Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
File:                     tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft (raw, json)
Hash identifier:          3uyB5DVTMfpSma2sNLEPgfrzZTa2b5SJkBgWU9cd4Ow=
Subject key identifier:   FC:41:CA:85:1F:4D:5E:70:CB:78:85:68:07:1A:2B:FC:06:78:9F:1F
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
Manifest number:          054E
Signing time:             Sun 25 Oct 2026 00:58:40 +0000
Manifest this update:     Sun 25 Oct 2026 00:58:39 +0000
Manifest next update:     Sun 01 Nov 2026 00:58:39 +0000
Files and hashes:         1: tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl (hash: XCrloaOJLMU/mUIgNDBjVSKL4QGAEY8lQse25hrDd2o=)
                          2: FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (hash: 2q+lWS2CUgMFYIlBjU7DC0A+HS/Aj3HMo0EsOIG4/8M=)
                          3: 890FABCEC41211F1B56440616F11F970.roa (hash: nBFBXxNVwttmyXqPiPEcZZexcXkDChMfQuQVxXkx33A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Oct 25 00:58:39 2026 GMT
            Not After : Nov  1 00:58:39 2026 GMT
        Subject: CN=6add5440-9b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:01:3c:e9:f4:c2:78:e7:fd:a5:6d:8b:ae:90:
                    a4:a4:c2:d9:e5:e2:3b:0a:02:07:84:bc:10:69:a7:
                    3a:f8:53:68:93:69:56:32:7d:f0:c8:07:7c:58:9b:
                    b0:65:e4:0f:1e:c3:82:e8:cf:f8:e6:9c:76:bf:2c:
                    d4:45:e4:6d:5f:14:a6:e4:64:c4:43:f8:81:4d:2f:
                    bf:b1:5b:27:14:ed:4d:b4:be:72:8f:f9:5e:06:2c:
                    f6:50:b3:4f:d7:fa:7d:7c:6a:bf:30:31:15:ef:09:
                    52:8e:c3:d9:2a:d6:ee:43:fd:95:09:d9:cf:2c:38:
                    27:c7:fc:c0:d1:46:58:2b:60:73:cb:1c:9b:d4:a6:
                    7b:e5:2c:47:be:55:fc:28:97:ee:63:e4:ad:e3:c3:
                    69:8a:83:ed:9e:86:70:7e:10:8d:a3:4d:77:bc:ea:
                    77:2d:2b:cb:63:d2:e5:09:a3:b9:3a:86:16:e5:58:
                    bc:1f:69:b1:8e:7f:a2:78:c6:2d:30:85:83:dd:5d:
                    6c:59:81:5c:aa:80:8f:14:3e:e8:36:fb:ad:b5:42:
                    0d:61:09:26:43:ce:fa:7f:ca:4d:14:63:45:0b:e3:
                    75:6b:48:d7:f6:99:f4:ca:26:b6:cc:70:f8:31:3d:
                    b4:86:35:c1:25:15:bc:83:24:3c:a3:23:d3:8f:05:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:41:CA:85:1F:4D:5E:70:CB:78:85:68:07:1A:2B:FC:06:78:9F:1F
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:59:82:8b:03:d8:aa:e4:0e:ac:db:c5:7c:06:df:60:ef:
         4d:2b:0b:5a:1d:e1:c4:0f:cc:1a:51:aa:4a:bc:f2:85:1e:30:
         39:39:da:bc:05:84:5d:34:15:28:c0:5e:ab:88:36:9c:35:41:
         9b:52:5b:25:95:39:24:b7:cc:3a:de:83:1b:88:8e:f1:6e:32:
         a6:48:c5:6e:ef:4c:49:86:b9:cd:76:e8:9f:4b:fe:95:40:66:
         2e:43:92:9b:d3:84:77:82:cd:40:0d:c5:97:23:5c:00:96:fa:
         86:22:a3:f2:98:68:bb:0a:d5:69:14:c8:5f:a9:3b:66:94:85:
         fc:f3:f5:70:f5:7a:e7:ee:8b:78:25:44:2f:5c:2f:cf:83:76:
         f0:4b:16:83:95:6b:43:65:ed:e3:10:d0:0a:3d:2e:67:0c:5c:
         7c:ea:67:4b:34:ca:bd:01:89:fe:7d:19:53:ef:20:10:f1:f9:
         34:80:51:bd:af:3c:44:ad:7b:a2:a0:d2:2d:9b:0b:dd:92:7f:
         f7:84:07:ff:ea:d9:6b:99:be:66:77:66:80:57:c3:bf:70:46:
         54:2f:33:68:aa:d6:f8:b1:e0:7e:98:f5:b4:d5:7a:2d:c1:ce:
         db:e9:9b:0d:09:fa:c1:7b:d8:cf:ff:2a:d7:d3:40:7d:0e:e9:
         0b:e3:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:39:06 2026 by rpki-client