Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
File:                     tMuMrEr2jfxZVs5gy7DYDTECkYw.mft (raw, json)
Hash identifier:          9dt1PWQlD0p42uWEyHOoJDESTvkWLwzUNQZMs6Ky9SU=
Subject key identifier:   44:1F:D9:D9:CC:72:BB:A7:B4:F8:8C:EF:EF:3E:43:27:F5:7D:90:E1
Authority key identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C
Certificate issuer:       /CN=A9110477/serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
Manifest number:          0121
Signing time:             Tue 25 Aug 2026 05:46:23 +0000
Manifest this update:     Tue 25 Aug 2026 05:46:23 +0000
Manifest next update:     Tue 01 Sep 2026 05:46:23 +0000
Files and hashes:         1: tMuMrEr2jfxZVs5gy7DYDTECkYw.crl (hash: /MejTeR+TiWBgXhqjZqpu8ipP4ptTG/l9O80G1SzRSs=)
                          2: 189FDE6A596311F0BCB5E17AC4F9AE02.roa (hash: vudnotq5zPioc2b6/woyFfprKiTSvw7dLP/PDPHELj8=)
                          3: 04F8FE74236011F19FB9875AB4833773.roa (hash: 0DWCXTNXwo+nNelX8aA2I4PXzkl5Yyh27nw5aWvZ4Tg=)
                          4: 1918AF02596311F0BCB5E17AC4F9AE02.roa (hash: wvF0NPf+pWVpkUI8Xz/BX359fCDobglWwTSMQ7Pc0b8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 05:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C
        Validity
            Not Before: Aug 25 05:46:23 2026 GMT
            Not After : Sep  1 05:46:23 2026 GMT
        Subject: CN=6a8d2c2f-6bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:bc:f0:45:72:65:a3:23:d2:4d:6c:ae:ec:
                    11:2d:56:33:f0:5f:49:90:9c:bb:31:dd:ac:a9:47:
                    3a:39:56:bd:c1:db:e0:25:a8:94:88:b3:f9:0b:0d:
                    75:25:53:5e:55:a1:54:be:68:1a:fe:21:ba:2b:a4:
                    26:88:bf:32:60:42:a6:e4:f3:c4:9d:4c:03:78:ff:
                    c7:3c:9e:cb:19:bc:f6:24:31:52:40:c1:2d:3f:f1:
                    51:71:f3:fa:f4:bb:73:73:9d:de:91:c0:5f:01:2f:
                    a5:fe:5f:ef:d1:3a:81:8b:46:75:59:b5:4f:31:0c:
                    6a:6f:b3:cc:3e:60:2b:19:97:b0:6d:90:0e:cb:e6:
                    f8:c8:97:99:50:03:2d:5e:7d:60:21:e0:15:50:76:
                    23:3d:77:b1:99:89:dd:24:0a:46:9b:73:63:ae:ed:
                    04:96:9f:da:ae:3e:46:60:95:b4:d3:49:3b:bb:2d:
                    30:fe:7e:30:91:d7:64:8c:3f:81:29:8e:38:a4:8b:
                    51:a8:d5:a9:eb:6a:94:54:21:7b:a5:ce:0b:1a:99:
                    07:65:a5:85:04:5f:db:10:d2:89:6c:68:79:bb:33:
                    2d:28:3d:52:31:e9:17:f3:fd:8d:b5:0c:46:46:17:
                    16:10:21:a4:5e:12:f5:e1:8e:fb:92:ee:32:fb:a3:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:D9:D9:CC:72:BB:A7:B4:F8:8C:EF:EF:3E:43:27:F5:7D:90:E1
            X509v3 Authority Key Identifier:
                keyid:B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:db:5b:d2:55:33:41:7a:c4:6c:0c:a1:0d:79:a9:f2:c1:ff:
         91:a5:ec:2a:3c:1c:6d:2e:83:4b:ed:c7:01:52:60:b2:b8:5b:
         d8:d5:bf:aa:ff:b4:8b:f7:b9:2e:d8:be:5d:82:95:9c:22:e1:
         fb:ba:38:47:9b:6e:7c:fd:1c:f2:a6:14:72:d9:89:17:54:d8:
         02:cd:cc:27:3a:06:d4:8e:71:d8:38:09:16:b0:68:96:70:4d:
         04:76:88:44:9f:45:88:a6:8c:6f:22:69:83:88:38:d9:41:75:
         b1:3c:c2:15:eb:4d:e0:12:95:15:9f:67:8b:6e:2d:0f:05:b8:
         59:f8:27:d4:47:8f:9a:8a:ae:f2:92:2e:4e:b5:36:2b:88:b9:
         9f:1c:e9:68:6d:84:9c:08:eb:43:21:7c:04:9f:d3:5e:53:16:
         94:de:18:4c:37:6d:ec:54:d5:32:05:1f:7e:68:7b:e8:ce:b9:
         58:31:f0:5c:81:1c:a8:09:43:3b:9b:52:72:97:32:dc:de:21:
         d3:88:44:8c:78:8b:02:66:5f:f7:38:2d:2b:71:43:4b:06:be:
         ed:71:0a:28:ba:0e:40:74:0e:7e:75:a0:fb:f2:20:47:dc:a3:
         47:fd:fc:08:d8:6c:d3:4d:2d:55:c8:de:58:5f:cc:b5:4d:e1:
         9d:e1:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:02:47 2026 by rpki-client