Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
File:                     TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json)
Hash identifier:          /eQoAo5hasuVOlP0ChY6BjbIdpKtgfNXW4vleqwxuyY=
Subject key identifier:   A8:94:4A:60:70:FB:B5:E9:14:7E:91:F4:51:C0:1E:F2:6D:F5:F6:C6
Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
Certificate issuer:       /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
Certificate serial:       0853
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
Manifest number:          0853
Signing time:             Fri 02 Oct 2026 21:14:59 +0000
Manifest this update:     Fri 02 Oct 2026 21:14:59 +0000
Manifest next update:     Fri 09 Oct 2026 21:14:59 +0000
Files and hashes:         1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: BrU28IVBcbwVpoXH9HswSB+YUvvVc75EQeIAweLkqRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131 (0x853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
        Validity
            Not Before: Oct  2 21:14:59 2026 GMT
            Not After : Oct  9 21:14:59 2026 GMT
        Subject: CN=6ac01ed3-07b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:12:5f:1a:32:da:84:61:97:0b:35:ce:96:
                    10:ca:9a:47:aa:bd:f1:c7:75:2b:a3:40:bd:0d:ba:
                    f5:fd:eb:31:7c:a0:93:35:96:7e:4e:3c:ef:9b:0e:
                    40:43:47:16:a1:b1:d1:86:45:9e:92:dc:94:31:4f:
                    a1:db:0b:dd:be:ad:1f:e8:64:a8:9e:6f:eb:3c:c5:
                    aa:0e:59:be:3f:63:12:e5:74:20:b3:49:8a:58:3e:
                    78:dd:d3:58:8e:8e:96:fb:5f:97:7d:b2:d3:69:83:
                    02:f0:67:ec:83:c7:1f:a5:30:d1:c0:9b:72:f9:62:
                    d1:29:3f:8c:5b:19:f9:0c:f0:3e:f4:5f:be:51:32:
                    0d:29:ff:06:a0:0a:73:99:05:4b:f9:d7:d7:46:08:
                    b0:ab:c5:67:78:64:a6:8e:c1:f7:42:22:56:d2:19:
                    9a:4f:f9:f2:4e:06:13:2b:00:11:69:26:3e:7b:7e:
                    77:b3:89:6a:f4:4a:d3:ac:88:c0:53:23:0e:cf:91:
                    fe:eb:c2:74:3d:66:89:5a:d9:24:5d:45:b5:93:80:
                    0d:17:fc:1f:bf:a8:7d:5d:45:da:fb:93:17:12:58:
                    36:2f:9e:d1:03:41:3f:c3:ce:d3:33:8d:3a:3f:2a:
                    6d:e2:92:7c:4e:3f:b4:e2:aa:ae:92:b7:c7:1f:12:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:4A:60:70:FB:B5:E9:14:7E:91:F4:51:C0:1E:F2:6D:F5:F6:C6
            X509v3 Authority Key Identifier:
                keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:12:23:c3:5b:04:1d:8f:d4:1d:17:f6:42:1e:c0:ba:e0:
         56:4b:20:d3:5e:23:43:55:9d:c8:f7:a7:63:d9:81:c7:a9:33:
         9a:3d:cc:12:27:e6:ca:09:0e:12:bd:38:d1:cf:ef:19:2b:bd:
         d2:16:e0:2d:de:c4:ac:02:47:4d:35:09:09:fb:87:89:1f:c5:
         6a:cc:9c:60:64:2b:51:11:d4:3f:5d:f6:71:8d:0e:d8:d3:31:
         0a:21:cd:c8:0a:10:18:3e:65:09:09:45:57:dd:4c:c8:3e:16:
         1a:33:af:43:41:23:40:bf:c8:27:6e:39:aa:c0:d9:6f:4e:dd:
         34:05:1e:c1:ac:fe:31:ab:72:30:da:77:cb:ef:c4:67:68:cd:
         a0:a7:fa:17:35:20:0f:8d:14:78:d7:98:57:ee:5d:b2:cf:66:
         49:37:03:a6:38:58:9e:a9:05:04:7c:bc:8d:53:19:c1:cb:48:
         f3:c5:ff:25:f6:5e:7b:1b:ee:2c:98:8d:16:69:b2:a6:1b:15:
         8a:ba:f5:f2:0d:a9:81:8b:4a:3f:6d:c9:d5:fd:21:ea:58:2d:
         b9:e0:64:c5:0d:a7:e8:31:c2:30:54:fa:35:8a:27:b8:70:9d:
         41:9b:22:c8:71:b0:60:39:14:6d:8c:dd:f5:43:65:b9:b4:d4:
         35:0a:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:09:17 2026 by rpki-client