Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File:                     TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier:          csWyNk45C9PN9pigMpYNxXZXUZ9AHCTIrzhgYksV72E=
Subject key identifier:   91:AF:D5:08:F9:20:D7:32:3B:F9:37:6D:B4:CB:D1:D4:84:31:A2:B6
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer:       /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number:          0109
Signing time:             Fri 09 Oct 2026 06:47:38 +0000
Manifest this update:     Fri 09 Oct 2026 06:47:38 +0000
Manifest next update:     Fri 16 Oct 2026 06:47:38 +0000
Files and hashes:         1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: MPqVuDylB8WRAaQoY7cljSK9AP+OoKgc8naLd/1nSkA=)
                          2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: A51WAFZICOqaHWPYKHK1gS3hIBrXwfplrOAwkWglh6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
        Validity
            Not Before: Oct  9 06:47:38 2026 GMT
            Not After : Oct 16 06:47:38 2026 GMT
        Subject: CN=6ac88e0a-ece2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:9a:a7:71:72:f9:c8:5d:1f:5a:18:34:b6:
                    c8:51:c6:f2:40:c0:fb:b7:67:b0:aa:ea:e3:a0:29:
                    95:a9:bf:4e:b2:06:d3:7b:d4:6a:98:2e:57:29:82:
                    0c:ea:15:c3:30:f4:16:77:89:be:85:f1:a7:40:c1:
                    44:b6:14:2f:af:82:00:14:cd:59:a0:30:14:90:1a:
                    b0:3e:5d:e8:3b:8a:65:27:b9:d7:52:a3:78:19:95:
                    59:9e:ff:f8:1b:57:91:b1:1f:00:8e:1d:74:0c:cc:
                    6e:26:36:48:6d:e6:37:18:ba:71:9b:9e:61:db:48:
                    9a:64:e7:00:00:0a:18:b2:9d:89:f1:e0:8d:65:1a:
                    e5:73:c7:3e:6e:41:0b:1d:d2:ab:49:c4:5b:5d:e5:
                    15:a2:3e:6c:5f:28:e1:bd:8e:e0:7c:e4:76:12:3c:
                    e8:37:2a:cc:63:f1:e1:c9:8a:24:78:0f:eb:b6:6a:
                    04:5e:b3:fc:0f:48:b3:53:66:4c:47:d6:35:0d:6c:
                    83:a5:96:5e:ad:18:af:20:61:08:78:14:68:39:ef:
                    42:55:20:c7:44:d7:b4:ba:4a:0f:64:4e:5a:95:56:
                    53:f8:79:3e:d3:7d:ee:99:6f:a1:6f:1c:53:5e:c9:
                    93:8f:74:63:6b:1c:49:4d:35:bf:b4:a4:40:0a:6d:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:D5:08:F9:20:D7:32:3B:F9:37:6D:B4:CB:D1:D4:84:31:A2:B6
            X509v3 Authority Key Identifier:
                keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:53:9e:46:66:78:c7:89:a1:9a:9e:98:a5:fb:71:49:1c:20:
         67:a7:97:69:dd:52:c8:03:10:bc:20:bd:91:cc:6c:b6:c5:67:
         67:76:b4:d4:0e:12:e0:01:92:66:b4:28:8d:c5:91:bf:1f:83:
         9f:a3:c4:d6:52:f2:15:cb:fe:39:8d:56:73:52:8a:89:1e:b1:
         cf:d6:22:d3:26:eb:f9:4d:10:da:58:d3:5f:59:4d:7d:45:ac:
         91:8b:cc:a4:14:23:b5:18:8f:2c:be:cb:a6:1f:85:23:95:6a:
         0c:87:b1:8a:c9:00:2e:ee:0f:4e:91:f2:0d:0d:7a:75:2e:4d:
         18:7e:a2:91:00:7b:b4:c6:13:12:d3:d5:3e:b7:45:64:25:12:
         8a:01:82:83:0c:55:2a:ae:9d:23:c7:67:15:68:a5:7a:00:66:
         e6:5a:6d:89:dd:70:37:f0:e4:4c:45:3e:b6:7a:56:ea:cd:0f:
         71:83:7c:d2:f6:f0:21:c5:42:29:38:9b:5f:e6:67:92:35:de:
         fd:34:7b:64:4a:64:f2:e4:79:31:31:56:57:fa:ff:34:da:d9:
         f1:1e:4c:5e:2f:e7:84:de:da:f6:0e:94:dc:6c:8c:8d:ce:5a:
         b8:5f:64:f4:cb:fc:c7:e7:6f:86:a2:1a:82:cf:52:3b:e8:2c:
         b6:9a:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:32 2026 by rpki-client