Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
File:                     tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft (raw, json)
Hash identifier:          S9BhPGDlZTbKlLsY+uScFGIpiqL+lZ+EBvXbEJfNI4c=
Subject key identifier:   92:69:8F:5B:1E:CC:FE:BD:FB:D6:94:C8:CA:82:3D:CF:8A:23:54:96
Authority key identifier: B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6
Certificate issuer:       /CN=A91B637A/serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
Manifest number:          6A
Signing time:             Fri 23 Oct 2026 08:35:25 +0000
Manifest this update:     Fri 23 Oct 2026 08:35:25 +0000
Manifest next update:     Fri 30 Oct 2026 08:35:25 +0000
Files and hashes:         1: tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl (hash: NYHIxqmk8FRZjr6vFR+y+VzwQ6ugIXFRUTDpK1GzQqs=)
                          2: D0F478D02E7011F1B3CAF1C4A3833773.roa (hash: bM7Q3Goo2yIx6mUK1MyLG8gg5MzYy2/CvHGPwmnvAsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl
                          rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B637A, serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6
        Validity
            Not Before: Oct 23 08:35:25 2026 GMT
            Not After : Oct 30 08:35:25 2026 GMT
        Subject: CN=6adb1c4d-bc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:28:ef:10:63:90:47:01:ff:34:74:f5:ff:
                    c1:bb:45:c0:08:5f:d8:87:5b:af:d4:0d:78:1c:5a:
                    6a:7d:a7:3d:41:fc:61:64:77:7d:85:e4:e4:be:2f:
                    ef:ac:80:89:83:96:a6:7d:ef:5e:1a:87:32:d5:3e:
                    99:33:7b:9b:84:ab:8a:0d:d0:f1:13:f8:99:2a:a6:
                    f5:3e:ff:b3:8a:36:0e:46:c4:a1:65:c2:2d:cb:90:
                    7c:3f:2f:2a:c6:19:ac:0b:88:7c:f4:1a:8c:21:37:
                    8c:5e:36:1a:0e:d0:e5:eb:1f:af:1d:3d:e6:e7:98:
                    fb:e9:3b:4c:57:5f:70:8b:22:da:26:8b:65:fd:3b:
                    07:d2:73:43:f5:96:c3:6d:ab:05:43:ee:01:e8:f7:
                    ce:f8:e6:50:78:f5:3f:ee:c4:2c:b0:57:8e:1e:fa:
                    aa:61:51:5b:67:c7:c7:29:bd:b5:f2:1c:ec:be:1a:
                    c7:81:3c:6a:e2:af:66:3d:bd:64:04:6b:dd:60:01:
                    27:76:05:2e:f2:8b:a0:6c:33:c5:bf:62:e1:70:a6:
                    b9:01:f2:40:9e:e9:90:67:b6:5c:dc:82:b1:62:64:
                    c3:d8:0e:16:a3:2d:ef:90:7c:b9:c2:28:47:7e:ca:
                    e1:71:7c:15:e4:4b:31:bd:25:d7:dc:56:9c:f0:f4:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:69:8F:5B:1E:CC:FE:BD:FB:D6:94:C8:CA:82:3D:CF:8A:23:54:96
            X509v3 Authority Key Identifier:
                keyid:B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:f0:e9:55:bd:a1:dd:3d:75:34:f5:a9:06:db:6d:f3:3a:
         19:c5:5a:06:d7:30:b0:5e:7c:1a:14:94:ea:23:c1:bb:70:2a:
         33:ca:45:d6:5a:af:1b:d9:d9:67:37:4e:3d:52:68:f5:7d:0c:
         93:3a:f9:5c:1c:c6:04:78:8d:66:35:00:6e:16:86:2e:4f:9c:
         79:94:a3:14:f0:ab:e9:c9:d5:b8:61:eb:42:9b:8d:d4:07:77:
         0b:2b:b2:5e:a6:71:74:cf:61:ea:21:03:27:e0:f8:a8:3c:0d:
         e2:41:8e:5a:34:a8:9e:e7:c5:5e:c9:f3:7f:52:d7:6a:b4:69:
         f9:3f:a4:bf:32:27:29:64:55:3c:b6:6b:8d:59:a9:ef:8c:39:
         50:75:6e:bd:85:2e:3a:25:49:5c:2e:85:4a:00:c2:2f:50:ab:
         75:1b:04:4c:e3:b4:cc:84:b0:ff:df:5a:a1:7c:bb:04:aa:0e:
         b2:0e:e9:5f:23:03:e2:5b:59:4f:cc:55:2c:91:1f:63:f0:e9:
         0c:d3:4a:60:85:1d:b6:fe:d3:de:c5:d3:b8:5f:73:04:d7:cb:
         47:0f:7b:fe:39:00:fd:6a:6e:59:a4:99:e7:49:e2:36:14:3c:
         3a:2c:01:b3:b2:01:4f:9e:18:68:7b:81:c3:fc:21:82:26:34:
         71:cb:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:19 2026 by rpki-client