Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File:                     Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier:          FxP7WI3gV4GtrY1qEbU6B1XXidvWFJSNHKdrYU7goUU=
Subject key identifier:   33:CA:48:8A:21:2B:73:7F:B9:91:94:62:96:28:78:FF:7C:31:2C:41
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       0359
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number:          033F
Signing time:             Wed 09 Sep 2026 01:03:22 +0000
Manifest this update:     Wed 09 Sep 2026 01:03:21 +0000
Manifest next update:     Wed 16 Sep 2026 01:03:21 +0000
Files and hashes:         1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: 12izqCdd5n/5ndVlBQZf6NH0oRJc+IU6EKrKgukrI0Q=)
                          2: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
                          3: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
                          4: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
                          5: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 01:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Sep  9 01:03:21 2026 GMT
            Not After : Sep 16 01:03:21 2026 GMT
        Subject: CN=6aa0b05a-9049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:8d:19:03:a1:38:b0:0e:d0:27:91:a9:6f:
                    1f:58:1a:3f:36:da:04:f4:a5:29:83:c1:f2:dd:5e:
                    49:20:5c:f0:a2:d6:c9:fe:2f:16:6e:15:22:32:92:
                    89:5b:ba:40:bb:c2:1f:55:07:c6:b2:90:be:a2:fc:
                    58:29:bc:6d:c2:e3:c4:2f:b6:3b:9a:5a:df:91:22:
                    ed:c7:11:d9:7c:ce:68:9a:c2:f5:e3:f1:23:b7:1c:
                    83:78:83:a8:5e:f6:ad:f5:eb:62:61:bd:78:e2:be:
                    d6:b5:4b:d7:9a:b8:6b:f5:2b:8e:49:97:1f:2b:53:
                    39:90:3e:ac:ab:0d:8e:d1:c2:23:33:ba:10:4f:4d:
                    d3:20:3a:b4:1a:df:dc:82:f9:bd:60:31:da:65:73:
                    c7:1e:bd:65:33:ee:98:78:f9:69:eb:39:f0:7d:c7:
                    2a:20:63:42:da:10:12:99:ab:3d:60:79:d8:54:43:
                    d1:ea:9a:3e:2b:b9:a5:7a:87:40:a9:d7:32:8b:b4:
                    dd:4c:38:9d:d1:aa:33:42:0e:4b:17:41:fa:d3:76:
                    ec:c0:86:da:33:5a:35:9b:c3:44:20:9e:b9:91:6b:
                    03:6f:f6:70:0f:88:53:e3:02:30:da:87:3d:e9:7c:
                    c4:98:cb:87:dc:c6:59:8a:21:de:9e:3c:9a:75:e3:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CA:48:8A:21:2B:73:7F:B9:91:94:62:96:28:78:FF:7C:31:2C:41
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:77:49:fa:d0:64:93:92:67:08:cd:a8:e2:f9:9b:dd:af:bd:
         1d:06:84:73:93:14:a1:79:39:27:2d:d7:27:7f:3f:74:48:e6:
         37:d9:fa:54:4b:6a:07:25:c4:7d:2d:21:59:e4:d4:45:da:c4:
         35:b9:48:39:89:c7:20:6c:a0:2c:8b:fd:a9:63:03:2b:7d:ae:
         c1:02:6e:fd:02:db:3b:e3:0f:a3:50:a5:eb:6a:8e:33:6e:4b:
         63:15:cd:31:00:25:87:1e:15:16:dd:a7:f7:6c:41:ae:dc:82:
         c2:e2:1c:70:13:eb:f3:4c:f7:15:71:a9:4d:06:b3:c3:95:37:
         4a:49:7e:6e:38:36:7e:ad:48:e8:4f:fb:f6:4a:0b:60:45:01:
         9b:a8:f3:43:0a:c7:0f:15:e5:87:12:c2:1a:dc:46:d4:01:c5:
         66:73:a2:29:c9:3f:35:d2:96:20:14:2a:07:55:6b:f9:38:03:
         da:8d:13:af:fa:af:92:d4:12:f9:55:6b:53:1c:62:2e:21:2a:
         b1:4e:9b:df:e5:fe:be:af:c6:09:6b:e3:d1:1e:7d:84:b8:70:
         93:e4:0f:f4:b5:42:1a:42:09:a9:62:4f:82:da:73:a3:d5:97:
         6c:8d:66:f5:ad:56:e8:42:3c:25:89:11:ba:b0:6d:7e:8e:5f:
         72:94:69:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4
QjA4QzI4RTEwHhcNMjYwOTA5MDEwMzIxWhcNMjYwOTE2MDEwMzIxWjAYMRYwFAYD
VQQDEw02YWEwYjA1YS05MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7KNGQOhOLAO0CeRqW8fWBo/NtoE9KUpg8Hy3V5JIFzwotbJ/i8WbhUiMpKJ
W7pAu8IfVQfGspC+ovxYKbxtwuPEL7Y7mlrfkSLtxxHZfM5omsL14/EjtxyDeIOo
Xvat9etiYb144r7WtUvXmrhr9SuOSZcfK1M5kD6sqw2O0cIjM7oQT03TIDq0Gt/c
gvm9YDHaZXPHHr1lM+6YePlp6znwfccqIGNC2hASmas9YHnYVEPR6po+K7mleodA
qdcyi7TdTDid0aozQg5LF0H603bswIbaM1o1m8NEIJ65kWsDb/ZwD4hT4wIw2oc9
6XzEmMuH3MZZiiHenjyadeMqFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPKSIoh
K3N/uZGUYpYoeP98MSxBMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0
MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk
VTlaUTVTVFI2UG1MQ01LT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQXdJ+tBkk5JnCM2o4vmb3a+9HQaEc5MUoXk5Jy3XJ38/dEjmN9n6VEtqByXE
fS0hWeTURdrENblIOYnHIGygLIv9qWMDK32uwQJu/QLbO+MPo1Cl62qOM25LYxXN
MQAlhx4VFt2n92xBrtyCwuIccBPr80z3FXGpTQazw5U3Skl+bjg2fq1I6E/79koL
YEUBm6jzQwrHDxXlhxLCGtxG1AHFZnOiKck/NdKWIBQqB1Vr+TgD2o0Tr/qvktQS
+VVrUxxiLiEqsU6b3+X+vq/GCWvj0R59hLhwk+QP9LVCGkIJqWJPgtpzo9WXbI1m
9a1W6EI8JYkRurBtfo5fcpRpSQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 04:34:04 2026 by rpki-client