Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File:                     tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier:          VEdkkjrgfWjpIoQ6tuej26ea4nxOzPwUluNS+9vhAtQ=
Subject key identifier:   65:5C:AD:AB:4D:3E:10:BD:FE:A7:9B:2D:A6:12:03:0F:31:06:E6:85
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer:       /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number:          026E
Signing time:             Tue 27 Oct 2026 02:21:27 +0000
Manifest this update:     Tue 27 Oct 2026 02:21:26 +0000
Manifest next update:     Tue 03 Nov 2026 02:21:26 +0000
Files and hashes:         1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: wBxrWLXV00R5OvxIVc5oNvpp5Uoax8oHY7YSXMP57QA=)
                          2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: JgjENRgm+cP4ig92SSnsnPe7s2x9TXGIP7ad+E5lw4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
                          rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
        Validity
            Not Before: Oct 27 02:21:26 2026 GMT
            Not After : Nov  3 02:21:26 2026 GMT
        Subject: CN=6ae00aa7-bdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:84:be:d9:93:ce:ce:76:fa:96:c6:cf:6d:
                    25:ea:6b:34:eb:8d:85:08:e4:5a:e6:d1:bb:60:97:
                    de:cd:a9:54:f1:8f:08:11:46:cf:b9:b9:2b:c6:74:
                    46:ba:66:98:ec:7e:1b:4d:ee:76:10:98:28:35:83:
                    8a:d2:7a:b9:37:f4:96:95:b5:00:30:7b:47:71:80:
                    ac:b6:d3:a5:0b:39:76:4c:14:42:d1:69:69:ea:88:
                    bf:1e:c1:d9:24:df:37:8c:87:c8:8c:71:69:b8:84:
                    e9:61:18:c5:6e:93:84:dc:f3:60:6a:59:e1:39:e0:
                    12:43:f2:d8:6a:10:f5:36:cd:18:ec:64:65:2f:9b:
                    26:b9:94:16:cb:6d:ab:47:ab:65:58:64:8e:bc:df:
                    3c:a2:b5:20:b7:f0:75:6e:0e:61:59:ef:86:64:cd:
                    7f:22:e1:44:e9:f0:8e:f9:af:8a:80:7e:b4:46:e6:
                    93:a7:59:32:4b:ae:a9:78:5f:e0:12:77:eb:2e:96:
                    0a:70:08:41:fd:4a:23:50:39:60:7e:52:10:1c:ea:
                    7e:0c:81:23:e6:6b:37:28:a3:8a:b1:bf:78:83:cd:
                    25:64:5c:52:6a:f7:65:c9:4a:40:a1:f5:89:aa:1c:
                    4f:28:f1:f6:27:ad:53:8a:57:9c:b0:9f:94:fe:f9:
                    e5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:AD:AB:4D:3E:10:BD:FE:A7:9B:2D:A6:12:03:0F:31:06:E6:85
            X509v3 Authority Key Identifier:
                keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:14:32:2d:18:03:c5:b3:66:4d:04:68:ca:83:da:44:3c:0a:
         77:83:9f:89:42:13:e3:ef:ae:b8:ba:d2:5b:36:d9:84:0c:ea:
         23:0a:a3:5e:95:e3:cb:94:4d:39:84:bc:4c:41:b6:9d:b6:3c:
         c5:7a:24:68:4f:f1:c4:b6:68:cc:9b:8b:04:9d:f0:e2:6d:77:
         0b:44:b3:6e:e8:7d:3d:cb:26:88:f6:c3:53:b7:8f:fa:ca:15:
         f6:2c:71:f7:68:53:41:57:5a:3d:23:8f:4d:9d:b5:25:d5:17:
         b5:78:a0:6a:df:05:72:4b:fd:15:cf:4b:51:e8:38:a0:5a:18:
         36:f0:57:ce:03:26:d4:77:50:e6:8f:64:ec:74:2e:a0:72:b4:
         bb:81:77:44:e6:a7:94:56:f8:91:33:aa:f1:db:14:62:c4:ff:
         b2:a5:3a:72:08:ca:2a:b5:6c:fc:18:6a:8e:ff:30:e6:bc:5e:
         64:73:85:42:3b:43:01:0e:75:08:cf:bd:11:66:cc:2f:f3:fe:
         46:0d:aa:98:7c:a5:24:27:84:1f:b7:6e:78:3d:2b:14:47:4f:
         1b:1b:ff:f6:18:9c:f0:f3:5e:b6:f5:2e:f0:22:52:c9:38:c3:
         c7:4e:59:a8:09:e0:ba:36:0b:54:0b:35:52:1d:4c:4c:52:a1:
         ad:53:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:19:31 2026 by rpki-client