Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File:                     tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier:          V1UOzvaRx70gHZWDK0eS5Hq3le3GAPaQHv6KdcdXZCM=
Subject key identifier:   34:19:7C:DB:6B:A3:FE:52:D3:D7:C0:82:8F:43:BD:9A:62:2E:8E:FD
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer:       /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number:          03CC
Signing time:             Wed 07 Oct 2026 00:40:34 +0000
Manifest this update:     Wed 07 Oct 2026 00:40:33 +0000
Manifest next update:     Wed 14 Oct 2026 00:40:33 +0000
Files and hashes:         1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: ZNwJAGCNG2tEnS26nTMLZlvkvdY2+SkpblSibPsos84=)
                          2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
                          rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
        Validity
            Not Before: Oct  7 00:40:33 2026 GMT
            Not After : Oct 14 00:40:33 2026 GMT
        Subject: CN=6ac59501-a41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:81:cc:cf:ae:ff:ed:21:a6:e1:0a:85:c7:
                    dd:c5:e5:00:29:80:2e:5a:f3:6e:44:84:10:59:f2:
                    74:eb:ef:dc:1f:70:c7:ed:01:84:3d:62:ff:d3:3e:
                    88:fe:84:5e:f4:7d:e6:40:95:39:b5:8f:ea:15:4d:
                    c0:e5:f4:60:ab:fe:39:69:c6:63:73:b4:d8:6e:aa:
                    41:40:99:ae:ac:c1:5f:6c:5c:50:66:97:33:af:ee:
                    85:f1:af:44:79:9e:7f:ea:8d:2b:53:9f:30:1e:08:
                    45:ff:db:a7:af:35:76:f5:8a:06:e5:af:06:e9:d4:
                    d2:2a:28:e9:7b:fe:61:59:a0:07:84:b9:4d:18:3a:
                    92:39:2c:e6:52:bc:14:b9:b0:43:f3:4c:eb:bd:d5:
                    34:6f:6e:0f:21:21:26:79:bd:ac:65:34:04:c6:9b:
                    09:c6:31:09:75:e6:d7:ac:6f:ef:8a:10:49:d5:08:
                    7b:f3:66:53:7b:4d:0b:b3:7f:06:5d:3f:bf:22:10:
                    a8:49:24:d9:b6:8f:38:75:bb:fe:8a:69:be:cd:a9:
                    5d:2b:38:0c:61:01:eb:cc:78:d1:e2:66:cd:0a:7f:
                    20:4f:d6:79:ea:48:f1:68:44:0a:b6:a0:5c:59:f3:
                    fd:f4:05:4e:73:10:b8:b7:7a:63:23:11:ab:63:e6:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:19:7C:DB:6B:A3:FE:52:D3:D7:C0:82:8F:43:BD:9A:62:2E:8E:FD
            X509v3 Authority Key Identifier:
                keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:c7:fd:d0:89:75:8f:f7:9d:61:e1:3e:e5:74:07:e3:fe:
         83:71:2c:03:74:fa:ba:18:1a:01:67:24:43:2b:d2:1a:02:af:
         d9:ba:77:a9:fd:dc:85:f4:ed:d8:5b:1e:10:d0:66:1c:97:fa:
         27:f4:d4:5a:46:cc:54:d3:8f:3a:d5:ab:c5:10:af:6e:78:08:
         dc:91:75:e9:84:24:ca:39:e6:b4:83:53:4a:9a:04:5d:a9:a4:
         79:47:28:e3:24:ea:24:5b:be:2c:96:68:9e:0c:fe:86:c9:c7:
         2c:02:a5:d6:54:10:bb:32:dd:11:67:42:ef:84:43:b5:1e:e0:
         4a:17:62:12:d5:cd:05:ee:ca:85:31:4e:c7:50:f3:ca:02:f5:
         d3:f2:a4:28:08:f5:16:af:a1:e2:96:2d:27:5f:51:60:60:45:
         55:21:1e:43:40:6b:bc:fc:0c:86:70:02:1c:53:91:2b:da:ef:
         79:f4:d6:01:6a:e7:30:58:fa:b4:a3:88:69:f0:7f:bb:19:fc:
         fe:5b:07:8e:e8:2b:67:92:d2:83:d2:97:c9:78:6f:08:57:82:
         59:6d:de:bb:40:c7:8f:7d:78:f4:01:77:b7:06:53:db:b4:06:
         ee:88:19:f0:9a:53:f4:1c:d3:38:26:d6:a0:e2:7d:d3:bb:d5:
         dd:da:23:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw
M0E2M0M0Q0YwHhcNMjYxMDA3MDA0MDMzWhcNMjYxMDE0MDA0MDMzWjAYMRYwFAYD
VQQDEw02YWM1OTUwMS1hNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1yKBzM+u/+0hpuEKhcfdxeUAKYAuWvNuRIQQWfJ06+/cH3DH7QGEPWL/0z6I
/oRe9H3mQJU5tY/qFU3A5fRgq/45acZjc7TYbqpBQJmurMFfbFxQZpczr+6F8a9E
eZ5/6o0rU58wHghF/9unrzV29YoG5a8G6dTSKijpe/5hWaAHhLlNGDqSOSzmUrwU
ubBD80zrvdU0b24PISEmeb2sZTQExpsJxjEJdebXrG/vihBJ1Qh782ZTe00Ls38G
XT+/IhCoSSTZto84dbv+imm+zaldKzgMYQHrzHjR4mbNCn8gT9Z56kjxaEQKtqBc
WfP99AVOcxC4t3pjIxGrY+b1OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQZfNtr
o/5S09fAgo9DvZpiLo79MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE
Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ
b20yd2NuLXRSS2tEcGp4TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjpPH/dCJdY/3nWHhPuV0B+P+g3EsA3T6uhgaAWckQyvSGgKv2bp3qf3chfTt
2FseENBmHJf6J/TUWkbMVNOPOtWrxRCvbngI3JF16YQkyjnmtINTSpoEXamkeUco
4yTqJFu+LJZongz+hsnHLAKl1lQQuzLdEWdC74RDtR7gShdiEtXNBe7KhTFOx1Dz
ygL10/KkKAj1Fq+h4pYtJ19RYGBFVSEeQ0BrvPwMhnACHFORK9rvefTWAWrnMFj6
tKOIafB/uxn8/lsHjugrZ5LSg9KXyXhvCFeCWW3eu0DHj3149AF3twZT27QG7ogZ
8JpT9BzTOCbWoOJ907vV3doj0A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:03:43 2026 by rpki-client