61:db:ff:e1:44:05:7b:fd:fc:6a:54:60:
         71:de:7c:28:9c:4c:34:ea:12:93:8a:a2:d7:28:fb:d2:03:db:
         98:08:30:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:49:50 2026 by rpki-client