Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          AquV3xxyj8o7qJIG8fjUgYrk2TG7opDjKBS9zqB/jDA=
Subject key identifier:   B2:54:D9:4B:27:7D:25:A9:66:E4:D4:7D:54:3F:DE:8E:05:77:33:4F
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0499
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          0490
Signing time:             Wed 21 Oct 2026 00:09:13 +0000
Manifest this update:     Wed 21 Oct 2026 00:09:13 +0000
Manifest next update:     Wed 28 Oct 2026 00:09:13 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: uZOy1NWiMkAadTNQGDLxhcypi0g2VSzvlucxWLLA0Zk=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 00:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Oct 21 00:09:13 2026 GMT
            Not After : Oct 28 00:09:13 2026 GMT
        Subject: CN=6ad802a9-fa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:38:15:cb:ed:66:54:57:3c:3c:49:5f:2b:
                    66:82:9a:c8:35:b9:53:ac:55:fd:8c:74:e9:ef:32:
                    5e:6f:8b:8a:d7:0c:da:8e:01:6d:c2:a3:0c:6a:a1:
                    18:57:cf:70:e2:10:3d:33:bf:22:bf:f0:50:82:51:
                    0b:69:ab:71:1a:48:1e:4b:e6:f6:6a:90:c9:77:5b:
                    c2:85:be:e6:d0:44:25:3a:3c:16:7c:ba:b1:5c:62:
                    8d:a6:d7:5d:fa:a1:35:ba:93:9a:d8:7c:3a:75:2b:
                    59:1a:fa:20:f5:1f:63:5c:93:0f:10:c2:86:22:9f:
                    41:90:67:3c:dc:47:a4:50:10:a7:b1:5d:0a:b5:b8:
                    21:5e:31:f3:0c:f6:9d:a4:e9:2c:a8:20:89:ec:75:
                    50:c1:87:1c:51:12:29:1f:dc:fd:57:cb:67:d2:d9:
                    df:f8:1c:51:de:f3:ac:3e:2e:99:18:24:b2:32:9b:
                    e6:d7:17:6f:39:4b:ee:9e:0c:76:59:e4:a1:80:98:
                    d9:f2:87:f5:b4:76:d5:66:ce:14:69:86:98:b6:5f:
                    2d:7d:29:41:6d:ec:1e:64:88:8a:fe:a6:e3:80:c9:
                    da:77:1d:67:ee:2e:68:cc:e3:53:29:3f:fc:72:93:
                    02:94:54:3c:84:1f:b5:a5:6c:ba:74:82:db:7d:e9:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:D9:4B:27:7D:25:A9:66:E4:D4:7D:54:3F:DE:8E:05:77:33:4F
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:64:4f:79:9a:59:47:b1:06:ea:51:a0:a8:da:71:c1:3c:be:
         3c:4e:93:37:c8:38:d8:91:53:90:d8:6d:2c:50:4e:49:7a:87:
         c1:14:13:15:29:d8:b6:a2:74:35:d3:fd:12:64:77:ee:f6:18:
         ec:5b:5c:03:16:8f:93:31:50:b6:ef:e6:61:6e:6b:8a:07:49:
         9c:56:b2:43:d8:63:d8:f5:9a:f3:df:9c:3d:24:ac:b4:3b:a8:
         fd:b8:4b:e7:79:e0:d6:b6:19:3a:10:ab:e0:0e:e8:48:a0:21:
         bb:ff:da:22:64:6c:61:0d:ab:b1:e5:72:47:2d:68:28:94:dd:
         ad:b5:b8:3f:c3:ac:60:aa:b7:8a:0b:7b:3e:80:a9:3d:8e:3b:
         88:18:6e:ee:35:20:e7:20:61:7d:9f:47:17:f3:a5:ae:cb:70:
         90:87:98:c1:0e:5e:de:75:1d:c2:b2:3c:b1:30:ec:12:64:a8:
         f1:8b:60:07:91:d6:14:5c:da:ab:0c:ad:bc:e4:a4:1f:93:c4:
         09:4a:ae:32:4d:74:fc:99:b1:f6:ee:9c:ff:53:46:a0:06:ac:
         9b:20:57:05:1d:46:7e:bb:98:43:e4:b7:04:62:73:da:e2:f5:
         00:50:55:63:8d:5b:72:1b:c3:4f:9a:25:1e:99:c3:96:cd:62:
         9c:a6:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:40:08 2026 by rpki-client