Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
File:                     TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft (raw, json)
Hash identifier:          8kdFQ4r4CnmQpRsP99+MC3NYAEep9BajL3ZXch2ueOM=
Subject key identifier:   62:DE:58:BE:8E:A6:B6:03:87:70:3D:16:85:59:53:DE:23:4A:3F:DB
Authority key identifier: 4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40
Certificate issuer:       /CN=A91834AD/serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
Certificate serial:       0D53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
Manifest number:          0D3B
Signing time:             Fri 02 Oct 2026 18:27:11 +0000
Manifest this update:     Fri 02 Oct 2026 18:27:11 +0000
Manifest next update:     Fri 09 Oct 2026 18:27:11 +0000
Files and hashes:         1: TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl (hash: TULbTcx2wPOxv5xvXCKOcrxoATTeofFksGMHuXfHCl4=)
                          2: 6FFF14F0695E11EFAF2AF785C4F9AE02.roa (hash: g8GNIuMgpliQ182S/DwLgAMf2Tv+xYsQpUqBRCmHHS8=)
                          3: 6C3D5766692F11EF9E22F029C4F9AE02.roa (hash: Gd51DSJy7RuRHfcxRKQ4BVa2f62IksPTzTJJwkzjFSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl
                          rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91834AD, serialNumber=4D76F793E2B129F46F8FC90E21F9D0FEAF10D040
        Validity
            Not Before: Oct  2 18:27:11 2026 GMT
            Not After : Oct  9 18:27:11 2026 GMT
        Subject: CN=6abff77f-4744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:ed:10:bf:1e:1c:93:f0:8a:e8:ef:25:78:
                    31:f8:cc:a0:4a:05:bd:a9:a2:e7:33:1d:f2:de:6d:
                    45:fe:63:77:34:03:20:46:f0:ba:10:62:28:fb:7f:
                    36:79:fa:2b:ed:83:5c:ce:67:68:4c:0d:b1:13:3b:
                    5f:3b:d0:1b:04:48:1f:35:3d:43:29:fe:aa:2f:b8:
                    fe:ca:20:68:4f:68:90:a4:26:a4:de:72:ec:ef:21:
                    9a:42:59:09:d4:d9:c7:a8:00:18:18:f3:73:e4:f1:
                    78:7d:10:6f:22:4c:21:c7:26:22:e6:b8:77:1f:c4:
                    08:d7:d2:40:04:e1:a0:2c:89:34:4d:f4:af:b3:ae:
                    eb:36:e2:e8:6e:24:02:32:ac:c2:cb:31:42:4b:6b:
                    4d:19:bc:d6:f6:98:ab:93:ec:b1:dc:3f:0b:5a:02:
                    c0:fe:15:99:c7:92:7e:ad:2f:9f:97:8b:eb:99:48:
                    b1:22:15:77:91:e0:fc:dc:63:0f:84:a6:60:d5:81:
                    0c:2f:5e:0f:1e:21:f0:40:d4:74:a2:26:29:16:dd:
                    d9:6f:a0:0c:51:c1:65:24:26:48:80:97:b3:eb:74:
                    1d:ce:ec:ea:1c:01:a7:35:31:5d:34:7e:43:f0:c2:
                    01:13:c3:ef:4e:38:9c:43:1a:57:73:d4:d0:ba:e2:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DE:58:BE:8E:A6:B6:03:87:70:3D:16:85:59:53:DE:23:4A:3F:DB
            X509v3 Authority Key Identifier:
                keyid:4D:76:F7:93:E2:B1:29:F4:6F:8F:C9:0E:21:F9:D0:FE:AF:10:D0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91834AD/0DE4AD0408FE11EA9833C578C4F9AE02/TXb3k-KxKfRvj8kOIfnQ_q8Q0EA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:5d:e1:0e:1b:ee:60:2b:96:b0:f0:34:2d:ce:ec:69:5e:
         50:4e:ff:cb:14:20:12:7d:24:ea:23:b0:30:74:43:82:ac:4a:
         bf:c0:12:94:e4:a8:b4:c6:96:25:48:82:ae:ad:f5:0a:03:59:
         d1:59:30:90:5b:dd:f6:f2:81:dd:ea:d4:23:3c:ad:de:2c:97:
         e3:e8:7b:c9:b1:0a:ad:7f:37:62:3b:31:82:6d:6c:d6:08:83:
         5f:9e:ad:9a:a5:a8:d7:1b:84:57:02:7a:89:d6:e5:dd:32:37:
         90:6a:6d:a3:7b:b1:5d:44:42:33:70:1b:d0:b4:3c:f0:48:1a:
         4e:18:dc:cc:b4:4c:a0:4e:5f:cf:c6:61:ae:56:b9:2a:2b:52:
         c4:be:6b:9f:39:96:51:a2:06:a6:c2:58:38:8b:33:d7:ba:33:
         69:ca:2f:a0:8b:f5:cc:38:92:4b:5c:e1:49:c7:78:29:48:2e:
         80:15:c7:5b:2f:89:c5:ef:99:17:7f:8a:17:47:90:1f:74:35:
         66:5f:8c:a6:16:03:ed:5a:60:5e:0d:7c:50:56:d9:21:45:e2:
         f9:02:83:14:1c:73:0f:0a:2f:67:72:a2:19:9a:0d:64:d7:b5:
         de:35:81:26:f4:ec:2e:75:22:06:b8:f4:0a:50:65:81:6a:7b:
         9a:0e:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:37:56 2026 by rpki-client