Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File:                     tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier:          efNjs0gos99HypFrJTwkKBod1J0hZU8Qg854sctImpk=
Subject key identifier:   FE:5A:DE:BE:A9:B3:17:DB:38:DA:57:6A:55:25:56:07:9D:87:56:F7
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer:       /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number:          01A7
Signing time:             Sat 03 Oct 2026 04:48:59 +0000
Manifest this update:     Sat 03 Oct 2026 04:48:58 +0000
Manifest next update:     Sat 10 Oct 2026 04:48:58 +0000
Files and hashes:         1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: L/+5ThLXeofVVbp74QOBQkOQRoPLDhjemoH0zYC0j2Y=)
                          2: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: cYJup+wUJGtYgdIrc1oUwAkSXzmV3AlmQSx4GJxEnkI=)
                          3: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: Mem81CDNt2s+1wxtJl9qhDaTI/CWwYf0sPuRtvT/byE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
                          rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
        Validity
            Not Before: Oct  3 04:48:58 2026 GMT
            Not After : Oct 10 04:48:58 2026 GMT
        Subject: CN=6ac0893b-d711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:44:5d:44:f3:15:41:39:66:f5:24:9b:03:
                    ca:7a:34:69:82:ff:73:26:cb:c6:dc:15:35:39:c5:
                    0c:0b:f6:b3:7d:07:4c:74:b3:3d:be:99:21:80:13:
                    7d:65:ba:26:43:60:fe:81:d8:0e:ac:c4:a2:c6:7d:
                    8f:cd:7c:92:a4:2c:d8:84:92:05:4b:7c:c8:82:32:
                    08:a0:ba:d2:9e:f1:87:52:0d:ba:6e:af:42:70:59:
                    f3:b5:60:05:62:0e:db:dc:57:95:3f:f6:c2:56:37:
                    5c:98:85:6a:5b:8b:0a:69:9a:4b:e1:36:cd:c6:2e:
                    a5:5c:de:cb:4c:1b:1b:0c:8d:38:45:d4:49:fd:86:
                    64:08:e0:78:8b:30:50:d9:14:70:4b:e1:87:21:a9:
                    ed:25:59:fe:b1:72:91:5f:22:4b:92:05:85:ab:a6:
                    b0:24:14:a8:26:49:f0:73:fe:f4:e8:1d:ca:d2:6e:
                    87:16:3b:ff:32:50:c7:43:29:30:ca:df:77:48:0d:
                    9a:3d:32:fd:63:1c:c5:04:ce:e6:09:a2:b5:10:5c:
                    3e:d1:33:8a:07:f9:b4:05:f6:c1:4a:31:6a:c6:94:
                    c7:0f:c2:17:74:43:80:82:1b:93:a3:3f:ca:ce:f5:
                    c7:3a:40:05:7a:7c:9e:76:b8:06:c6:b1:d7:f5:1b:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5A:DE:BE:A9:B3:17:DB:38:DA:57:6A:55:25:56:07:9D:87:56:F7
            X509v3 Authority Key Identifier:
                keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:a6:3b:f1:d0:e8:7b:71:0a:38:b4:a7:62:24:16:cc:ed:
         c4:b7:81:81:8b:c2:ad:d5:48:a1:34:7d:54:3d:60:3b:88:eb:
         9b:ae:83:41:95:86:1b:2b:4a:9e:20:63:7e:b5:f5:6c:6b:c6:
         52:59:c1:bf:6d:0b:65:ee:a7:ce:b1:d4:fa:b7:ee:a1:9f:7b:
         2f:02:f1:79:21:72:ea:f1:87:93:a0:78:55:91:8c:5a:22:93:
         ed:a0:b6:25:eb:66:11:f7:1f:8c:3b:be:96:3b:91:99:2d:df:
         32:2f:bc:7f:63:0b:0a:5d:28:51:82:61:85:ff:7f:27:fd:ca:
         aa:df:ac:61:22:31:66:41:f7:7d:9e:78:70:8d:b2:90:b0:51:
         0f:9d:02:4c:7f:8d:7d:f5:8e:11:49:00:bf:4b:3e:79:50:64:
         26:94:7e:5b:d7:56:5a:d2:8e:a0:e0:ff:14:38:b4:a3:f9:74:
         1d:97:fe:16:fb:32:d8:2e:4a:7e:26:69:4b:5f:81:f9:62:6d:
         27:57:48:67:17:0e:66:d3:c3:4b:20:c2:9c:e4:c2:32:96:e0:
         05:ed:6c:e0:a5:bf:70:c0:b9:4f:0d:c0:35:d6:f4:8c:74:b1:
         05:de:4b:99:91:32:99:21:c1:e2:a4:e3:68:45:e2:62:cd:e5:
         07:8b:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:25:29 2026 by rpki-client