Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
File:                     Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json)
Hash identifier:          jxjZ/7AN6iGdD2VytIUtMxLb23C7SGq8vvkKziISKoQ=
Subject key identifier:   71:5F:3A:25:B1:FA:6A:E5:14:03:3A:C4:AF:FA:E8:3C:9F:C4:B3:5C
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1AF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
Manifest number:          1AD2
Signing time:             Fri 02 Oct 2026 16:26:14 +0000
Manifest this update:     Fri 02 Oct 2026 16:26:13 +0000
Manifest next update:     Fri 09 Oct 2026 16:26:13 +0000
Files and hashes:         1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: EIKtMrtr8zIOowL9oAAjewLR46gcRH+MtXdNsDBPRi4=)
                          2: 1F34B5C0250011F1A608795FB9833773.roa (hash: jnHfdZlGP05uzRK0sOEtj3YTXYZ0eMDyTxoVg2Tsfa8=)
                          3: 185EA954250011F192DC095DB9833773.roa (hash: 9EdyDv/MVn8x73r1PoQ2hUZDh9n0G9GLA9V6/QPeY90=)
                          4: 17751640250011F192DC095DB9833773.roa (hash: GOnhgQWq/EDuV1igxZiwLVEbckW/7W3D9W12bCycdmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6904 (0x1af8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Oct  2 16:26:13 2026 GMT
            Not After : Oct  9 16:26:13 2026 GMT
        Subject: CN=6abfdb26-8b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:07:4f:de:38:88:7a:01:a3:96:c9:79:20:
                    eb:b7:9a:9f:2e:d1:a5:7a:08:3d:73:fc:31:51:1d:
                    b6:2d:9a:c9:64:f8:1d:d0:ed:ce:f8:2e:d3:52:d3:
                    35:99:41:09:b4:70:6d:7a:0e:c7:64:93:a3:b0:48:
                    85:85:b1:98:6e:78:8b:a0:71:bf:5e:df:53:e9:11:
                    c3:74:52:37:09:30:83:f6:e1:a5:fa:4d:20:54:43:
                    0c:10:f8:89:f8:c2:3e:be:44:b0:42:ed:8b:26:b1:
                    94:9f:a5:aa:19:4f:8c:8b:1d:86:d0:30:40:a5:41:
                    b6:9f:34:d4:34:64:86:7d:66:bc:3c:5c:ed:49:a3:
                    55:cc:7b:b7:32:32:65:42:47:6f:ad:ea:da:86:52:
                    17:8d:f9:9f:25:e5:bf:f6:6e:43:b8:a6:9e:b8:1a:
                    0b:d2:8b:f6:af:db:30:ac:69:d2:ce:e6:a8:7f:6a:
                    fc:76:1a:75:c6:67:b8:97:2e:1e:05:30:0d:5b:52:
                    ad:41:86:c0:47:6e:5a:7c:8a:61:0e:42:8b:6c:41:
                    db:f0:9e:e4:81:27:43:13:70:21:59:83:aa:16:f6:
                    bb:d0:87:3f:71:dd:31:83:98:70:c7:23:4a:a4:a9:
                    65:81:ca:d4:8b:5a:f9:7e:8d:97:ff:c1:49:15:43:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:3A:25:B1:FA:6A:E5:14:03:3A:C4:AF:FA:E8:3C:9F:C4:B3:5C
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:ae:53:12:5a:f8:a8:77:46:d4:ae:bc:4a:47:d2:99:a0:
         58:d2:fa:24:6f:b8:3f:a5:93:3e:ea:9f:24:a5:4f:5e:87:04:
         a6:ac:41:d9:c1:36:48:72:63:34:1f:16:c0:7c:91:16:c6:6d:
         08:12:a9:fa:f9:0b:08:2f:a2:55:5c:10:f6:e9:26:05:1c:ad:
         95:03:b4:74:24:67:63:61:52:ed:4f:ac:d4:20:d1:03:10:7d:
         0c:b7:bc:cd:9b:cd:5a:b2:6a:52:ad:76:88:d9:8f:6c:6d:a7:
         f7:37:0b:11:80:72:b7:6e:82:34:a2:37:18:9d:c0:6d:ff:be:
         e4:9e:d4:02:69:66:4b:c4:f2:ce:4e:6a:1e:52:36:86:9e:1b:
         4d:41:0e:8e:33:cd:1e:06:80:1c:e6:aa:d6:00:26:85:ae:f9:
         31:a9:13:68:4f:a7:2f:44:ff:b7:d6:20:ed:73:0c:47:36:e9:
         e3:27:c4:e5:e1:5b:9a:d2:44:c5:bc:06:5c:4b:16:45:e8:00:
         79:20:4c:35:f3:87:a7:5f:c6:68:f9:a2:dc:4f:55:c8:4c:6f:
         c5:8f:95:77:9c:95:f5:a8:0b:d4:d2:ee:d7:f6:b5:20:81:ad:
         5a:32:1c:a6:96:42:f1:eb:0c:d9:29:f2:3c:e4:19:83:af:1e:
         fe:18:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:33:52 2026 by rpki-client