Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File:                     TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier:          sA9M0vqRrn9n7uzrpxeixE2WvpDW1IxpNKQSgGk/vkg=
Subject key identifier:   6F:25:9B:2B:D2:6B:2D:E7:86:2D:29:48:2B:26:58:B1:11:3E:5A:51
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer:       /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial:       03D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number:          03C9
Signing time:             Sat 03 Oct 2026 00:51:32 +0000
Manifest this update:     Sat 03 Oct 2026 00:51:31 +0000
Manifest next update:     Sat 10 Oct 2026 00:51:31 +0000
Files and hashes:         1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: yXavZwedRlGOfVeWAajSniPe/LqRowpeNZa40OO1YLM=)
                          2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: P90Aw6/A3YFwdzm6ZtC5QnYCPc3LBDM9e/xDCyTP1kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
                          rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
        Validity
            Not Before: Oct  3 00:51:31 2026 GMT
            Not After : Oct 10 00:51:31 2026 GMT
        Subject: CN=6ac05194-cddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7b:35:5c:5b:ce:24:80:ba:5d:b3:fc:f8:d9:
                    43:e2:80:09:c8:71:48:b0:59:0e:8a:ef:17:32:81:
                    de:60:1f:9f:58:98:ea:5a:4a:30:71:4a:f2:e7:9d:
                    02:b9:ed:04:64:4b:6b:16:16:a1:69:36:f0:48:32:
                    89:12:c4:55:17:64:95:85:ed:be:65:9e:7d:7a:db:
                    61:a6:1d:38:d4:8a:0b:94:c8:7b:bf:2f:a7:90:d8:
                    3b:49:ad:3f:44:ea:30:89:d2:d6:26:06:d3:ef:35:
                    19:18:4a:72:90:b3:55:3e:23:65:42:58:b9:be:20:
                    88:d4:7f:14:03:65:c9:78:63:98:a2:54:b5:79:1e:
                    55:80:8d:58:75:3a:7a:33:15:e7:12:ab:7b:ca:b5:
                    5d:dc:cd:cb:22:c0:10:47:73:7e:d2:94:aa:71:b2:
                    7a:d2:a1:47:ec:d2:e7:a1:57:e5:23:8a:ca:78:7b:
                    a5:52:7f:f7:9d:fb:1e:17:bd:ae:ae:a0:62:b7:d3:
                    5b:39:a0:34:15:96:5d:04:ae:b1:f3:32:0b:39:ee:
                    f8:ca:68:ad:76:2f:94:1b:81:5d:8c:2d:51:11:3f:
                    01:c1:d4:aa:3d:fe:2c:46:b2:a9:5a:5a:e9:4f:10:
                    82:d9:56:32:10:70:9f:cb:70:0a:70:11:e6:45:0b:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:9B:2B:D2:6B:2D:E7:86:2D:29:48:2B:26:58:B1:11:3E:5A:51
            X509v3 Authority Key Identifier:
                keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:aa:c8:93:e8:4b:58:6a:fc:d7:17:51:04:b5:a2:35:b5:
         6f:33:03:93:6d:0c:6c:cb:28:c7:7a:70:9d:55:7f:e5:37:e2:
         1b:eb:d2:e0:fc:54:d5:32:be:76:ce:b4:bd:ae:aa:85:59:21:
         37:4f:2c:5f:54:33:60:f9:2d:05:0d:36:d6:68:54:fb:56:f3:
         59:67:96:4a:a1:04:9f:f0:54:3a:fa:0b:09:ae:70:ef:2b:06:
         8f:54:9b:0b:ba:4b:7a:97:62:d0:d2:92:80:2f:92:1e:ed:39:
         c7:3b:96:09:e0:f3:fd:e4:48:28:17:5c:96:09:c7:66:02:10:
         ea:c4:1e:d9:b6:eb:ec:01:c8:c3:f2:34:c4:c1:f8:6e:6b:fa:
         e8:73:0e:42:a5:92:0e:17:b1:80:a5:3f:d8:ea:c2:4a:aa:c5:
         b6:d8:1f:f1:46:c5:9d:6b:3a:5b:2e:9e:1a:f6:0f:6b:71:5a:
         dd:3d:b1:4f:01:72:03:e4:a2:6f:2a:a1:56:57:f0:68:8e:11:
         f1:a4:c7:db:8f:16:2d:49:b0:f9:a7:3c:64:67:86:8e:4f:48:
         b1:5b:d8:10:02:fa:59:15:f9:c0:54:f3:3b:03:da:46:b9:34:
         09:a3:be:b0:32:cc:16:c1:f6:50:cd:fd:b2:c6:6c:64:1c:47:
         08:3c:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:12:11 2026 by rpki-client