Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
File:                     TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json)
Hash identifier:          nLTlqUVtrwPrrLCtfWVLeIlZSf755ULueZym2rdnb2I=
Subject key identifier:   E2:E1:B4:8A:83:BE:77:0D:3B:11:EE:92:5D:42:47:37:37:E1:98:F9
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Certificate issuer:       /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
Manifest number:          8A
Signing time:             Tue 27 Oct 2026 07:56:47 +0000
Manifest this update:     Tue 27 Oct 2026 07:56:46 +0000
Manifest next update:     Tue 03 Nov 2026 07:56:46 +0000
Files and hashes:         1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: V3KsGvuawgvbhN0A1F+dHxuelrs+UaX72lG4Yd3VyLU=)
                          2: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=)
                          3: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
                          rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
        Validity
            Not Before: Oct 27 07:56:46 2026 GMT
            Not After : Nov  3 07:56:46 2026 GMT
        Subject: CN=6ae0593f-d96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:c0:87:35:db:1a:1a:2e:98:a8:a4:b2:3a:
                    60:64:99:89:a7:74:c8:04:68:6e:51:de:4e:7d:ac:
                    17:4d:73:db:e3:9d:2a:41:23:e5:3f:a8:c2:30:5e:
                    a9:57:97:8b:72:dd:0e:8d:85:38:38:ec:64:56:fd:
                    80:ca:88:59:61:d6:9f:4f:b1:77:85:74:00:50:3c:
                    59:ad:5c:4a:53:c9:09:3b:4e:f6:93:29:51:c7:7c:
                    d0:0b:56:87:86:0e:00:8e:76:5b:e4:c0:f6:01:60:
                    e9:b1:cd:d5:e6:a6:a5:4f:a5:87:0b:36:5f:0e:2d:
                    b6:d5:0f:6a:d2:dc:74:9b:3c:dd:1f:a2:16:2c:63:
                    5e:f2:22:19:1c:d9:2f:78:83:7c:fd:a6:fc:66:0d:
                    cf:af:f4:46:64:b3:1b:0c:c9:30:bd:f6:51:5d:7a:
                    cc:24:12:a0:97:7c:fb:c0:d8:16:39:52:7c:0f:00:
                    c8:5a:ec:5f:44:24:58:04:03:84:24:d6:94:e7:24:
                    fa:1e:fe:60:fc:ac:fb:59:9e:87:ec:d5:62:ce:14:
                    1f:3e:56:7e:ec:ba:2e:6c:30:51:c0:13:ba:22:02:
                    e7:7a:6a:96:f6:60:37:5e:e1:2e:30:fc:4c:5b:cd:
                    5d:49:98:98:13:ff:59:50:f0:2f:97:84:20:19:02:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:B4:8A:83:BE:77:0D:3B:11:EE:92:5D:42:47:37:37:E1:98:F9
            X509v3 Authority Key Identifier:
                keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:34:da:5d:63:c4:60:d6:31:cd:8f:2e:3c:ac:0b:a0:a0:
         e4:20:f2:2f:ca:20:08:58:29:20:ab:a9:6c:39:79:13:ad:ae:
         bd:9e:f5:fc:75:e7:bf:3d:77:fc:91:89:aa:fa:d5:56:29:4f:
         77:df:dc:bd:99:30:d7:c0:d8:99:0e:70:e4:dc:75:92:e7:a4:
         93:13:7e:2e:de:d1:dc:93:7f:7f:dc:94:2b:08:48:bb:38:13:
         c1:96:7d:31:d8:70:5d:e1:8c:f8:ec:32:ee:81:51:2f:26:87:
         da:a3:95:23:3d:d0:73:39:bf:a8:2a:91:ad:48:00:7e:f3:a2:
         55:63:1c:c7:a4:30:9d:77:dd:e3:f0:fb:c8:8b:b6:28:3b:06:
         b2:1e:23:b4:5b:a2:2d:60:a3:54:b1:e7:0a:9c:53:d0:1d:93:
         73:de:ae:cb:85:57:33:81:7b:9e:13:94:de:f9:b7:be:bb:cf:
         4a:c9:60:b3:47:09:0a:cd:24:0b:34:e2:9c:9b:d3:59:41:de:
         b5:0a:1d:04:0d:4b:87:ff:28:a3:55:bb:27:f5:20:b5:1c:b8:
         10:55:f8:fa:a8:4e:ac:4c:df:05:75:56:17:a6:3d:d1:dc:26:
         9b:7d:c9:04:d2:38:ca:76:5d:3a:81:71:42:fa:4d:7a:b4:fc:
         6e:9a:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:35:35 2026 by rpki-client