Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File:                     TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier:          Tv5xM2ZcAA8kktfWCv31JxGflUJBwezZ8Z+EQNC3Yx4=
Subject key identifier:   13:15:7A:E4:87:22:0E:06:D4:80:E7:72:91:9B:F9:C8:55:D9:55:82
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer:       /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number:          01FC
Signing time:             Wed 21 Oct 2026 03:51:37 +0000
Manifest this update:     Wed 21 Oct 2026 03:51:36 +0000
Manifest next update:     Wed 28 Oct 2026 03:51:36 +0000
Files and hashes:         1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: r9Gt8QynPUmIMjHAkvnrYx0/2TKEI77FAIWGrDs30jk=)
                          2: 61437CA4ABB911F1BD08353C5611F970.roa (hash: 7zLyRUO2jbdPU/ju8XFNTwlDh0zc8bJo13HRv/HfWCI=)
                          3: 90D05F8EABB711F1BEA6DAFF5411F970.roa (hash: MkS+e7RWc04qmAprNFSaDQdzetMMyHG8u/16PJQSYfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 03:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
        Validity
            Not Before: Oct 21 03:51:36 2026 GMT
            Not After : Oct 28 03:51:36 2026 GMT
        Subject: CN=6ad836c9-fdf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:3d:86:c9:3a:6e:35:90:34:3f:88:61:9c:
                    36:4d:00:6c:6f:cb:44:31:2b:c4:8b:48:28:38:2b:
                    ba:cc:c4:b3:4d:29:bf:c5:b6:b8:23:d8:c9:43:ad:
                    bd:ef:cc:73:11:a4:dc:5e:86:2e:17:4e:65:61:a2:
                    7b:f6:70:2a:f5:98:18:51:69:2e:1e:88:c7:9a:7d:
                    2b:1d:e6:6b:a1:81:37:bd:a7:50:77:b7:be:2f:7b:
                    e3:c0:e0:0b:8c:fa:f1:a9:ba:7e:dc:bf:f9:3b:bd:
                    8f:b5:0a:b4:02:92:6d:79:82:20:bd:9a:e8:c4:ab:
                    7e:fe:61:a0:06:46:bd:9d:3c:1a:1b:fb:6c:f6:80:
                    99:e6:9b:aa:9c:f9:64:df:35:10:4b:30:ef:d0:97:
                    ab:0f:db:03:93:62:63:a1:73:84:cb:ec:7d:07:6b:
                    d8:bb:f5:73:6d:b1:25:71:9d:3a:dd:59:0b:9f:63:
                    ab:20:e2:36:e8:40:5e:17:10:2c:13:b5:5e:b4:9f:
                    80:23:9d:33:26:3a:5c:08:ef:a7:f3:e7:e5:f4:3d:
                    aa:3a:3d:68:49:f3:1e:22:ce:73:d3:7e:0f:b8:a0:
                    ff:66:5a:a6:c3:c3:db:a8:a7:e5:14:bf:ff:9c:f9:
                    96:41:6b:31:3e:2a:25:fb:5f:81:66:f6:03:8f:bf:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:15:7A:E4:87:22:0E:06:D4:80:E7:72:91:9B:F9:C8:55:D9:55:82
            X509v3 Authority Key Identifier:
                keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:3f:3d:ff:89:98:2d:63:6c:5a:8a:a6:c5:37:c1:25:8a:
         22:a4:eb:8b:0f:b4:18:de:a9:ec:17:c9:63:3e:2e:92:7f:e1:
         ff:04:5e:4f:24:8f:72:d9:46:df:05:b7:4b:c6:ab:91:57:16:
         4f:9d:9a:4b:f7:89:9a:1c:5f:18:dc:1f:b2:3f:68:1b:c9:bf:
         84:84:0e:f7:d6:35:06:db:59:a1:34:49:23:f1:e8:32:a0:70:
         c8:ed:53:46:ea:aa:21:5c:a7:4e:42:80:ea:c2:db:94:1e:17:
         de:eb:51:be:7c:f0:85:11:eb:3f:c3:be:4b:58:3f:f9:1f:b5:
         4c:8a:35:09:6b:d5:f9:f0:dc:62:a7:14:da:83:ab:21:90:cf:
         2f:90:48:7f:81:b0:a2:24:92:d2:b8:50:c5:95:23:fd:b2:4b:
         ad:dc:8f:a5:bb:38:a2:6e:f4:71:58:b4:77:2d:ce:6e:b0:dd:
         db:47:ee:c4:b2:11:fd:88:c2:9e:25:30:e2:5b:74:9f:3a:0a:
         00:96:7e:67:fb:bb:99:18:3a:72:15:4a:6d:3b:8d:f3:e6:bb:
         e3:70:b1:eb:a2:49:4c:ed:e2:f5:d8:7d:fb:4e:21:e3:da:15:
         83:cd:44:24:3c:a7:fc:b0:d5:af:f5:47:9d:10:18:f3:52:75:
         4b:57:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:14:35 2026 by rpki-client