Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          L+nJqPLmDDcdzaJJ67LAA6D8heqeqPKQe0Sv/nO/Rrs=
Subject key identifier:   92:01:0B:B2:52:6B:43:99:31:D4:BF:9A:D5:5E:9E:08:CC:82:C7:B6
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          0478
Signing time:             Thu 03 Sep 2026 00:03:51 +0000
Manifest this update:     Thu 03 Sep 2026 00:03:51 +0000
Manifest next update:     Thu 10 Sep 2026 00:03:51 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: L0QJsC3F7aKiwdFRO/xEujEvCLEoKHvyRBsK6VRRbzM=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 00:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Sep  3 00:03:51 2026 GMT
            Not After : Sep 10 00:03:51 2026 GMT
        Subject: CN=6a98b967-0cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:e3:3f:01:e6:9e:8d:a8:5b:2c:ed:01:af:
                    b1:c1:f8:c9:19:85:25:20:fb:c3:e0:58:47:d8:c2:
                    17:b2:77:e3:20:ca:e8:46:c5:a6:f8:4f:ab:63:9e:
                    91:ec:59:1c:4f:40:07:7f:f0:5a:84:68:5d:4c:9d:
                    fd:57:56:9c:96:a8:54:88:77:77:b8:05:bc:51:73:
                    ed:7a:4c:df:b5:52:7b:cd:d8:a0:3f:25:95:79:e1:
                    e9:0e:f5:27:57:b7:2a:5b:a3:ad:e5:9e:20:13:46:
                    53:14:b8:a6:3c:df:a9:a9:36:27:52:cd:cd:ad:f6:
                    18:6a:0f:1d:97:e3:1e:74:1a:5d:d9:c4:56:1f:d0:
                    08:bf:16:8a:02:d5:bc:48:4a:02:13:92:a7:aa:f1:
                    f2:50:19:6b:f9:a1:33:32:84:c2:4a:45:ed:bb:23:
                    75:5a:5c:74:58:bf:f7:3d:00:32:50:2a:4b:ea:66:
                    4d:d8:95:6c:b9:3d:33:1f:d1:8f:11:79:19:6f:b1:
                    a6:07:3f:7c:7d:87:d5:f4:b8:82:b0:5f:8e:38:5c:
                    45:e6:bf:a2:b1:a1:0a:96:80:e6:f9:7d:6d:64:b1:
                    0e:fd:0c:8f:e1:bb:8e:f1:3d:cd:ec:a8:8b:97:05:
                    04:25:5c:f6:54:7c:71:c8:ae:9b:ed:fe:95:d9:2f:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:01:0B:B2:52:6B:43:99:31:D4:BF:9A:D5:5E:9E:08:CC:82:C7:B6
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:e6:b0:aa:0b:42:0c:8f:9f:97:af:6e:72:7f:d9:f9:33:
         2e:bd:e8:12:11:c1:41:32:69:24:49:79:6f:f2:aa:4d:cd:11:
         83:c7:f4:13:15:42:12:72:0e:1e:e8:d1:f2:81:a3:20:ae:70:
         5a:2e:4a:3a:8d:99:7f:80:d7:58:64:1a:8d:cb:de:e2:bd:80:
         3f:81:de:a6:d6:79:45:87:91:db:5d:66:fc:6e:e2:50:74:13:
         9a:c0:6c:91:94:fd:53:2d:ea:73:f0:0f:89:20:16:4a:d6:9a:
         bf:e6:0b:34:94:57:d2:31:0c:99:47:18:a8:b0:de:bd:94:38:
         bc:75:cb:21:99:a6:5c:08:13:de:da:6f:e8:50:96:e7:3d:62:
         7f:91:95:ea:cb:3b:ce:28:6a:7c:79:bb:d8:55:fd:34:fc:59:
         1f:6f:d0:52:22:d5:57:24:ed:ba:cc:3a:6a:35:41:8b:a9:57:
         3d:3f:f5:bd:be:f6:87:51:6e:d7:07:48:14:0b:55:bc:df:e8:
         f4:f5:eb:34:bc:f5:b6:61:d1:7a:7c:26:37:00:68:39:7d:01:
         b7:00:d9:a9:02:0d:51:b0:37:96:37:80:85:33:a0:f5:d4:3e:
         c2:48:9e:71:f3:6d:15:04:c9:31:8b:c1:c1:d7:9a:8b:c4:c1:
         3f:b8:08:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyQzUxMTAvBgNVBAUTKDREMjc4OTUxRTJCRDhBRDI4NUI5NDBBOEVBOUU1N0Uz
Nzk3MTFFNkIwHhcNMjYwOTAzMDAwMzUxWhcNMjYwOTEwMDAwMzUxWjAYMRYwFAYD
VQQDEw02YTk4Yjk2Ny0wY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAus7jPwHmno2oWyztAa+xwfjJGYUlIPvD4FhH2MIXsnfjIMroRsWm+E+rY56R
7FkcT0AHf/BahGhdTJ39V1aclqhUiHd3uAW8UXPtekzftVJ7zdigPyWVeeHpDvUn
V7cqW6Ot5Z4gE0ZTFLimPN+pqTYnUs3NrfYYag8dl+MedBpd2cRWH9AIvxaKAtW8
SEoCE5KnqvHyUBlr+aEzMoTCSkXtuyN1Wlx0WL/3PQAyUCpL6mZN2JVsuT0zH9GP
EXkZb7GmBz98fYfV9LiCsF+OOFxF5r+isaEKloDm+X1tZLEO/QyP4buO8T3N7KiL
lwUEJVz2VHxxyK6b7f6V2S8Z/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIBC7JS
a0OZMdS/mtVengjMgse2MB8GA1UdIwQYMBaAFE0niVHivYrShblAqOqeV+N5cR5r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xNjYzN0MyRUE0
RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9UU2VKVWVLOWl0S0Z1VUNvNnA1WDQzbHhI
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1RTZUpVZUs5aXRLRnVVQ282cDVYNDNseEhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDJDNS8xNjYzN0MyRUE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9UU2VKVWVLOWl0
S0Z1VUNvNnA1WDQzbHhIbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaQ/msKoLQgyPn5evbnJ/2fkzLr3oEhHBQTJpJEl5b/KqTc0Rg8f0ExVCEnIO
HujR8oGjIK5wWi5KOo2Zf4DXWGQajcve4r2AP4HeptZ5RYeR211m/G7iUHQTmsBs
kZT9Uy3qc/APiSAWStaav+YLNJRX0jEMmUcYqLDevZQ4vHXLIZmmXAgT3tpv6FCW
5z1if5GV6ss7zihqfHm72FX9NPxZH2/QUiLVVyTtusw6ajVBi6lXPT/1vb72h1Fu
1wdIFAtVvN/o9PXrNLz1tmHRenwmNwBoOX0BtwDZqQINUbA3ljeAhTOg9dQ+wkie
cfNtFQTJMYvBwdeai8TBP7gIJg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:21 2026 by rpki-client