Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
File:                     pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json)
Hash identifier:          IFM/XqlgD3aVZKFAV60eWke+HuycP71B7paDX9CHY84=
Subject key identifier:   1A:40:F5:49:8B:DA:1A:3B:70:7D:C0:D2:1B:F9:1F:B2:48:47:59:F0
Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90
Certificate issuer:       /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
Certificate serial:       0760
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
Manifest number:          0758
Signing time:             Sun 20 Sep 2026 21:39:40 +0000
Manifest this update:     Sun 20 Sep 2026 21:39:40 +0000
Manifest next update:     Sun 27 Sep 2026 21:39:40 +0000
Files and hashes:         1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: Z8O3Lb0BFtnUs0ZKBMqB22EfqjCcWusdPSKRDhJPJV0=)
                          2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: 9HJlbi50cF2Fxh6WrQDmZeGcmpmSEkLRIgCF7xNLfio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl
                          rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1ED2, serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390
        Validity
            Not Before: Sep 20 21:39:40 2026 GMT
            Not After : Sep 27 21:39:40 2026 GMT
        Subject: CN=6ab0529c-e93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:90:2b:b3:1f:c7:53:39:86:37:0b:9f:41:
                    15:0b:d0:ec:bb:65:7a:73:9e:4b:a2:4e:d2:d7:75:
                    99:07:b9:26:9d:0a:63:4c:4f:7c:0b:ef:f3:ae:8e:
                    72:7b:64:fc:b4:03:f3:5a:33:a3:fa:f7:a5:6f:aa:
                    d8:10:2c:b9:fa:ca:b1:60:a5:51:e6:a4:9c:44:fe:
                    18:1b:62:74:4b:a7:e8:5a:9a:c1:ac:39:7a:66:6c:
                    ed:58:56:f1:3b:9f:c9:78:59:19:c8:dc:1d:2d:36:
                    91:3d:56:08:5b:4e:76:1e:e3:0b:04:f1:dd:9d:80:
                    82:88:6f:83:1a:99:b8:5c:72:73:cd:c2:bb:5b:21:
                    a4:5c:f5:a5:1c:31:5b:f3:0c:4e:f0:4b:9e:db:21:
                    b4:a8:01:03:21:65:ba:a2:23:3c:eb:f8:f1:f0:28:
                    fe:55:07:8b:80:9d:4e:23:f2:89:ff:58:a7:52:6d:
                    2d:24:7e:77:48:79:fc:60:7e:17:ed:c8:51:23:a7:
                    33:bf:4a:dd:d7:36:1d:84:63:d8:dd:43:ee:d4:89:
                    85:4d:d2:d2:86:e6:ea:ff:04:56:d4:72:89:8c:b9:
                    57:ac:79:75:6e:22:0b:c3:97:83:87:34:fb:b1:19:
                    89:60:6a:28:09:0b:f1:b5:1b:b4:ff:ba:56:80:a4:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:F5:49:8B:DA:1A:3B:70:7D:C0:D2:1B:F9:1F:B2:48:47:59:F0
            X509v3 Authority Key Identifier:
                keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:b6:b5:f7:f5:fb:18:8f:88:f8:11:21:ed:f4:98:4d:d8:
         e4:0d:6e:f3:4a:f2:35:35:e0:a4:90:88:1f:23:10:17:f8:90:
         0b:3f:81:e6:38:90:1c:a3:0a:26:73:3e:70:13:f3:37:a6:df:
         84:a7:9f:27:ed:56:8a:ee:39:e4:68:cf:4c:71:e6:8f:e3:2f:
         51:7f:ef:d9:79:94:9a:d4:60:e6:03:14:70:dd:db:9c:27:4a:
         ae:b0:26:55:93:ba:98:2e:a2:92:f3:e8:44:75:20:2f:92:57:
         f3:2b:5e:50:68:ff:37:a4:c3:99:1f:c1:01:7d:45:59:ef:15:
         b8:d5:0d:ff:ba:77:63:28:cb:55:11:eb:5d:dc:d9:19:9a:7e:
         eb:f3:88:6e:32:82:8c:f6:ef:68:8f:ce:16:70:c7:fe:c2:da:
         23:1b:23:fd:9d:20:e4:74:b6:f4:92:a8:ad:df:52:9f:49:d8:
         53:46:c6:5d:64:8c:6c:38:ac:9e:31:64:e0:f9:64:29:81:2d:
         a1:cf:d1:f5:81:bc:b9:2c:aa:01:c5:a9:bd:52:94:a7:e7:b8:
         3a:15:3e:13:39:ad:be:7d:5c:aa:65:15:0d:99:2d:0d:2a:68:
         23:6d:30:a9:e5:bf:cc:16:14:70:6b:00:66:b4:c5:4e:d0:d2:
         5e:08:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:22:54 2026 by rpki-client