Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File:                     tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier:          B4huhNmamKVFx+ayzxzafZI1sEbZ4PVWo9kyCSk519o=
Subject key identifier:   F9:72:98:4B:60:0E:03:53:8F:A6:0B:86:12:42:28:9E:B9:C4:85:90
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer:       /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number:          0257
Signing time:             Fri 11 Sep 2026 02:25:48 +0000
Manifest this update:     Fri 11 Sep 2026 02:25:47 +0000
Manifest next update:     Fri 18 Sep 2026 02:25:47 +0000
Files and hashes:         1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: qPHj4uSREdmvd0+rijpOGwJtge37T88wJmOUdKcNx9k=)
                          2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: JgjENRgm+cP4ig92SSnsnPe7s2x9TXGIP7ad+E5lw4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
                          rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
        Validity
            Not Before: Sep 11 02:25:47 2026 GMT
            Not After : Sep 18 02:25:47 2026 GMT
        Subject: CN=6aa366ab-44a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:93:88:77:fd:a7:80:9a:a7:7c:83:e6:95:
                    81:d7:67:bb:19:c5:eb:4e:95:31:ed:59:80:3d:60:
                    1d:84:06:e5:a0:92:2e:da:f5:41:a4:de:bf:9d:24:
                    b7:a1:88:6a:0a:d7:f0:ab:90:14:b0:2a:4a:db:7d:
                    a1:09:7a:72:94:f6:bc:da:27:4c:8e:0a:f0:2c:ef:
                    7c:c9:26:68:2a:48:bf:35:be:34:37:23:ec:0a:d7:
                    e6:fe:07:ff:a7:dd:33:e6:fa:28:08:da:43:0a:a9:
                    fe:6e:7a:23:a4:7c:01:bb:d0:bb:fa:53:74:ce:b4:
                    4d:36:fd:df:e0:91:85:bb:c2:27:e3:14:b0:94:11:
                    78:d0:fe:02:e6:49:eb:d1:2c:04:09:a1:3c:3f:b6:
                    fc:cc:5e:f4:b2:fd:0c:1a:d2:d7:de:cd:e2:37:97:
                    a6:07:fd:9a:5d:92:f8:01:1e:60:92:6c:22:90:12:
                    86:a0:44:d0:c8:ae:29:06:c7:04:67:be:3a:67:ec:
                    c6:8e:ed:90:1f:b9:fa:ad:7d:a9:4c:d3:8b:0f:6b:
                    7c:3a:25:ea:eb:98:8a:5c:29:44:87:fd:67:eb:56:
                    37:07:dd:73:c5:04:7a:0d:b4:57:00:f1:8d:0c:69:
                    2d:16:8e:fc:60:de:1f:21:0e:9c:eb:10:e1:51:2a:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:98:4B:60:0E:03:53:8F:A6:0B:86:12:42:28:9E:B9:C4:85:90
            X509v3 Authority Key Identifier:
                keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:9d:aa:06:31:41:05:1e:77:6f:ea:97:ba:c1:0b:22:fe:
         a3:82:96:bf:56:e2:ac:65:c6:8d:32:12:32:df:e7:6d:b8:76:
         04:e6:4e:d3:3c:07:30:bd:10:78:a3:1f:bf:bb:64:73:38:61:
         8c:b9:ea:36:9f:ec:3f:5a:c9:15:63:e8:74:ab:8e:1b:e2:27:
         f1:75:03:86:29:bb:d7:08:64:ac:35:04:23:fb:85:60:ca:1c:
         bc:86:ca:78:93:85:a1:26:eb:34:fb:b6:91:a4:d2:d8:1b:a4:
         90:d6:e3:00:6e:f3:ce:80:5a:c0:9d:e8:63:07:dc:ce:32:f6:
         f1:ff:4c:de:5b:e4:3e:08:4f:c5:83:20:95:fa:f2:7d:bd:ef:
         c6:1e:56:2e:40:ff:fa:43:73:c9:cf:94:48:fa:06:a2:a8:7c:
         46:be:59:91:08:23:34:0f:78:06:1c:6c:b6:33:62:74:05:5b:
         af:77:de:13:c2:90:be:f1:f0:19:84:b5:90:18:2f:0a:e9:25:
         3c:ee:e9:6e:63:0e:2a:3d:21:dc:42:a4:95:33:4c:a0:07:8d:
         db:f5:66:de:05:cc:fc:d3:43:3d:73:08:13:9b:61:5e:7d:f3:
         ee:e7:35:a6:83:67:6d:63:65:26:9d:41:eb:1c:ef:03:1a:c7:
         44:5e:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:59:54 2026 by rpki-client