Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File:                     TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier:          w2TeUSn+3N7Y8Oxmo349kGDZsDsbuXj2uNsk5byB5Xs=
Subject key identifier:   16:86:18:05:3A:59:12:BD:2E:F1:FB:95:2C:4C:DB:9D:07:B7:31:C8
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer:       /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number:          0817
Signing time:             Thu 10 Sep 2026 21:08:00 +0000
Manifest this update:     Thu 10 Sep 2026 21:07:59 +0000
Manifest next update:     Thu 17 Sep 2026 21:07:59 +0000
Files and hashes:         1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: 1jhEXBcEJgZzLC43GwoiPB5KDYpY5DPyaKEu43IAwao=)
                          2: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
                          3: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
                          4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
                          rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 21:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
        Validity
            Not Before: Sep 10 21:07:59 2026 GMT
            Not After : Sep 17 21:07:59 2026 GMT
        Subject: CN=6aa31c30-1772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:39:de:3b:69:78:09:0f:32:5a:a2:89:17:
                    21:8e:c5:77:67:a2:6c:b0:ee:5d:47:14:62:82:5c:
                    a5:e3:90:74:f3:fb:cb:bc:76:39:42:5f:f5:1d:3c:
                    d6:36:66:24:88:11:e1:22:7a:c2:89:a6:b4:2b:ae:
                    5e:67:f2:b4:11:b6:38:55:ec:78:a5:9e:9a:da:2e:
                    23:21:e1:64:e8:f5:b9:b8:82:22:37:bd:3b:cf:7b:
                    eb:c6:27:43:b8:eb:b3:9a:cd:ca:65:9d:e1:b3:4a:
                    ef:54:a9:5a:8b:61:2e:a4:cf:f0:40:80:33:53:bf:
                    ae:37:05:17:e4:4d:bf:8a:3d:bd:15:ef:da:d9:21:
                    65:3d:b1:cd:0d:54:b1:15:e7:d4:c2:cf:e3:de:fa:
                    ac:f1:bd:75:f7:b2:ff:ce:ae:96:c6:15:8e:f8:3a:
                    51:ba:e3:5d:ae:af:3a:be:47:ca:d7:b1:0a:2f:d9:
                    a2:71:ea:c1:98:03:77:1c:a6:d6:7e:01:96:00:52:
                    7c:91:1e:39:67:a6:c8:79:4e:7e:6d:20:15:50:bf:
                    a5:1b:e3:ee:8b:62:fa:74:37:c3:ca:63:bd:ec:85:
                    f7:de:79:65:69:70:fe:13:aa:c7:33:35:81:35:a9:
                    c4:ec:5a:01:65:6c:cc:05:24:35:9a:c3:cb:1c:ee:
                    2a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:18:05:3A:59:12:BD:2E:F1:FB:95:2C:4C:DB:9D:07:B7:31:C8
            X509v3 Authority Key Identifier:
                keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:c6:30:cc:3d:e5:2f:8d:4d:33:7f:78:ef:90:6e:89:30:
         a2:94:83:b7:73:20:2c:f4:71:f8:01:a8:78:93:9a:05:33:40:
         2e:7f:a1:c5:68:d1:8e:1d:c4:6e:22:a4:ef:cb:89:90:3b:8f:
         05:70:b3:10:41:02:4c:23:34:ff:45:d9:ca:04:4f:6b:12:b5:
         3a:b5:cb:39:6b:b8:9f:c3:48:10:31:3e:d2:6c:59:96:a1:8f:
         fd:e4:34:bf:4c:22:e3:c1:23:8a:08:66:7e:6b:3a:8a:21:84:
         8f:97:14:7d:60:03:d0:7e:52:e9:32:3b:d8:95:0e:64:85:7d:
         f6:03:27:56:e6:c7:ce:d4:66:43:97:24:77:c3:e8:d4:bd:fb:
         13:d5:c0:fa:6c:a6:27:e6:1a:40:1f:6f:8a:1c:ff:a6:c1:42:
         a9:fb:e1:06:fa:4a:4f:3c:0a:35:59:0a:42:39:fa:68:ad:a5:
         1f:8b:2c:2a:cf:34:99:7a:31:96:9f:31:64:fa:80:26:52:41:
         f1:9f:c2:96:b3:a8:6d:b7:02:fa:f9:f1:47:4e:a2:30:44:6b:
         e8:25:ad:24:5b:2e:53:4b:e8:9d:62:90:97:aa:e5:29:69:34:
         94:bb:40:e9:68:38:fc:77:a0:c7:21:10:db:8e:40:8b:58:21:
         95:f2:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:59:38 2026 by rpki-client