Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File:                     -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier:          AZKbZLeulhW8RGRVujYIjfua8BjJIV36CTgb6vnlwLw=
Subject key identifier:   C3:25:8C:20:65:77:3A:86:26:AC:85:45:B0:08:84:4A:17:DA:71:AE
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       0582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number:          053C
Signing time:             Tue 20 Oct 2026 23:50:29 +0000
Manifest this update:     Tue 20 Oct 2026 23:50:29 +0000
Manifest next update:     Tue 27 Oct 2026 23:50:29 +0000
Files and hashes:         1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: dZ5Ym6ZEb40HfnTI4vfe3mNIZN152Gby0TKUFTDtjH0=)
                          2: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: uKQ3Os5h8Ciy1ALccS2eT5zdXu6OgoHV6FkwnLjZ7Y0=)
                          3: 8811C028BCA011F196B0D3186511F970.roa (hash: ff+9N+LYZRo5zdNP7AhRQ3pJ/hvy+pvQ94Rp6Cf0nzk=)
                          4: 0FA47F24751811F18B7B702072A30FBC.roa (hash: pV3GPCRI6eTouBuUqNrjOnvugz77VcQii6lWuzsU7aE=)
                          5: 1298B038BE8811F1BBB9DC0C3911F970.roa (hash: H8B8QHf5cR6QyZsDQYemEDiym0bGaWKaYVhZbc2G/5g=)
                          6: 2F793F64AC1911F1899FFC913311F970.roa (hash: TOGdUCSf1FUktkxbLQfTgHxXSfyAA99mDaspuQGpnTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 23:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Oct 20 23:50:29 2026 GMT
            Not After : Oct 27 23:50:29 2026 GMT
        Subject: CN=6ad7fe45-07e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:66:ec:54:20:de:09:43:16:42:60:cf:91:
                    97:b2:9a:85:21:8b:2b:70:95:4f:84:6a:88:86:31:
                    66:a8:88:93:62:aa:f0:a2:2a:74:66:b8:9e:31:6d:
                    f6:c2:68:08:06:3e:79:51:46:1b:5a:53:14:aa:4d:
                    d0:00:b3:65:a7:c2:64:6f:6f:00:ea:df:d2:86:cc:
                    cb:05:fa:14:3c:29:0c:4a:78:4d:ff:f8:2a:7f:1e:
                    1b:52:70:a6:d5:e6:29:42:20:46:f6:29:bc:e5:ed:
                    34:a6:1e:a8:13:f5:1c:d2:55:58:ac:7a:ea:5d:a4:
                    15:38:1f:26:79:03:b9:d6:54:4d:83:03:41:f7:b6:
                    02:f9:86:66:f2:d8:10:fa:e9:04:cc:bd:2d:b6:85:
                    16:13:39:f8:6b:5a:bf:66:a0:59:48:d6:a3:8d:ad:
                    79:84:4c:35:a5:62:cb:57:ee:73:96:69:2a:7d:eb:
                    f9:7a:11:35:19:10:34:a3:d8:d9:1b:74:53:6e:3c:
                    41:e8:f8:3e:d8:d1:1a:e7:4e:30:9d:5c:55:df:a5:
                    4d:53:03:17:c2:07:9e:08:a8:0e:f8:4a:62:53:6a:
                    e1:a5:c3:ec:16:1f:46:f1:f0:69:5b:ae:31:da:77:
                    fc:28:9c:67:2a:7a:c1:3c:68:4b:59:45:4b:9c:8f:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:25:8C:20:65:77:3A:86:26:AC:85:45:B0:08:84:4A:17:DA:71:AE
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:fc:07:69:55:fb:22:9a:59:13:66:ae:fd:08:3e:1b:48:
         bd:ab:7b:0c:56:1d:e6:e3:b7:85:84:1a:70:d1:76:4e:71:fc:
         c2:7d:6a:14:d9:43:d3:0a:6d:c9:d5:6d:6c:e3:1a:38:32:9b:
         d3:db:96:2d:1d:11:fe:92:6e:c4:4b:e2:23:c0:64:47:16:05:
         61:81:83:f5:7a:16:80:f4:7e:99:e7:10:e8:be:d7:00:70:24:
         96:1a:55:e2:3a:02:c1:58:a4:fe:d9:09:14:36:2a:3b:e6:1a:
         58:02:80:bb:4b:72:98:b3:88:ff:4f:23:8e:4e:6a:32:a4:dd:
         aa:fb:8c:f9:28:e0:d1:b4:17:7d:a0:bd:0b:80:2f:98:0d:67:
         20:88:d5:ce:c1:b4:1c:36:1f:47:66:86:b9:36:02:86:3c:44:
         c1:f0:85:8e:bf:34:3e:24:b1:7f:c1:37:ae:81:d6:88:a2:67:
         f3:c1:8c:aa:fc:40:62:2c:5d:d4:f3:9a:63:27:26:04:cb:92:
         db:a7:64:58:d6:ee:25:8e:a6:4a:d3:99:85:66:96:83:f0:9c:
         b3:15:b2:e0:58:a5:cb:60:9e:f5:5c:79:98:77:d7:4a:b0:32:
         2b:df:cd:74:57:c8:0e:1a:41:bf:e5:13:08:e1:34:1c:84:97:
         be:41:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:34:40 2026 by rpki-client