Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
File:                     Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json)
Hash identifier:          gBMCddbb9qH0AaiPfewxTQcL/MWQIojFQ5wrqPAJhis=
Subject key identifier:   F3:59:BC:07:C4:F6:3D:7E:91:B4:85:A4:DD:35:FA:14:E6:2C:9B:B0
Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4
Certificate issuer:       /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
Manifest number:          0183
Signing time:             Tue 27 Oct 2026 03:01:05 +0000
Manifest this update:     Tue 27 Oct 2026 03:01:05 +0000
Manifest next update:     Tue 03 Nov 2026 03:01:05 +0000
Files and hashes:         1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: hGP3r55SJhKkU0Ra7pSgeoRpnVABpAMHxqo8cskINDE=)
                          2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: h9DoWAti9FtevIgArDst4H6dPePV+rhbEHLYlKOnyqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4
        Validity
            Not Before: Oct 27 03:01:05 2026 GMT
            Not After : Nov  3 03:01:05 2026 GMT
        Subject: CN=6ae013f1-1df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:fc:d8:be:b6:b4:8c:52:42:70:16:32:03:
                    b0:24:98:8e:80:6a:91:9a:9a:99:1c:23:4c:14:02:
                    81:7b:a0:30:de:7a:48:57:79:cd:0e:13:c0:aa:01:
                    13:09:15:a2:81:a1:3d:f1:4c:5a:30:a4:f0:6b:7e:
                    4f:f6:8c:8c:b3:88:4f:ee:16:71:4d:80:ee:25:5f:
                    37:bd:0e:92:20:80:6f:cb:77:5b:0e:1e:40:15:c2:
                    43:97:38:e6:94:28:03:a5:68:4f:6d:e7:42:e4:db:
                    27:ca:1d:c9:fc:fa:56:c3:56:2c:a8:61:64:c4:77:
                    86:f1:fd:b0:cf:ab:9b:1e:16:cb:0c:55:50:51:72:
                    85:ee:64:1a:55:7f:cb:1c:c5:23:7c:6a:07:08:f0:
                    27:ab:4e:ef:c9:09:3a:02:a1:55:72:05:c4:16:86:
                    6f:b5:d2:4e:fb:16:02:82:19:58:ff:75:3c:76:c7:
                    07:e6:4f:b7:4d:da:86:aa:41:a6:a1:0f:3b:29:26:
                    cf:f3:cb:2c:46:7e:aa:d1:85:d5:90:b1:b4:48:7e:
                    ae:26:45:28:75:6f:1a:8e:24:7d:12:52:f8:be:f7:
                    85:51:be:91:84:28:fa:64:a1:89:58:c0:c6:3f:a3:
                    e2:d4:ea:6f:ec:ef:37:99:1d:c2:da:7b:21:8b:46:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:59:BC:07:C4:F6:3D:7E:91:B4:85:A4:DD:35:FA:14:E6:2C:9B:B0
            X509v3 Authority Key Identifier:
                keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:dd:ca:d9:21:62:61:7e:b7:eb:d3:54:ee:60:e8:e4:3f:
         b1:fc:db:b1:9c:16:4d:89:56:33:4f:4d:42:14:25:3b:f0:9b:
         9e:24:cb:01:eb:79:6c:17:81:da:b9:4d:f9:d8:87:01:d3:61:
         7d:cc:fa:c5:2f:e9:de:a8:5d:b0:ce:6b:99:ad:b1:a0:46:31:
         46:ea:39:55:e6:e2:d2:9c:f0:62:dd:14:03:f8:ef:2b:32:09:
         bf:a7:ba:91:ed:6a:c1:56:1c:36:af:0d:8c:dc:c6:b1:1d:93:
         29:0c:56:48:28:9a:ab:5f:8f:c0:9b:b4:15:a7:d4:9c:49:d7:
         47:ca:37:19:5e:ac:5f:e6:ba:d6:e7:f8:e8:fa:28:c0:7f:79:
         a7:fc:85:10:8a:09:cb:f4:bd:33:35:82:b4:d5:6a:b8:52:9f:
         cf:22:70:1b:bb:49:7f:e4:9a:fd:30:53:a2:a7:12:19:0a:f3:
         67:75:ce:9e:a7:a4:5a:30:49:44:0d:76:a2:f2:c1:95:7b:4f:
         1e:40:09:95:fb:4b:27:3c:72:65:0c:0c:2c:e7:b1:2d:79:16:
         d6:58:db:c3:16:ca:33:ac:8c:a0:5d:9c:1e:76:af:4a:9d:fd:
         4c:77:7e:18:8d:1d:1c:a0:72:92:c3:4e:2f:f6:87:64:b8:7b:
         9d:89:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:31 2026 by rpki-client