Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File:                     Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier:          jjdmuUtya7dvRP8fCvFdxUWX7xI7WalI2nJ6nzwe27U=
Subject key identifier:   47:B0:65:D0:5D:E1:EC:29:95:20:9A:CD:C6:B4:58:C5:49:35:38:18
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       08D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number:          08C8
Signing time:             Fri 18 Sep 2026 20:23:36 +0000
Manifest this update:     Fri 18 Sep 2026 20:23:36 +0000
Manifest next update:     Fri 25 Sep 2026 20:23:36 +0000
Files and hashes:         1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: uEkGtYZNarZY2GyCuC0XUcYd/sIE7t6ZuFbno4qKFUc=)
                          2: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: FHMJGrrxUvRBeY9Ihx5SI/go/dc2sMa74hHT1NwYti8=)
                          3: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: Oq5n7YTpwRwxE6QPyxWPtqKwDnI0oieXsSLQCrD8sXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Sep 18 20:23:36 2026 GMT
            Not After : Sep 25 20:23:36 2026 GMT
        Subject: CN=6aad9dc8-55d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:6c:66:fa:63:4c:1c:77:db:02:63:4f:0f:
                    c7:54:6f:bb:79:00:04:a1:df:29:9a:8e:4e:e6:6a:
                    42:76:9f:24:a5:88:e2:3b:c5:35:91:30:13:46:03:
                    a7:de:77:73:15:8a:2a:be:0f:72:ba:d3:46:7d:5e:
                    c8:dd:75:75:63:0d:78:46:90:05:f6:6e:d3:b4:1d:
                    09:ee:18:04:a6:ca:ad:be:33:a9:3d:bb:ad:f5:ca:
                    25:4a:39:7b:8b:37:ca:1d:3a:b3:d1:54:e7:6c:e2:
                    b0:ad:4b:ab:a3:76:e0:c2:c7:58:10:c8:e0:40:31:
                    12:cc:ff:66:e4:17:73:8b:fd:81:bf:63:23:3d:08:
                    e8:01:49:e5:a7:34:65:d0:3b:d3:ef:25:aa:be:cd:
                    bc:ab:cf:fb:53:d5:7c:48:ee:50:7d:42:65:c2:d9:
                    67:9f:74:00:a4:44:df:4e:58:76:ec:4f:e3:cc:c0:
                    6e:bb:15:01:1c:f6:84:5c:61:88:82:0b:64:08:70:
                    1b:d9:20:0a:66:ea:2a:02:fb:1b:2e:09:20:9d:61:
                    ea:28:99:12:d1:b8:21:76:0e:e7:d5:9d:92:b4:84:
                    f0:f7:3f:fc:31:9a:6b:00:41:c7:78:7e:6f:18:e3:
                    8a:27:ce:8a:1f:78:f3:cc:54:b0:28:ce:64:14:15:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:65:D0:5D:E1:EC:29:95:20:9A:CD:C6:B4:58:C5:49:35:38:18
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:b5:4f:98:5b:fc:67:48:05:92:71:27:97:f8:7f:c3:1c:
         1d:77:b6:dd:e3:2a:e4:f6:cc:c4:31:d7:ba:f1:ef:dd:6a:bb:
         a7:67:95:1a:f7:d1:1f:af:64:09:4c:79:12:6e:29:a7:a7:94:
         04:fe:f2:54:e1:7b:01:eb:78:1a:ec:0c:f9:e8:d0:d7:85:46:
         1b:25:ef:e5:b7:cb:93:c5:0a:69:1f:b3:74:6b:14:19:0c:c9:
         2b:b1:07:e5:48:94:b6:5c:e5:a3:56:f8:79:e2:b3:a8:37:c3:
         64:6b:94:c0:04:ef:6d:08:1a:c9:ca:05:13:f4:42:f6:5c:60:
         28:23:f6:f2:08:34:2a:02:5a:51:d1:77:90:a2:c4:b2:73:5a:
         42:9f:4c:1c:70:69:3e:0f:eb:72:a5:a5:5d:d7:2c:d5:25:bb:
         3c:27:ba:26:b1:43:38:db:c0:68:c0:47:98:86:ec:35:d2:23:
         67:c2:d2:c5:59:9b:11:31:4c:90:5e:cc:32:f2:14:a2:c0:f9:
         40:87:71:9d:99:d9:d1:5d:fd:e5:59:87:a2:78:e5:ab:74:41:
         3c:34:1b:94:69:e0:f3:21:74:3c:d2:e4:ad:02:80:93:0e:fe:
         68:3d:d0:83:55:8b:7f:fd:68:45:02:53:9c:b8:02:1c:10:3e:
         6e:22:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:02:35 2026 by rpki-client