Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
File:                     tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft (raw, json)
Hash identifier:          0O673nTrPCLFCwX2t72DxarWaWP8mGl6vlwxFY6duDw=
Subject key identifier:   E6:23:D1:B3:2B:17:2D:9A:5B:46:FD:FC:6A:68:41:BA:91:E7:E5:9E
Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98
Certificate issuer:       /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
Manifest number:          F0
Signing time:             Sat 03 Oct 2026 07:17:54 +0000
Manifest this update:     Sat 03 Oct 2026 07:17:54 +0000
Manifest next update:     Sat 10 Oct 2026 07:17:54 +0000
Files and hashes:         1: tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl (hash: ILP+rFisydeSh3xAJI0UgTPB2sm6c2gK7lNTQkQEfYY=)
                          2: DC8456B8B5B911F1B8B6BEBE3E11F970.roa (hash: BCImpyKSjQUJbhaMwVoqKVNp3GpPs3DeNfjpc6WNC14=)
                          3: 7B8A52D4B5BB11F18D5162F53E11F970.roa (hash: T6c4+2+fIJ46LdhEoUSSX1Kw6hw1AA5PzFi6KFbGnms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl
                          rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398
        Validity
            Not Before: Oct  3 07:17:54 2026 GMT
            Not After : Oct 10 07:17:54 2026 GMT
        Subject: CN=6ac0ac22-5526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:fc:a8:84:3f:da:60:9b:ad:a7:31:ea:de:
                    83:5b:7a:4a:54:66:93:8b:1c:76:5f:18:d5:64:14:
                    6a:a4:53:d5:50:d5:cf:5d:57:9f:c2:ea:ca:c4:e9:
                    8a:f0:01:02:a0:21:34:dc:cb:f1:aa:05:44:71:90:
                    1c:87:88:76:89:92:4b:d6:1d:db:24:b7:fb:3a:56:
                    e7:b3:b1:f6:0c:ee:d8:d9:e7:8f:d6:2d:ec:f1:d5:
                    b4:d2:b0:f1:5a:2e:c6:18:f1:79:e3:23:88:05:7d:
                    d0:b4:97:75:82:99:da:48:4a:40:f2:fb:31:7d:99:
                    c3:f5:33:ab:95:ec:05:21:8f:73:1d:32:b6:9c:eb:
                    43:0a:ac:e4:5f:d3:37:aa:18:7f:f4:5e:75:c4:8f:
                    09:ca:2f:e8:81:3a:83:62:c8:33:38:bb:1c:2d:dc:
                    51:2b:ef:ac:af:ff:6e:81:11:51:8f:54:7d:c7:a8:
                    1d:09:b3:e3:06:65:bf:ea:5f:1b:e7:05:ad:6d:a5:
                    94:b1:5e:92:27:1c:71:7b:57:5c:03:13:96:77:48:
                    43:8b:4e:de:04:e6:5b:2a:b0:a0:48:83:d3:b9:0d:
                    b5:37:4c:b3:2c:ba:69:57:39:cc:fc:e5:d9:a3:b9:
                    66:74:b2:af:73:7c:81:1d:f7:1e:63:3e:4f:aa:f9:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:D1:B3:2B:17:2D:9A:5B:46:FD:FC:6A:68:41:BA:91:E7:E5:9E
            X509v3 Authority Key Identifier:
                keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:04:1f:ed:7f:63:56:db:41:bd:78:69:82:26:a3:72:b0:64:
         3b:a8:3d:06:8c:f3:c3:67:b2:31:10:02:83:86:ee:4f:c8:27:
         90:e4:76:92:ca:6c:7d:da:4f:4b:fc:b3:b6:bc:b5:b7:b0:63:
         c1:f0:80:4a:31:41:50:df:97:13:5b:e2:73:f7:8e:d6:9a:66:
         db:cb:e9:bb:68:d7:77:f9:7d:01:67:03:7e:8d:58:c6:e4:ca:
         bc:88:84:db:76:98:27:ff:c4:e3:88:bd:cb:b6:f7:4f:c4:47:
         59:90:5b:db:51:68:9a:ef:9a:1a:31:f9:e6:66:86:a8:30:70:
         a3:a5:01:d5:8c:68:a7:d0:e4:f9:ba:61:ed:b6:5d:80:de:3d:
         ec:85:53:38:46:65:95:51:20:76:22:6d:31:58:1b:d9:2c:72:
         a9:bc:47:3f:f5:e9:50:11:39:2a:5c:88:10:48:aa:30:f0:17:
         fb:c2:1e:1f:86:c2:6b:bb:50:fd:8b:52:90:c7:0c:1a:6b:7b:
         2b:37:0a:e1:f2:2e:ef:d4:d4:df:39:79:a7:83:96:05:fb:c0:
         e7:ca:3f:da:24:25:63:95:e1:30:84:35:51:95:cd:98:ea:cb:
         23:1b:8a:71:06:d2:4b:96:8a:43:7a:ca:f7:4f:57:c5:a9:ba:
         d1:4a:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:57:29 2026 by rpki-client