Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File:                     twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier:          Lc6jZSoO7mBXNc+Mah/U0II49vVdYKxdgfZ54qRz+GU=
Subject key identifier:   BB:36:D1:3D:F0:70:30:21:16:4F:E4:4C:38:E6:F8:C3:65:9B:68:F3
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       0B1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number:          0AE3
Signing time:             Mon 26 Oct 2026 19:26:00 +0000
Manifest this update:     Mon 26 Oct 2026 19:26:00 +0000
Manifest next update:     Mon 02 Nov 2026 19:26:00 +0000
Files and hashes:         1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: /+1Q1tN+veASeU0mzDbTJpee6HwVY73tP9od4KQsZIc=)
                          2: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
                          3: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
                          4: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 08/Bns5oicGJqt6kPsNA08rh33SYBkfA62ruEUE1kTw=)
                          5: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
                          6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2846 (0xb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Oct 26 19:26:00 2026 GMT
            Not After : Nov  2 19:26:00 2026 GMT
        Subject: CN=6adfa948-8737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:49:e7:9c:79:78:a3:93:d5:c0:53:90:b6:
                    83:2d:db:32:0e:bc:d4:2c:59:34:57:81:b1:77:46:
                    ba:0f:47:2e:c7:32:50:ec:29:91:60:f5:9c:08:8d:
                    c1:8f:32:cf:3c:1f:75:51:da:ea:85:e9:98:8b:f9:
                    c5:34:42:c3:ab:46:17:12:c3:74:fb:77:2c:86:de:
                    20:4b:0e:71:3e:9f:3f:6d:73:f1:bc:05:0e:0e:a7:
                    26:0b:94:e6:29:63:ba:c5:86:45:63:0d:f4:62:1f:
                    5d:56:3b:2b:d0:95:25:85:fb:70:78:ef:13:8d:ad:
                    57:ba:49:b8:15:93:4f:fd:7b:6b:c9:d1:79:fd:ed:
                    e1:31:11:78:04:18:e7:98:d4:fe:30:4e:26:cb:c5:
                    52:7e:74:4f:f9:b2:cd:53:60:4a:37:a6:4b:7e:0e:
                    9f:cc:9b:bb:51:af:dd:24:3f:12:f1:ba:1e:40:8c:
                    3b:5b:d9:c1:34:13:b1:e8:9e:66:72:b2:f8:e2:90:
                    d3:53:09:c2:9d:9a:fb:5f:4f:85:04:1f:f4:67:a6:
                    c7:fd:3d:65:9b:a2:50:b1:3f:45:01:42:ad:88:29:
                    07:df:29:f0:e3:23:3f:60:ec:fd:e1:50:f7:0a:6c:
                    86:d4:5b:5b:c2:49:c4:ae:03:99:95:6c:b3:b3:06:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:D1:3D:F0:70:30:21:16:4F:E4:4C:38:E6:F8:C3:65:9B:68:F3
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cf:ca:b8:4b:08:68:0b:7a:14:b0:d7:0d:0b:75:2d:ca:8a:
         bd:d4:19:a5:99:89:c1:16:e0:e7:a4:3f:86:91:34:ea:de:74:
         13:db:48:ef:b5:c7:70:a4:3d:b4:64:ff:66:71:ae:2b:59:5a:
         e7:98:ae:a9:56:b1:5a:67:53:5e:cc:ab:09:6f:00:de:22:ef:
         0e:01:d3:e7:f2:26:8d:44:7d:80:94:58:4b:9f:e7:8f:73:70:
         df:af:68:c8:4c:8d:17:c5:31:98:ce:51:2c:0f:8c:5f:3e:19:
         43:94:35:93:32:59:a8:e9:e6:37:ea:2a:33:0e:63:63:2c:75:
         01:e2:87:76:e0:46:c6:25:a3:8a:5c:41:53:bc:27:cf:c8:ff:
         95:ed:f2:ed:f5:34:fb:94:43:1e:fe:b7:85:a2:ec:a9:0d:c0:
         e7:a0:bc:2a:27:b1:61:39:da:9b:3d:95:21:ee:c4:75:1b:63:
         c4:42:74:0c:ab:f1:a8:5e:fc:ec:47:a3:4c:15:29:a3:9a:77:
         73:25:e2:a3:0b:4c:cb:5e:e7:18:f1:56:4e:46:6b:ba:3f:74:
         be:dd:c9:22:40:79:24:7a:bf:5d:8c:65:b7:b3:a3:ff:71:9d:
         25:09:80:a7:5f:f2:2d:22:1d:be:a3:18:4a:3a:c4:27:2e:07:
         75:89:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:15:44 2026 by rpki-client