Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File:                     tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier:          +7chA2T+5fyKlD135iabsinEde/ss1z802xzsMuVJS8=
Subject key identifier:   7B:2E:3E:66:D5:D5:55:D5:A5:36:4B:BF:49:E1:6A:31:D3:F6:31:03
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer:       /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number:          0276
Signing time:             Fri 04 Sep 2026 18:31:24 +0000
Manifest this update:     Fri 04 Sep 2026 18:31:24 +0000
Manifest next update:     Fri 11 Sep 2026 18:31:24 +0000
Files and hashes:         1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: GUAgC9MJZ827hEV37A38amWkFcd4AfIsV+MaQXtxm1w=)
                          2: DD40AF5AA77E11F1AC50A9373F11F970.roa (hash: 6Uowsef2jJ1DQ1gBAp/T7MapE+BFd720LL4HH47jr0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
        Validity
            Not Before: Sep  4 18:31:24 2026 GMT
            Not After : Sep 11 18:31:24 2026 GMT
        Subject: CN=6a9b0e7c-5d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:23:e2:34:19:bf:f1:8f:87:8c:ed:be:ac:
                    d3:5b:9a:ac:bb:62:ee:c5:20:09:0d:f8:1a:b9:c3:
                    15:49:e1:a4:f8:35:a7:d1:65:8c:99:9e:01:c8:f4:
                    c0:a7:2c:6f:a5:ba:f9:4f:1c:78:04:27:18:15:99:
                    d4:d2:f6:cd:12:31:99:9a:2d:00:c3:a6:eb:8e:44:
                    37:d0:71:b8:a3:0b:95:de:fb:e0:ee:61:4c:2b:fe:
                    f5:ed:9a:dd:f7:b6:de:c1:ce:82:c9:01:53:a8:64:
                    73:6b:e3:93:30:14:1e:b2:7a:eb:61:a4:38:3b:af:
                    b0:8e:7d:0d:87:e5:69:59:d7:11:b6:f0:8a:44:87:
                    0a:c4:fd:1d:d8:2b:74:29:22:dc:ac:5a:cc:5b:9c:
                    d2:a3:5d:4d:ef:c1:36:6a:ac:b4:67:e2:72:7a:0d:
                    9c:02:cc:bb:ea:9c:00:77:4b:e1:aa:25:fd:fc:7e:
                    cf:96:ef:5a:4a:99:35:29:b6:1f:87:3e:3d:14:c8:
                    ea:62:32:06:fe:e5:8b:5b:03:07:04:58:43:bb:27:
                    dc:1b:4e:70:d8:88:3a:96:80:c0:13:4e:bc:de:6a:
                    de:4d:54:b3:d2:31:64:8c:b0:80:66:cd:1b:79:e2:
                    10:e0:df:18:7e:9a:0e:46:ab:62:51:d4:af:ee:1f:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:3E:66:D5:D5:55:D5:A5:36:4B:BF:49:E1:6A:31:D3:F6:31:03
            X509v3 Authority Key Identifier:
                keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:80:aa:80:d3:26:30:b2:f0:5b:df:6c:a6:f2:be:78:86:c9:
         cd:a0:ce:3b:9e:3b:60:8c:c4:fa:0b:b0:57:c3:5e:48:e6:b3:
         20:a2:d5:36:f2:72:43:e9:68:ca:92:2f:db:88:a7:08:58:cd:
         6c:10:ec:41:73:a0:2b:c6:2e:a3:38:df:2c:03:ce:70:6f:b2:
         3d:f6:7e:c6:fa:d3:f2:81:d7:31:24:29:b2:1f:e6:6c:78:b0:
         b9:ca:51:80:d5:10:07:88:51:d1:d0:8c:78:96:5f:50:c2:45:
         55:61:cf:54:2e:10:ec:fd:a3:28:61:3c:e3:b4:3e:e4:7a:45:
         62:eb:20:58:0d:8e:67:5b:b7:72:6d:c9:b9:98:23:c7:f9:ad:
         46:3a:28:69:b2:6e:88:da:4a:bc:8e:48:64:33:e4:ee:c1:88:
         9f:9d:32:ca:4c:7f:4c:67:20:c6:11:a0:8d:4b:2f:32:14:cc:
         03:9a:46:06:ca:ef:3e:19:24:f2:43:26:0c:14:d6:7d:b5:e8:
         3c:a0:7d:ee:a7:9a:78:7a:60:aa:a3:b1:3c:25:49:02:90:02:
         32:9d:71:48:5a:ec:0b:3f:b0:4c:d8:56:f0:8d:9d:dc:ab:13:
         10:f9:ef:19:b4:c7:49:02:68:ca:21:6a:f8:fc:41:55:bd:88:
         17:c8:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:39:55 2026 by rpki-client