Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
File:                     TiH1qoySjAtnV8A-VbClkjxOSKs.mft (raw, json)
Hash identifier:          QlyqIct6hWvXSRP6V817M1N0QF/3CxqLPcbe34PYrHw=
Subject key identifier:   F7:76:EA:FC:25:2E:3D:31:DC:80:CA:C3:80:3E:A8:00:BA:D0:31:0B
Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB
Certificate issuer:       /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
Manifest number:          0240
Signing time:             Thu 29 Oct 2026 03:11:52 +0000
Manifest this update:     Thu 29 Oct 2026 03:11:52 +0000
Manifest next update:     Thu 05 Nov 2026 03:11:52 +0000
Files and hashes:         1: TiH1qoySjAtnV8A-VbClkjxOSKs.crl (hash: fgiZcctfEYgHl1FvEG5kwhvIm6HD2CrMDlgYCLiGcSw=)
                          2: E586278C29A111F0BA1F4E63C4F9AE02.roa (hash: TWqXRNuHNGqT9xQFkTm/MRTTDI5Xz/E8TDTyfszyBXc=)
                          3: F97DB5F229A111F090BC8163C4F9AE02.roa (hash: 8nTlPDZ0DSsBBfv62oC2hGynFbU3zo/HuUWjusgg60k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl
                          rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 03:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB
        Validity
            Not Before: Oct 29 03:11:52 2026 GMT
            Not After : Nov  5 03:11:52 2026 GMT
        Subject: CN=6ae2b978-a212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:b8:cd:84:70:23:3a:78:59:3e:0b:b5:ff:
                    80:f0:8e:13:cd:d6:c0:7f:51:ae:90:e3:2f:e0:db:
                    9d:c9:8b:8d:d4:0b:54:86:f1:b1:d7:88:46:d1:ba:
                    9e:00:66:63:08:2a:be:f6:25:1d:e9:8d:f1:02:10:
                    53:d1:90:fb:91:00:58:4b:ba:76:62:9d:89:c4:77:
                    d0:f1:d7:39:ab:b2:55:b2:db:b5:b9:6b:c7:6c:a4:
                    14:34:b5:a8:3f:ba:a1:27:cc:1d:1e:7d:67:c8:83:
                    1c:08:b7:87:e1:d6:5f:f2:09:79:c3:c8:25:29:d5:
                    66:b6:23:19:c7:73:3f:cc:11:31:f3:90:6a:09:b6:
                    79:95:7a:bf:c2:cf:49:a5:de:14:9f:5b:ac:0a:8e:
                    38:ab:e7:82:cd:6b:b0:2b:d8:9a:89:90:62:56:23:
                    49:1f:9c:51:bc:bd:8d:94:88:50:0e:cb:5d:d8:fc:
                    44:46:b3:3b:4a:e6:82:8b:39:68:cb:4c:8b:55:31:
                    d6:38:1e:f3:58:84:59:9c:7a:20:14:84:75:f0:08:
                    14:5c:33:df:df:4b:1c:bc:9c:f4:66:4d:85:8c:9f:
                    ea:37:58:59:bf:bb:6e:34:e7:2f:3a:bb:a1:04:53:
                    f9:4b:ca:d3:82:b4:7d:91:65:f0:49:07:2f:5e:69:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:EA:FC:25:2E:3D:31:DC:80:CA:C3:80:3E:A8:00:BA:D0:31:0B
            X509v3 Authority Key Identifier:
                keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:6a:c4:41:85:5d:7f:00:f5:30:4c:2a:60:02:fb:3c:4c:03:
         d5:0d:db:9b:28:34:5c:9e:1a:97:2b:46:6d:2e:0d:c6:d8:25:
         8d:d4:7d:e0:45:99:5b:ad:78:ba:14:3f:f0:ff:51:29:c4:f3:
         88:43:ed:96:9d:85:a4:79:e0:bf:2c:aa:7b:e9:62:fc:f6:28:
         21:33:b9:21:2e:0b:f8:bc:52:20:6a:da:05:51:d5:14:36:52:
         27:fd:f8:27:fe:b0:5e:89:df:64:df:6a:8c:b2:1f:21:d4:63:
         40:31:1a:f5:27:59:9a:e6:88:80:74:da:99:8e:5a:c1:7e:73:
         ea:e0:c4:64:4b:16:65:a3:d7:2c:c5:6a:4c:44:45:dd:6b:d2:
         0d:ff:2c:06:33:07:71:6d:30:d2:17:b5:e1:68:78:26:f7:a3:
         4c:9b:d7:f5:a7:3c:4a:5e:4e:d5:65:45:77:b0:39:21:c0:b8:
         bc:f0:46:d4:83:9e:d3:62:1f:b9:28:73:e4:1a:69:e6:d3:19:
         35:e5:3c:99:4c:3c:1f:a6:d4:ad:07:22:90:a5:52:0e:58:1d:
         bd:9f:19:c7:0f:a1:c4:46:1b:aa:51:e3:39:90:9d:b9:43:b4:
         4b:97:25:e4:d4:b9:40:7d:aa:1c:4f:fa:1e:93:9a:33:69:ac:
         4c:d5:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:49 2026 by rpki-client