Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          ZF8sSoUNxeuzdUkkdjh+VN8d7l+LKUUghitNEsxmL8s=
Subject key identifier:   93:26:1B:57:8C:0A:E9:A4:3C:EC:DE:A6:F3:D8:9B:E5:F1:EF:31:72
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          01D3
Signing time:             Mon 05 Oct 2026 03:57:28 +0000
Manifest this update:     Mon 05 Oct 2026 03:57:27 +0000
Manifest next update:     Mon 12 Oct 2026 03:57:27 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: QFS7RAS4TLkxC8ZZI57ghqEN4fgBifameRIYaCN2Fz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Oct  5 03:57:27 2026 GMT
            Not After : Oct 12 03:57:27 2026 GMT
        Subject: CN=6ac32028-968e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:9b:ff:d1:bf:87:52:2a:56:0c:de:61:1b:
                    cd:26:4f:fc:84:2c:cf:38:34:02:56:90:ca:77:4d:
                    6e:d4:27:b6:4e:b1:0c:45:f4:42:cd:3f:22:82:5d:
                    98:92:9a:99:1f:11:91:6b:d9:e5:3e:89:be:5a:1d:
                    4a:ad:9e:79:12:6b:1d:49:93:6e:5c:82:f5:a6:e4:
                    29:a7:be:6a:ee:0d:50:25:95:73:f6:eb:8f:09:e4:
                    b5:46:e2:8d:ea:da:e4:e2:e6:d4:74:f5:0e:0b:bd:
                    eb:36:0d:fe:e0:8f:2b:ad:5d:cd:0b:68:33:c6:1a:
                    f2:26:91:42:87:a3:1b:22:41:24:bc:d5:ea:b2:75:
                    e2:3a:9a:65:3b:0a:ea:67:7f:f7:8d:5d:c6:b2:da:
                    62:5c:3b:51:4f:d0:7a:93:98:90:f1:fa:09:61:a9:
                    5e:24:0b:61:4a:82:21:34:ce:fe:7c:26:5a:02:dd:
                    b4:a3:b8:1e:af:29:b8:87:e5:be:1c:c9:12:66:3e:
                    eb:79:15:fd:7c:4a:19:39:66:28:2b:23:09:40:3c:
                    2f:6d:04:10:2a:94:68:8a:40:96:13:15:77:69:12:
                    a2:80:9b:ce:b9:6b:79:6c:a2:a7:7f:a7:67:9e:f7:
                    d6:c5:2d:aa:a6:ba:11:d5:b4:ae:81:e6:57:0e:d2:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:26:1B:57:8C:0A:E9:A4:3C:EC:DE:A6:F3:D8:9B:E5:F1:EF:31:72
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:04:f7:0f:9c:cb:0c:c9:af:3c:a0:6e:01:6e:4e:e5:00:
         66:8d:ea:93:c4:1e:58:73:50:43:6d:98:e3:12:13:5e:dd:35:
         ce:f5:02:21:20:73:ed:03:e6:30:12:94:18:d6:9a:ef:63:b6:
         2f:0e:02:ce:8c:20:ad:19:73:cb:cc:cc:9a:6d:24:1a:e1:f8:
         77:75:ec:a7:13:05:53:6d:55:c0:ab:7d:de:f9:51:d2:3d:36:
         1a:06:cd:81:13:6d:b8:df:a9:86:c5:01:16:b4:7d:1a:20:d9:
         d8:4b:f4:0c:43:9c:91:5c:23:ff:93:ee:eb:4c:50:dc:7a:5b:
         77:51:82:76:49:ea:79:49:b9:41:87:48:76:20:e2:49:98:0b:
         27:54:1a:cd:6e:3b:92:d0:e2:05:36:34:f3:63:85:bc:33:c3:
         63:e9:90:45:4c:16:fe:b4:3b:b1:d3:53:ff:ec:d2:b5:20:2f:
         5b:4d:fc:f5:fe:b5:a0:32:a3:d5:96:02:30:8d:db:dd:54:88:
         00:4e:95:af:08:ba:fe:86:d9:c3:48:3a:22:c6:6b:8b:1e:7e:
         8f:34:5f:95:20:21:2f:48:d2:71:40:43:42:d6:fb:5d:b6:a2:
         86:6b:53:de:1b:3f:e7:d2:bb:5c:81:f4:84:b3:40:91:08:f9:
         e2:9e:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:38:53 2026 by rpki-client