Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File:                     TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier:          RdN2cb9cODe8n4FxSMY6T4HK7xeBNZCHWh3oUWkM1lA=
Subject key identifier:   DC:E0:E6:54:75:31:58:B2:BA:F7:DE:E2:55:14:84:F5:83:A0:04:F1
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer:       /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial:       084C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number:          082E
Signing time:             Mon 26 Oct 2026 21:08:09 +0000
Manifest this update:     Mon 26 Oct 2026 21:08:09 +0000
Manifest next update:     Mon 02 Nov 2026 21:08:09 +0000
Files and hashes:         1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: J5WBI8g7u9KuF/sZ0bvvxTZtY8Vg9WHvyfuApR2UbZ0=)
                          2: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
                          3: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
                          4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
                          rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 21:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
        Validity
            Not Before: Oct 26 21:08:09 2026 GMT
            Not After : Nov  2 21:08:09 2026 GMT
        Subject: CN=6adfc139-790e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:94:1f:02:d6:78:75:40:28:2c:a1:d5:0b:
                    85:c3:72:12:f6:d8:8b:99:55:33:53:db:70:6f:63:
                    be:8c:ed:ef:82:f0:83:2b:ec:07:d4:e1:ac:40:30:
                    ca:4d:5d:55:8b:b6:5a:07:6a:e2:ba:d4:a5:cb:76:
                    8b:f1:21:88:f6:14:d8:93:ed:7d:9a:85:62:bc:74:
                    db:84:d3:1c:b8:42:fc:9f:35:b9:41:1d:16:d0:9b:
                    74:c0:c5:e5:7e:4e:03:0f:a6:95:30:97:51:32:91:
                    3d:b7:fb:36:ab:c0:49:73:d1:87:29:4d:64:12:c1:
                    00:d2:99:39:4f:96:e0:ee:99:10:c8:c2:27:8c:a4:
                    9a:31:54:5f:4e:2b:44:97:09:c4:ac:35:db:93:53:
                    80:fa:db:a2:34:14:36:f0:2a:61:d5:62:03:5d:37:
                    6f:76:8a:a7:49:1b:84:8f:31:bb:e9:be:27:1a:2a:
                    dc:80:30:2b:46:b3:10:89:99:75:04:0a:de:0c:25:
                    cf:5f:a9:40:0e:30:11:6c:2a:03:59:3d:e9:28:4f:
                    3e:fe:07:70:01:4b:85:47:fe:a5:42:29:d8:1f:87:
                    e7:09:d0:14:c5:e9:01:fe:08:e3:eb:fe:1b:21:53:
                    75:45:37:83:1b:89:7f:ee:dc:52:0e:0a:ad:45:34:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:E6:54:75:31:58:B2:BA:F7:DE:E2:55:14:84:F5:83:A0:04:F1
            X509v3 Authority Key Identifier:
                keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:c8:03:57:dc:11:e4:65:f5:e1:d9:cc:0e:4d:74:8b:88:
         e3:b7:20:fa:63:9c:38:64:24:7a:30:39:b0:6e:44:21:c4:7a:
         d9:25:de:8b:88:37:94:09:7b:8b:ea:ad:88:24:6b:f4:f6:a7:
         12:68:1f:d8:fc:a3:0b:35:f2:e8:9c:c0:fb:db:8a:d3:a7:65:
         ca:48:3c:1b:b6:a9:6b:5c:88:4e:b4:f1:fc:41:bd:af:37:cc:
         94:fa:c2:fa:96:28:ec:38:ed:84:e5:04:36:86:99:a9:3e:c6:
         54:56:fb:f6:c9:de:c4:cd:ae:c0:06:99:7d:b5:68:ec:14:40:
         98:f5:f9:df:03:98:17:da:f4:42:b1:b8:d2:71:ed:8e:60:1a:
         0e:85:7f:bf:78:52:8c:d2:72:5e:11:5a:15:6a:6d:d7:db:ad:
         31:e9:ea:65:10:8e:a3:0f:a0:ce:e7:68:3e:6e:d2:72:8c:e5:
         a8:da:21:7b:3a:9d:fa:96:f1:0f:4d:2d:3c:bf:29:ee:eb:b5:
         75:7a:a4:98:90:56:d0:fc:b5:15:32:3d:2a:86:12:b1:16:df:
         cf:24:8f:08:9e:5a:c4:b2:46:af:78:62:01:c8:c8:c0:4c:33:
         db:31:72:24:a5:71:92:3f:5f:cd:5c:b9:9e:2c:ce:0a:52:98:
         25:c3:35:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM3MjYxMTAvBgNVBAUTKDREODQ3NTIzRTVCREQ5RTNCODk2OTgyOEEwNEJGRURB
MkIwQzAzMUIwHhcNMjYxMDI2MjEwODA5WhcNMjYxMTAyMjEwODA5WjAYMRYwFAYD
VQQDEw02YWRmYzEzOS03OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25WUHwLWeHVAKCyh1QuFw3IS9tiLmVUzU9twb2O+jO3vgvCDK+wH1OGsQDDK
TV1Vi7ZaB2riutSly3aL8SGI9hTYk+19moVivHTbhNMcuEL8nzW5QR0W0Jt0wMXl
fk4DD6aVMJdRMpE9t/s2q8BJc9GHKU1kEsEA0pk5T5bg7pkQyMInjKSaMVRfTitE
lwnErDXbk1OA+tuiNBQ28Cph1WIDXTdvdoqnSRuEjzG76b4nGircgDArRrMQiZl1
BAreDCXPX6lADjARbCoDWT3pKE8+/gdwAUuFR/6lQinYH4fnCdAUxekB/gjj6/4b
IVN1RTeDG4l/7txSDgqtRTRp+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzg5lR1
MViyuvfe4lUUhPWDoATxMB8GA1UdIwQYMBaAFE2EdSPlvdnjuJaYKKBL/torDAMb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzcyNi85QzRGNTMwQTM4
QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJlTzRscGdvb0V2LTJpc01B
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RZUjFJLVc5MmVPNGxwZ29vRXYtMmlzTUF4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzcyNi85QzRGNTMwQTM4QUYxMUVCODkxM0RFNDFDNEY5QUUwMi9UWVIxSS1XOTJl
TzRscGdvb0V2LTJpc01BeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN73IA1fcEeRl9eHZzA5NdIuI47cg+mOcOGQkejA5sG5EIcR62SXei4g3lAl7
i+qtiCRr9PanEmgf2PyjCzXy6JzA+9uK06dlykg8G7apa1yITrTx/EG9rzfMlPrC
+pYo7DjthOUENoaZqT7GVFb79snexM2uwAaZfbVo7BRAmPX53wOYF9r0QrG40nHt
jmAaDoV/v3hSjNJyXhFaFWpt19utMenqZRCOow+gzudoPm7ScozlqNohezqd+pbx
D00tPL8p7uu1dXqkmJBW0Py1FTI9KoYSsRbfzySPCJ5axLJGr3hiAcjIwEwz2zFy
JKVxkj9fzVy5nizOClKYJcM12g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:03 2026 by rpki-client