Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
File:                     TI176iTK_MV6U-jndIctPYsutF0.mft (raw, json)
Hash identifier:          R/NrXNxF9B+tEm+TU3F107Y1nU3flMMjSEf+4oDpI1Q=
Subject key identifier:   AC:48:77:76:1F:88:9F:1B:BD:C1:5F:97:7F:B2:B8:44:AF:28:15:D3
Authority key identifier: 4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D
Certificate issuer:       /CN=A9158F8D/serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
Manifest number:          0130
Signing time:             Fri 23 Oct 2026 04:54:41 +0000
Manifest this update:     Fri 23 Oct 2026 04:54:41 +0000
Manifest next update:     Fri 30 Oct 2026 04:54:41 +0000
Files and hashes:         1: TI176iTK_MV6U-jndIctPYsutF0.crl (hash: /kMNjR/gdFlovdk4khSVkCoiRjLI1kmlZqqhXYLfwjk=)
                          2: 9180262C1B6111F08E120D13C4F9AE02.roa (hash: FOBBPgEC+YHfhd2uklBBC4CPHfXNXDX6Jk6WOnhFR6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D
        Validity
            Not Before: Oct 23 04:54:41 2026 GMT
            Not After : Oct 30 04:54:41 2026 GMT
        Subject: CN=6adae891-2e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:32:5d:b2:39:77:9a:3c:58:48:09:8d:c1:
                    de:c5:0b:55:a6:e8:10:c1:f3:20:d6:ca:62:56:e4:
                    5a:17:25:e5:7c:02:5c:37:90:7e:1b:09:54:43:9c:
                    a6:de:87:7a:cb:0a:55:17:05:03:97:ad:d1:47:d2:
                    7e:b1:55:45:5d:94:27:7b:17:f6:02:0a:e0:33:4f:
                    ea:a7:0e:2c:4f:ae:88:2d:1e:4b:d5:4c:84:b3:7e:
                    98:a4:71:79:07:3b:af:62:f5:20:bc:a2:3e:14:cc:
                    be:5f:41:ad:fd:b8:78:d8:98:92:41:70:6d:72:f0:
                    4b:6f:b4:23:9c:ae:96:11:59:db:7d:1f:dd:9f:57:
                    14:8c:a5:e9:ca:8f:e5:7c:02:e6:f1:ba:4b:a3:1b:
                    de:82:80:f3:39:50:98:0e:c7:91:a8:2a:17:1d:5d:
                    d3:e1:42:49:d3:07:e2:35:45:74:52:90:f4:30:0a:
                    03:9f:49:22:6a:58:f0:2e:41:9c:14:98:30:77:8b:
                    b5:21:f4:eb:9a:15:0f:8f:38:c0:3b:15:c6:26:63:
                    46:33:27:0e:56:ce:02:7d:54:43:8e:28:b8:e2:5e:
                    12:e7:df:e5:2d:08:94:15:3f:8d:50:f8:9c:55:8e:
                    b6:56:2c:09:61:45:fe:09:63:0d:35:78:f6:20:59:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:77:76:1F:88:9F:1B:BD:C1:5F:97:7F:B2:B8:44:AF:28:15:D3
            X509v3 Authority Key Identifier:
                keyid:4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:60:12:e3:8c:f6:b8:ce:e0:1e:5a:bb:77:5a:77:2f:ae:
         99:16:64:5c:44:80:21:30:ac:f2:5d:44:14:f9:dc:a9:ea:42:
         93:f6:3d:1d:70:30:e3:52:b4:aa:b4:62:00:fd:29:f0:a9:5b:
         e3:52:b0:64:75:7b:3d:ce:5d:c2:88:be:18:3f:e3:d7:a9:97:
         c0:80:1c:e3:6b:bf:bf:a4:c3:d0:f3:4d:0f:b1:d2:0e:e8:2d:
         99:36:ef:b7:c3:80:03:9c:47:ba:ff:b4:6f:a9:aa:d6:af:73:
         99:50:d3:8a:28:e9:32:03:b8:b7:60:4e:ae:dd:20:bb:b2:88:
         b0:98:97:71:b2:89:fc:c0:b0:09:11:a5:7f:ac:03:d9:5c:19:
         49:d0:65:a1:24:37:ce:e4:27:40:5d:7e:a2:36:87:d3:dd:53:
         de:eb:77:7a:16:cc:54:62:9f:e4:85:4c:bf:8d:4c:3e:59:c8:
         83:76:45:7d:e2:de:49:e0:c7:59:e2:11:c4:74:ed:b0:57:8a:
         95:0e:11:4d:aa:05:cb:da:cf:a9:4a:cb:71:64:5e:3e:8f:e3:
         69:66:97:76:8c:8e:32:a1:f3:bb:bb:aa:d1:14:d9:83:73:d7:
         a4:c4:58:99:b3:b0:7f:17:ac:c2:e5:ab:5d:bf:40:d7:19:fb:
         5a:8c:30:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:44:28 2026 by rpki-client