Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          9eSEm5MjnQIQzWdKcQMrDY8zNZxGa7QPG+IztbboGJE=
Subject key identifier:   16:6E:6F:8B:4D:AB:0F:87:93:65:57:74:95:52:29:01:B6:70:B3:C5
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          0187
Signing time:             Thu 05 Nov 2026 05:24:55 +0000
Manifest this update:     Thu 05 Nov 2026 05:24:55 +0000
Manifest next update:     Thu 12 Nov 2026 05:24:55 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: 4Ckih842BQ8fQt2NVJASqVSqX96Nv8OC4Bif0Cf/CCw=)
                          2: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: mkJn5HcxZSix0xQ2l2GY2Rnt28cmXJs8LaMjzdF8Bqk=)
                          3: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: nnr6N7gsoMtV6N+GfW2wiOurQdubrWp+eixXKsMow9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 05:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Nov  5 05:24:55 2026 GMT
            Not After : Nov 12 05:24:55 2026 GMT
        Subject: CN=6aec1327-1919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:cb:8b:fc:60:df:d5:cc:55:19:dd:cc:ff:
                    ae:3c:2a:72:2d:ff:23:08:42:3f:61:99:af:2a:9b:
                    20:31:c4:8e:d6:69:91:2e:b5:1e:8a:26:81:37:95:
                    ee:fa:c0:41:1a:ae:c0:13:9e:cf:ca:af:0c:86:15:
                    72:69:7c:f2:ba:e6:0f:99:5a:e4:12:14:52:21:5c:
                    14:48:b4:20:46:00:2d:2d:85:1c:c2:29:d5:13:9d:
                    15:4d:27:d1:a6:3e:16:be:4c:b5:69:dd:18:1a:cd:
                    95:80:92:70:a2:9d:6e:cd:76:5c:f6:56:55:7c:8a:
                    2f:86:59:a1:6e:46:b9:33:b1:89:cc:06:6e:53:a7:
                    6a:01:f1:83:3b:2a:87:7f:c5:d9:3d:a4:e4:8b:71:
                    dd:d4:5f:b0:da:9b:22:d3:22:7e:8e:cd:7c:60:72:
                    8d:e3:2a:2a:d4:06:5c:a8:23:25:2a:84:0c:65:e6:
                    d7:56:e3:68:75:b9:13:75:68:76:5b:1d:78:b6:99:
                    85:26:f0:d3:45:d0:35:59:a1:92:f3:4e:12:75:f6:
                    60:d2:16:57:cf:27:72:8b:0d:ed:96:20:95:96:bf:
                    07:23:f4:ea:25:ec:07:72:d5:37:49:21:42:92:ba:
                    d9:51:51:77:a9:be:f5:a8:0a:25:a2:f6:86:21:ae:
                    c5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:6F:8B:4D:AB:0F:87:93:65:57:74:95:52:29:01:B6:70:B3:C5
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:72:f7:f9:60:29:18:32:16:3a:e8:74:4b:68:6e:49:40:4d:
         15:a5:5d:d8:6d:85:b3:d7:11:47:f1:40:3c:05:32:41:58:66:
         06:a1:90:ea:bd:bf:b0:7e:b6:45:ac:1c:4d:ae:85:f0:98:e0:
         f4:47:0f:ef:4d:b1:90:5d:fe:76:61:89:21:a0:5c:a7:b4:d0:
         84:0c:fb:0d:74:e2:fa:52:5d:ee:ef:05:91:a8:b7:00:d3:29:
         e1:11:0c:2d:da:ab:31:42:91:85:d3:fd:f9:9b:48:b4:19:1e:
         cf:3c:7f:7c:78:92:a6:96:2d:b1:2b:cb:10:27:e2:05:f0:10:
         dd:84:b6:61:79:1c:d1:17:b5:79:d3:e2:26:1f:c2:ef:13:ac:
         28:cb:40:96:60:ce:2b:85:73:c8:bc:21:c8:4f:2e:85:77:db:
         a7:bc:2f:12:26:64:87:36:f3:ec:d2:bc:d6:0b:dc:fb:fe:8b:
         18:1d:09:75:dd:b9:35:80:03:3b:b7:76:48:dd:83:98:7e:18:
         b5:45:ba:1f:51:73:57:8f:f6:5e:4f:cc:d9:eb:98:a4:90:53:
         41:39:a1:e1:58:bc:55:98:35:73:54:23:88:87:dc:66:04:f6:
         a0:50:d9:b3:85:8f:57:27:bc:13:9d:6e:d3:e0:a0:78:d6:43:
         56:b8:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:26:21 2026 by rpki-client