Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft
File:                     aTyLTLomsG0s-roPm-TTffDd_z0.mft (raw, json)
Hash identifier:          luE8MhkiqsfnHf1o0iMAR+3c/Gck3wRNXZqNcXGGndQ=
Subject key identifier:   CF:10:33:E8:D7:BB:8F:25:30:2D:43:17:D6:ED:D8:65:8A:3D:30:65
Authority key identifier: 69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D
Certificate issuer:       /CN=A911ABF4/serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft
Manifest number:          1B40
Signing time:             Fri 02 Oct 2026 17:37:18 +0000
Manifest this update:     Fri 02 Oct 2026 17:37:17 +0000
Manifest next update:     Fri 09 Oct 2026 17:37:17 +0000
Files and hashes:         1: aTyLTLomsG0s-roPm-TTffDd_z0.crl (hash: OoEwBui3HOxeidYh/Sdwjk1glkhWBB6lBLjifJJWP68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl
                          rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABF4, serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D
        Validity
            Not Before: Oct  2 17:37:17 2026 GMT
            Not After : Oct  9 17:37:17 2026 GMT
        Subject: CN=6abfebce-f098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:ef:db:c2:df:84:67:ba:47:78:03:7a:75:
                    b9:a3:93:e1:63:61:22:3e:b5:7f:65:27:4d:c0:23:
                    94:9c:75:b7:99:61:8a:be:89:f7:96:05:3a:48:40:
                    45:e7:3d:b5:2c:74:a0:7c:6f:93:19:2c:35:a5:76:
                    ae:1e:64:b1:16:ac:8c:ee:d6:0b:a8:f0:a5:77:3f:
                    8a:a2:b4:db:c4:f0:53:1d:08:9f:23:fc:75:69:b7:
                    92:8a:19:b3:36:08:9c:41:ff:9e:8e:7b:8c:18:e4:
                    e8:96:fc:0b:de:a5:0b:1e:f4:41:64:b6:2a:1b:f8:
                    38:78:8a:bc:cf:1a:34:18:4e:4f:fc:dd:78:22:9a:
                    fc:44:57:7d:93:a7:74:44:f9:e3:d0:cc:ab:5f:65:
                    c2:44:36:f3:4a:11:73:e0:95:6a:9e:76:4a:0e:5b:
                    0a:c7:fe:07:90:3d:42:b3:6c:54:d2:c6:88:b4:41:
                    ad:f3:a9:28:54:ec:8a:f8:c9:f3:b6:19:6c:ce:43:
                    ba:23:8c:c7:0b:e1:5d:3f:ba:06:c0:f9:92:1b:91:
                    a3:24:b7:44:5c:3d:bb:70:ac:31:2f:b1:73:03:ab:
                    9e:75:b8:01:0e:04:2f:35:b7:2c:c7:61:d9:30:8f:
                    c2:1a:20:76:41:94:75:22:f0:d5:a4:be:bc:bd:62:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:33:E8:D7:BB:8F:25:30:2D:43:17:D6:ED:D8:65:8A:3D:30:65
            X509v3 Authority Key Identifier:
                keyid:69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:38:25:45:1d:ca:34:8c:c3:ff:29:0a:e3:36:75:5b:aa:
         34:a7:26:db:54:50:03:30:93:3b:9d:7c:f3:45:cb:1e:0e:13:
         d0:67:b4:49:6a:66:1e:1d:1f:2b:94:c0:00:1f:ae:2f:25:2e:
         d5:6e:db:f8:8f:8c:b2:6a:49:08:a8:fb:96:ef:dc:2c:e2:4f:
         48:46:b5:ac:a4:aa:f4:09:0f:36:c3:67:56:d7:67:42:a5:25:
         b5:e2:32:6f:c3:3b:98:c0:1e:44:e7:d9:ff:54:14:aa:a2:55:
         b2:e3:03:e6:ef:6b:bf:90:79:5e:0a:9c:16:07:bc:89:19:68:
         fd:9b:01:ff:67:c7:23:fb:fc:a1:a4:2e:d5:54:13:94:ab:21:
         ae:18:74:d6:31:dd:b4:c2:fd:0b:2b:1a:c9:80:75:40:a4:d8:
         c3:fe:a9:89:1a:91:5e:90:20:49:dc:c0:fe:b6:c1:ea:a9:3b:
         39:08:7d:37:a4:9d:89:d1:3e:57:bc:2f:c8:4b:f1:77:56:08:
         c6:b0:32:6a:40:c9:dc:12:ff:34:3b:11:b6:9d:bd:b6:67:ae:
         89:0d:1b:ff:a6:f6:48:f5:27:ff:c5:b6:c7:84:9a:fd:ea:bb:
         6b:eb:e9:83:be:d2:40:c5:8f:3d:30:bc:da:23:6c:15:5c:27:
         01:05:c8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:39:55 2026 by rpki-client