Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
File:                     tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json)
Hash identifier:          YHhutRZOcedhFlOzSabyXfjaWTuLwwLjL44dQV+1bK8=
Subject key identifier:   C0:B4:F9:21:3D:10:93:4E:0C:1C:84:94:DD:C0:FB:ED:79:AB:12:1D
Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37
Certificate issuer:       /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
Manifest number:          0205
Signing time:             Mon 05 Oct 2026 03:27:25 +0000
Manifest this update:     Mon 05 Oct 2026 03:27:24 +0000
Manifest next update:     Mon 12 Oct 2026 03:27:24 +0000
Files and hashes:         1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: biH2NQ69K+7j2CU37UM3QjgUASsWTpMYnAxSAN+3abo=)
                          2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: jidjPqjhwiib65keCcPhREH4tf4UiXEekkUxxTfAB2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
        Validity
            Not Before: Oct  5 03:27:24 2026 GMT
            Not After : Oct 12 03:27:24 2026 GMT
        Subject: CN=6ac3191d-33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:d8:1e:e3:7d:83:17:13:24:3b:8b:c8:7b:
                    f3:10:90:39:d2:ba:e0:f6:d1:88:b7:cd:81:52:1a:
                    58:a9:99:32:bb:dc:17:69:a1:3e:f3:30:50:d9:68:
                    6a:4c:8f:83:c0:4f:31:3f:0a:f0:3f:db:af:e7:7a:
                    93:25:bb:f5:45:f2:2e:9e:6a:64:27:cd:72:b9:ec:
                    fe:f3:26:1a:a2:63:d0:4f:3d:c7:53:90:36:a7:d1:
                    1a:a5:75:16:01:2b:bc:5c:71:33:7f:ec:34:05:ef:
                    f1:c6:02:46:7c:a6:ed:0e:da:42:a0:8e:54:27:a2:
                    74:3f:ac:27:08:8c:fa:b3:4e:cd:03:47:98:59:c3:
                    4d:70:1e:cb:2e:70:9c:43:87:53:12:af:38:08:13:
                    de:3d:65:aa:a3:14:6d:d2:2d:8c:d7:ac:a8:3f:54:
                    3d:cc:72:2e:47:b5:ea:48:8a:d7:48:59:95:4b:48:
                    a2:9c:7e:f0:87:3d:9a:e9:57:8c:15:64:05:e6:13:
                    2b:04:bc:17:f8:22:95:ae:7d:fe:33:63:29:9a:9f:
                    ad:75:28:9c:11:22:8a:37:27:df:ea:89:f7:63:73:
                    35:04:6f:1e:2a:bc:eb:20:af:4b:06:53:ff:87:45:
                    5f:59:53:ef:de:0d:48:4b:3d:90:53:68:6b:31:d7:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B4:F9:21:3D:10:93:4E:0C:1C:84:94:DD:C0:FB:ED:79:AB:12:1D
            X509v3 Authority Key Identifier:
                keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:72:22:da:48:68:5a:ec:c0:ce:7c:a5:a4:9c:83:4d:b4:
         6a:15:95:95:e5:01:3e:91:9f:71:9e:08:e7:17:95:0b:a0:ec:
         da:6b:64:7f:ce:d8:a4:56:60:cd:26:4b:b4:69:46:17:a4:eb:
         1f:fd:dc:5b:bf:ab:eb:32:39:21:52:40:c4:63:75:a6:32:14:
         ec:fe:a9:9c:9a:40:b0:c8:ab:3c:cc:f6:f1:3d:fa:df:c6:29:
         70:46:93:e9:86:33:9d:a2:d1:f9:7a:f8:f4:78:51:a9:b5:57:
         64:28:f2:aa:8c:e4:61:78:d7:b4:c8:5e:56:63:9d:32:07:0d:
         0e:43:ec:87:1a:21:d2:14:bf:95:2c:45:3f:84:1e:9f:c5:d4:
         2c:17:07:f7:ce:28:8f:04:5a:cd:27:21:41:78:d4:20:2b:72:
         6c:29:00:49:67:bc:37:65:1b:1f:cd:15:21:ea:16:8c:53:36:
         d2:f5:27:48:c5:f2:0f:0a:7e:b4:c5:49:88:fe:59:d8:46:5b:
         8b:f7:35:f5:9b:db:f0:ed:7d:19:89:1e:b9:74:88:12:5f:53:
         57:ed:e9:58:b1:d2:1d:4b:27:3a:ad:80:e3:83:1a:1d:28:37:
         34:1b:07:1c:4b:14:ee:a8:4d:f6:c6:d0:8b:80:eb:6a:1f:d8:
         0f:5f:99:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3
ODk0RTIzMzcwHhcNMjYxMDA1MDMyNzI0WhcNMjYxMDEyMDMyNzI0WjAYMRYwFAYD
VQQDEw02YWMzMTkxZC0zM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdbYHuN9gxcTJDuLyHvzEJA50rrg9tGIt82BUhpYqZkyu9wXaaE+8zBQ2Whq
TI+DwE8xPwrwP9uv53qTJbv1RfIunmpkJ81yuez+8yYaomPQTz3HU5A2p9EapXUW
ASu8XHEzf+w0Be/xxgJGfKbtDtpCoI5UJ6J0P6wnCIz6s07NA0eYWcNNcB7LLnCc
Q4dTEq84CBPePWWqoxRt0i2M16yoP1Q9zHIuR7XqSIrXSFmVS0iinH7whz2a6VeM
FWQF5hMrBLwX+CKVrn3+M2Mpmp+tdSicESKKNyff6on3Y3M1BG8eKrzrIK9LBlP/
h0VfWVPv3g1ISz2QU2hrMde1YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMC0+SE9
EJNODByElN3A++15qxIdMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF
NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0
WUtrMXRTMUJGV040bE9JemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHdZyItpIaFrswM58paScg020ahWVleUBPpGfcZ4I5xeVC6Ds2mtkf87YpFZg
zSZLtGlGF6TrH/3cW7+r6zI5IVJAxGN1pjIU7P6pnJpAsMirPMz28T3638YpcEaT
6YYznaLR+Xr49HhRqbVXZCjyqozkYXjXtMheVmOdMgcNDkPshxoh0hS/lSxFP4Qe
n8XULBcH984ojwRazSchQXjUICtybCkASWe8N2UbH80VIeoWjFM20vUnSMXyDwp+
tMVJiP5Z2EZbi/c19Zvb8O19GYkeuXSIEl9TV+3pWLHSHUsnOq2A44MaHSg3NBsH
HEsU7qhN9sbQi4Drah/YD1+ZbA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:20:06 2026 by rpki-client