Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
File:                     Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json)
Hash identifier:          DgxBn8I0rrCZN942dKsZ3tOMeU/rOjKFaitU7Pvzyg8=
Subject key identifier:   CB:71:06:74:7D:42:E9:97:64:B2:FA:D5:64:4D:80:47:42:30:20:27
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Certificate issuer:       /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
Manifest number:          FB
Signing time:             Sat 17 Oct 2026 06:57:22 +0000
Manifest this update:     Sat 17 Oct 2026 06:57:22 +0000
Manifest next update:     Sat 24 Oct 2026 06:57:22 +0000
Files and hashes:         1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: h87IYmTN3L/RdtpEbBtUtJLj76YHzLf7+V4LQW+2Z6k=)
                          2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: 9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
                          rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 06:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
        Validity
            Not Before: Oct 17 06:57:22 2026 GMT
            Not After : Oct 24 06:57:22 2026 GMT
        Subject: CN=6ad31c52-af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:e9:72:e9:da:a4:aa:08:69:2b:7c:c7:11:
                    0f:d0:45:51:96:10:a9:10:5c:72:52:2b:7a:6e:a3:
                    c2:b7:73:8b:44:6e:0a:f8:68:92:8d:3c:5c:ce:16:
                    55:2f:26:0d:52:b4:56:39:0c:2f:83:a6:b2:3e:a0:
                    f5:94:e2:f5:2b:80:96:28:0b:d5:07:8e:19:91:33:
                    0e:85:b9:a9:c9:c3:c5:30:6d:f6:30:59:17:0e:d3:
                    76:26:0f:b3:67:91:96:39:89:b8:13:b5:d4:61:35:
                    6b:f2:1c:1d:78:4e:02:b4:c5:af:b3:d5:1c:b8:88:
                    74:1e:d6:7a:e6:19:5f:7c:f7:fd:01:24:15:57:00:
                    07:8f:b1:70:40:f2:65:8c:5e:e6:85:55:f6:5e:44:
                    f8:bc:cc:0e:e8:ab:4a:e1:6a:8f:c3:1a:1a:44:6f:
                    4c:d7:1a:6a:bd:f9:cc:01:67:78:8e:00:0e:81:2a:
                    00:8b:8c:c4:57:bc:e4:36:2d:85:50:86:1c:9a:f5:
                    b8:bc:8c:86:85:a6:b6:36:0a:41:24:ac:56:de:3a:
                    15:7a:a5:41:d2:9b:dc:dc:83:e7:fb:f7:54:33:b4:
                    a6:77:59:0d:d6:d1:d1:87:26:ec:a4:b2:44:cd:38:
                    6f:42:38:4f:f7:0b:a6:fd:2b:1b:54:85:77:4e:28:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:06:74:7D:42:E9:97:64:B2:FA:D5:64:4D:80:47:42:30:20:27
            X509v3 Authority Key Identifier:
                keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:83:9c:75:a1:df:0e:b4:45:7f:cb:ea:9c:6d:19:b7:70:57:
         ea:34:3f:9f:28:04:d7:cd:40:1a:82:d8:ff:02:b8:51:5e:e0:
         c4:ae:2b:f2:2c:7e:6a:1c:21:fb:a6:0e:e4:0e:b7:0f:0a:ff:
         21:2f:8e:63:f4:35:d3:c8:ee:26:29:2b:ae:59:98:d8:96:ea:
         af:49:57:17:ea:71:6a:37:8e:8c:97:b2:33:aa:32:17:09:42:
         5c:b7:3a:77:2e:9f:b6:38:93:ba:58:05:36:50:e4:70:70:d8:
         1e:9e:e6:c2:44:bf:7f:a5:89:88:b5:c2:7d:72:26:8a:06:6e:
         f0:61:37:c3:1b:d3:d5:de:48:11:87:28:be:2d:1b:2b:45:35:
         9e:59:a2:3a:61:5f:78:01:5f:98:98:bf:b9:45:4f:f5:d7:a7:
         25:1a:d3:b7:cc:9c:90:24:14:62:50:ac:4d:82:af:6c:30:6c:
         41:f1:86:bc:20:9f:f8:14:e3:4f:ce:db:0c:aa:fb:f5:ec:e6:
         34:cd:57:df:fb:55:0a:17:90:05:4c:b6:74:0e:b0:eb:20:88:
         a0:f3:68:09:b8:c5:3c:ba:b1:48:fb:c4:a9:4f:58:4d:c8:81:
         56:ab:47:f9:49:5a:83:c7:33:ef:9b:f9:5f:53:1f:9b:6a:18:
         97:71:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:56:04 2026 by rpki-client