Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
File:                     tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json)
Hash identifier:          bRLiY45EAcHHAnzKH2b3KFlmED+tDfSvGHs/8JjJYuw=
Subject key identifier:   53:B6:06:C7:CD:4B:05:29:68:2C:A0:32:E5:8E:2C:0F:A4:23:1A:EE
Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD
Certificate issuer:       /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
Certificate serial:       0862
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
Manifest number:          0853
Signing time:             Sat 24 Oct 2026 21:00:00 +0000
Manifest this update:     Sat 24 Oct 2026 21:00:00 +0000
Manifest next update:     Sat 31 Oct 2026 21:00:00 +0000
Files and hashes:         1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: R5EImn528/WF33M5psx+Mt+CDbWTbBtnxXVAg1monrw=)
                          2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: izzrubnBkOxdsuT67xCfIYO5778s2U1hxcgL0pbvBW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl
                          rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD
        Validity
            Not Before: Oct 24 21:00:00 2026 GMT
            Not After : Oct 31 21:00:00 2026 GMT
        Subject: CN=6add1c50-006c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:e1:15:b8:86:b9:86:9b:6a:ba:cd:f7:ff:
                    98:74:24:73:f0:ee:b9:f8:12:bb:1f:c1:5e:8e:0e:
                    62:b5:62:b1:6e:6a:b6:35:d1:d4:b6:e7:fa:27:d5:
                    cc:ea:6b:f5:cc:f7:f7:ef:79:d8:ef:8d:2e:7b:4e:
                    7a:53:0a:3a:52:d2:3c:a1:77:fa:45:f4:64:f3:09:
                    87:f9:5e:dc:c1:b0:bd:2e:9d:e1:06:e5:0e:bc:af:
                    93:61:b3:35:93:ab:66:38:cd:5a:e9:39:be:98:2c:
                    8c:23:7f:fb:69:40:63:d0:fb:cc:06:12:fd:91:9d:
                    f8:65:42:0b:f3:bb:25:35:a4:62:07:cb:d8:26:d0:
                    9b:b2:4d:a7:02:f5:a7:17:71:25:80:3e:cd:0a:0b:
                    a1:9b:90:1a:2a:ab:a7:77:35:44:59:d7:0d:37:4e:
                    cc:fe:97:85:b4:b8:a0:44:dd:38:75:4a:92:a7:4e:
                    da:c2:b8:c7:04:48:b0:9f:fa:ad:40:15:4b:d3:5b:
                    c2:7a:dc:dd:27:50:e2:24:c8:53:80:b7:36:9f:47:
                    91:0e:4d:f5:0f:67:fb:af:0d:bb:a8:94:9a:24:1d:
                    92:fe:74:98:87:ce:5d:9e:e9:eb:26:76:26:b9:b2:
                    08:5f:27:66:e1:04:12:4c:81:86:0c:dd:61:05:8a:
                    16:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B6:06:C7:CD:4B:05:29:68:2C:A0:32:E5:8E:2C:0F:A4:23:1A:EE
            X509v3 Authority Key Identifier:
                keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:73:76:ca:38:f0:d6:da:27:d6:2c:c4:ca:af:32:6c:31:ec:
         ea:17:6f:d9:58:2f:e0:fc:ba:34:a8:ff:9e:40:60:9a:59:c6:
         7c:80:31:43:50:ca:1c:a6:aa:d2:16:77:ae:9a:7a:8d:d6:4b:
         2e:7f:90:6d:78:6f:e2:2a:9c:2a:df:94:e9:9d:87:2c:19:78:
         83:46:7a:97:09:54:46:13:69:11:f2:74:2c:b2:06:84:e9:9f:
         d1:d1:01:e5:cf:1e:d4:95:14:5c:12:46:5c:09:e4:1c:d5:27:
         15:66:f0:1d:ad:9f:33:6e:94:90:ef:06:ab:37:d8:7b:7b:6c:
         84:0f:73:7c:64:d1:4b:7d:34:7b:c1:a7:ea:61:20:88:c5:94:
         e1:19:91:66:07:a8:aa:60:7f:11:ac:b3:bb:a9:d6:66:72:93:
         1f:00:a5:0c:86:82:0c:3b:3d:de:3e:1c:e4:a7:4c:b0:a0:b3:
         46:c9:bc:fb:7b:55:37:8a:89:ea:0e:ec:ac:77:b0:9d:9b:ab:
         1a:1f:5b:60:b9:a1:3c:3d:36:cd:90:70:a6:20:b1:a7:93:1a:
         ac:42:46:05:da:c5:32:22:c0:0b:1f:44:dc:90:1e:84:85:d1:
         a3:91:16:7d:38:ac:c7:70:93:65:b8:44:94:68:71:c3:4e:eb:
         bb:be:0a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:37 2026 by rpki-client