Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
File:                     TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft (raw, json)
Hash identifier:          4OzsEncn2KE9z+59M3CF3u740qnuJ3TUsI/v92+UI/Q=
Subject key identifier:   72:8F:74:2E:33:69:31:F6:F1:7E:3B:60:7F:93:28:1C:CA:EF:DF:F8
Authority key identifier: 4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31
Certificate issuer:       /CN=A919FC57/serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
Manifest number:          42
Signing time:             Mon 05 Oct 2026 08:56:52 +0000
Manifest this update:     Mon 05 Oct 2026 08:56:52 +0000
Manifest next update:     Mon 12 Oct 2026 08:56:52 +0000
Files and hashes:         1: TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl (hash: YkCkq/aw047wjZPVSEcNgHh/137tcGZ63po/TPBRX/M=)
                          2: 7F6617725EE411F1B0096E1CFD79AC22.roa (hash: iEtERU/YxbdfzHAt/g+SXbLAaj7SO/HjyfXDuyj6Hkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl
                          rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FC57, serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
        Validity
            Not Before: Oct  5 08:56:52 2026 GMT
            Not After : Oct 12 08:56:52 2026 GMT
        Subject: CN=6ac36654-fe3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:bd:2f:8d:27:25:b4:a2:d8:9d:c0:9b:24:
                    ea:93:4d:b7:1e:99:28:bd:f7:7c:d9:ff:8e:8d:2e:
                    7a:a6:d8:c9:31:da:28:c9:3f:41:f7:07:4b:8d:e6:
                    87:92:03:65:44:b8:bf:1a:da:02:dc:07:f7:d4:4c:
                    4d:e4:06:dc:bc:dd:3c:28:d2:84:e0:89:6d:cf:df:
                    ce:05:a1:68:73:63:bc:9b:ba:30:2a:b4:f2:1e:cc:
                    0c:ef:1b:04:3c:99:f9:b4:ba:ca:0c:ae:62:77:05:
                    91:9e:40:ff:77:9e:81:8b:df:95:83:50:cb:d4:4d:
                    b5:0c:53:ba:a6:17:4f:0b:ea:b8:66:af:31:70:d5:
                    f1:ef:b7:b6:b4:18:05:63:82:d8:d4:d6:a9:55:d1:
                    14:74:a9:c4:ae:61:8e:6a:f8:5f:9e:56:d1:b9:04:
                    84:cd:5b:36:d4:e6:a7:49:ec:49:07:4f:ee:b9:e8:
                    b5:00:2a:c7:2f:8c:dd:f9:09:d7:47:a7:d7:8c:4c:
                    b3:ff:c3:7c:a9:42:08:0f:95:d6:9c:cd:57:34:03:
                    ef:42:bd:6c:01:50:75:a0:97:ed:67:f7:ea:c6:fc:
                    97:64:c7:d3:33:4c:47:25:a3:8d:8c:1a:5b:04:43:
                    d2:c7:cc:e8:98:78:ee:46:cf:3b:b2:d2:a9:86:f5:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:74:2E:33:69:31:F6:F1:7E:3B:60:7F:93:28:1C:CA:EF:DF:F8
            X509v3 Authority Key Identifier:
                keyid:4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:1b:36:5c:c2:3e:09:74:47:0e:28:5f:4c:5a:ee:d4:12:
         06:7e:54:29:2d:d7:f0:a0:6e:89:87:77:30:69:67:a9:92:3c:
         78:2e:4b:51:6b:7f:81:8a:ce:ae:08:9f:ff:ca:f4:a8:7f:96:
         0e:cb:83:eb:61:b2:b4:db:44:ae:8b:7c:1c:3a:51:db:50:cc:
         8f:f8:c4:fd:de:d4:a6:4b:1e:c2:7d:63:3d:90:4c:60:dc:17:
         97:66:5d:78:97:d4:cb:2d:8a:ae:59:09:6f:65:cd:11:50:ff:
         4a:4f:64:13:92:9b:be:e0:8f:91:a8:d9:48:99:d9:e0:ee:a0:
         0c:3f:5e:47:51:7d:c7:53:65:64:c0:60:88:ff:a6:44:0a:18:
         59:a3:3e:47:50:5c:75:40:30:65:67:94:ec:67:be:43:ac:99:
         ef:f4:85:c2:0c:9f:18:57:93:db:aa:5b:67:7e:be:3d:14:f8:
         13:2b:a3:1c:30:89:53:1c:23:f5:4c:86:33:d0:a7:f8:0e:73:
         b6:4f:92:4b:e1:ec:e2:96:48:98:c5:00:66:6a:14:5d:7c:b0:
         d6:6d:dc:41:15:d3:9c:5c:b5:27:26:29:7b:f4:21:6b:06:1c:
         7b:d6:af:48:36:75:38:fb:55:16:2a:d4:b7:b1:e7:71:8a:b3:
         8b:c4:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:11:21 2026 by rpki-client