Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File:                     ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier:          lFE317TTeDDmJf5dIuj3m3G0CvJ4+bo7a+APf2ZTokY=
Subject key identifier:   55:BA:2D:BA:C2:8C:57:4E:86:8F:55:2D:DF:9B:96:01:F3:65:5D:5B
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       28BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number:          27F4
Signing time:             Tue 06 Oct 2026 15:39:45 +0000
Manifest this update:     Tue 06 Oct 2026 15:39:44 +0000
Manifest next update:     Tue 13 Oct 2026 15:39:44 +0000
Files and hashes:         1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: 7FoxKHC319A3gFN7EtuOrUJBjtN8mtzoEPz6NSUIA30=)
                          2: 95F76942870611F18212677BADEE528E.roa (hash: SOLLv4/IIVbij9uBLzZ1io1DQY7xHAS/qiToU32P5kU=)
                          3: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=)
                          4: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=)
                          5: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (hash: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=)
                          6: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=)
                          7: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10430 (0x28be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: Oct  6 15:39:44 2026 GMT
            Not After : Oct 13 15:39:44 2026 GMT
        Subject: CN=6ac51641-0815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:6a:04:a5:7d:89:47:02:1a:53:b5:9b:bf:
                    20:5a:a3:4c:58:f5:49:13:24:7f:5c:aa:6d:8b:b9:
                    1b:2d:bd:82:90:86:d0:0f:b1:93:22:d4:5b:66:2d:
                    c2:09:9e:56:04:3d:bf:f4:a9:43:dd:c4:b2:a0:a7:
                    cf:1e:5c:37:ab:fb:ae:0d:54:04:9b:d4:ec:3b:cf:
                    bc:48:91:ba:e4:26:40:e1:47:0d:f7:c4:b7:6b:54:
                    3e:31:04:db:0c:76:43:6c:f3:8b:98:d4:0e:86:70:
                    4c:61:8f:a7:14:0d:7c:93:35:94:b3:9b:fe:73:86:
                    6e:7e:7b:4f:3d:47:50:7b:c1:4d:12:58:07:60:45:
                    66:c3:ee:08:cc:c8:ab:1b:40:09:d4:04:14:72:15:
                    20:bc:ca:03:c9:cb:d4:d5:1a:a5:da:73:06:cc:79:
                    20:09:6f:e7:d4:65:c6:8f:46:ac:20:03:66:96:54:
                    64:ba:c7:a2:65:b5:98:45:1a:23:6f:40:7b:90:8e:
                    a2:ec:54:88:c2:4c:3c:20:c7:b9:56:ea:cd:03:49:
                    91:ec:1e:fd:33:38:99:ef:7d:90:0d:70:66:88:97:
                    ab:cf:6d:a7:ac:89:1a:05:50:e6:94:1e:c0:9f:60:
                    92:0d:b1:82:7d:6f:04:d2:c8:b7:d6:fc:70:73:50:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BA:2D:BA:C2:8C:57:4E:86:8F:55:2D:DF:9B:96:01:F3:65:5D:5B
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:b3:b1:8e:23:45:00:9c:67:2b:dc:06:7d:af:5a:38:31:
         4c:ea:9d:74:4f:d6:51:d9:80:45:e9:cd:01:3f:77:2a:ba:b4:
         bc:de:95:3a:44:4c:6a:76:90:21:77:36:56:20:0b:ae:01:27:
         13:8b:d3:95:1f:e8:26:50:56:e6:38:e2:a0:08:20:b6:87:a1:
         fb:ca:8a:f8:da:53:09:dd:a7:94:27:70:1f:3b:9e:87:aa:4e:
         45:b9:63:8d:83:b6:b1:4f:e1:0a:b6:3c:18:79:bc:3f:0f:44:
         ac:3b:56:f3:35:a6:00:9c:09:ef:b1:da:36:db:6a:3c:56:86:
         db:cf:29:4d:20:73:4b:60:db:bb:15:03:fc:f2:5c:fa:2e:6f:
         4a:56:fe:26:ed:7a:08:33:93:e1:93:55:41:56:a9:4e:e5:f5:
         b7:47:fc:fe:df:7e:e0:fd:f3:c5:57:63:ca:47:a0:d2:27:18:
         e6:0d:ce:5a:70:55:40:02:c1:83:10:3a:f0:6c:ba:70:e2:48:
         9e:aa:c5:49:67:8c:52:ca:90:12:0f:ed:a3:82:13:19:95:bb:
         55:ee:85:1d:b9:f7:de:86:c4:45:88:12:e0:94:0f:6c:5d:e5:
         d4:24:43:87:5d:1c:2e:40:97:e6:12:94:ba:d0:52:95:ff:39:
         60:75:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:32:08 2026 by rpki-client