Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
File:                     TIHwGTocVyRFf1LgThHyUnPm_uA.mft (raw, json)
Hash identifier:          +1Npo3Ak31Gu2cNs/CjrZLYZ/i5ArAafBM2czf/+uIE=
Subject key identifier:   FE:97:C4:DA:C8:20:5D:E1:F3:8E:43:C8:52:C2:D6:5D:6F:8C:58:EF
Authority key identifier: 4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0
Certificate issuer:       /CN=A91A5533/serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
Certificate serial:       0CE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
Manifest number:          0CD6
Signing time:             Thu 08 Oct 2026 18:34:55 +0000
Manifest this update:     Thu 08 Oct 2026 18:34:54 +0000
Manifest next update:     Thu 15 Oct 2026 18:34:54 +0000
Files and hashes:         1: TIHwGTocVyRFf1LgThHyUnPm_uA.crl (hash: LURY8wF6+7iKe6kOLRyNCGhQTJPYUP604STPVBjkLxw=)
                          2: 637A6FCC1AEE11EAAEFD5871C4F9AE02.roa (hash: fCQoX/IOk+ffJFhlDwImCtw5kH5m+tUwlmOkb8YNpXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 18:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3296 (0xce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5533, serialNumber=4C81F0193A1C5724457F52E04E11F25273E6FEE0
        Validity
            Not Before: Oct  8 18:34:54 2026 GMT
            Not After : Oct 15 18:34:54 2026 GMT
        Subject: CN=6ac7e24f-8ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:63:dc:f8:6d:f2:91:58:25:1c:32:00:75:c0:
                    6d:9b:e2:fb:cc:6f:eb:3b:67:91:56:43:c4:2d:3a:
                    28:b5:59:b0:61:33:d2:c6:e1:e9:46:87:31:4f:1e:
                    3d:6f:e7:44:16:c2:a8:08:48:83:34:3f:c8:35:24:
                    08:1c:79:36:ee:49:de:1d:71:91:19:cb:cd:fc:b2:
                    d0:a6:95:72:6f:2c:1c:f1:16:b1:3d:61:80:40:f8:
                    b9:2a:1d:5b:b2:5f:b6:5c:39:e3:88:44:5a:5c:2f:
                    5f:28:f0:03:83:d3:83:8d:2f:d2:8d:84:fb:dd:c0:
                    7f:2f:4a:96:85:f5:0e:07:1d:01:f1:5a:f7:46:51:
                    30:f2:62:25:8a:70:a1:24:4e:47:06:15:c8:1d:a2:
                    90:46:bf:c2:78:1a:10:d6:4f:ce:57:9f:30:2d:9c:
                    59:dd:fd:2b:20:be:16:0d:1a:73:bb:ee:93:57:eb:
                    7b:e8:0f:a2:e2:76:4f:68:41:33:cb:89:82:04:c1:
                    0b:a0:bd:44:13:b1:17:a7:e5:6d:22:5f:b8:2c:ee:
                    cc:ea:8b:df:0b:64:d6:ef:47:dd:f8:a2:4c:19:73:
                    02:cd:0e:0d:6b:e1:f3:a1:d9:6f:5c:53:4b:85:03:
                    56:8e:d6:18:60:e1:89:12:1a:30:85:7c:f7:57:80:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:97:C4:DA:C8:20:5D:E1:F3:8E:43:C8:52:C2:D6:5D:6F:8C:58:EF
            X509v3 Authority Key Identifier:
                keyid:4C:81:F0:19:3A:1C:57:24:45:7F:52:E0:4E:11:F2:52:73:E6:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIHwGTocVyRFf1LgThHyUnPm_uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5533/061151F21A4E11EA9E09CC82C4F9AE02/TIHwGTocVyRFf1LgThHyUnPm_uA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:e2:39:e2:b2:15:43:6f:be:a6:bc:90:f1:93:32:43:e4:
         d1:9c:8c:bd:ce:a4:38:99:73:4b:d6:8a:42:6d:e2:7d:3d:d3:
         90:10:ab:da:47:6f:70:d1:27:b5:55:c3:35:15:c1:ea:15:9c:
         e5:03:68:4c:54:d5:f6:eb:d5:42:23:2d:79:50:a3:0b:31:3c:
         4d:85:47:c4:5b:8d:13:dd:f5:a4:89:99:88:24:e4:5b:68:05:
         08:d0:8b:a0:1b:de:6b:37:43:41:96:6f:ea:e7:16:76:2b:84:
         f8:af:1f:ec:10:b6:0c:0b:c9:1b:64:33:3b:63:0c:40:32:0a:
         07:ba:a5:aa:65:68:4f:f0:cb:07:62:6f:c2:a5:5a:a8:2d:b8:
         45:f8:99:56:0b:aa:74:02:e5:07:fc:31:a7:e2:14:24:48:9e:
         1b:e0:1a:2e:52:f8:91:3f:bc:97:39:82:fd:0b:4c:cc:33:b5:
         21:4f:1a:7c:58:62:2d:43:b7:59:4f:d3:9a:1d:3b:80:ae:4b:
         07:bc:d0:03:9b:7e:e3:a9:4a:33:16:92:3f:36:8f:21:7a:5a:
         4f:b9:fb:0b:cc:0e:24:4c:d6:b4:ae:9b:db:2d:53:e8:e2:0d:
         c9:c5:7b:2f:94:74:bc:e4:b7:1f:50:d3:97:a9:5e:74:f2:94:
         9b:d7:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:41 2026 by rpki-client