Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File:                     TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier:          FsSGLeG6zXqO2XEuO/va4HRYMswKLdFqw2BzeeL8j1Y=
Subject key identifier:   26:4D:A0:EB:3A:E9:B0:91:CF:9C:DA:C4:85:0C:9C:4D:DC:5E:60:38
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer:       /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number:          01BF
Signing time:             Wed 07 Oct 2026 04:22:42 +0000
Manifest this update:     Wed 07 Oct 2026 04:22:41 +0000
Manifest next update:     Wed 14 Oct 2026 04:22:41 +0000
Files and hashes:         1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: CxR/uBEmbEiepOf3ykhdHL0dcPoKgGnghO4F8iQGihw=)
                          2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
        Validity
            Not Before: Oct  7 04:22:41 2026 GMT
            Not After : Oct 14 04:22:41 2026 GMT
        Subject: CN=6ac5c911-517d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:32:fd:3b:77:60:d2:36:be:27:3e:af:54:
                    b1:14:bc:c5:80:b7:10:f8:16:aa:3d:a0:3b:b9:12:
                    25:78:ca:b3:e2:c6:40:10:cf:ac:f8:6b:8e:d8:de:
                    bb:ca:f3:56:14:14:77:9e:f9:45:76:a3:66:b7:19:
                    9f:30:e1:f1:02:9c:53:8c:69:98:9a:1a:9e:11:d6:
                    40:0a:fd:72:99:12:d2:ee:1f:4d:91:75:7a:2a:cc:
                    f2:69:09:ed:b9:b4:34:59:2c:74:f8:d9:cf:ac:1f:
                    8e:aa:f2:ee:30:b1:c1:59:60:15:d8:89:bc:c1:6a:
                    45:d9:e0:60:87:30:66:3a:93:69:e0:04:7d:55:24:
                    ce:f6:9f:68:5c:50:bb:0e:4a:ec:2c:d1:00:1b:ac:
                    87:54:67:6a:6b:e7:bd:f8:64:0c:af:90:3b:96:ef:
                    f0:73:f7:6f:87:7a:fe:74:e3:58:3c:05:f6:34:58:
                    2b:d7:b9:d1:4a:f5:f4:1e:7a:cd:f7:ff:a7:24:9b:
                    f1:07:08:a0:79:98:8e:71:a0:86:b1:b3:1b:d7:af:
                    a5:b4:aa:fa:18:2d:13:59:53:1c:c4:65:90:af:0a:
                    e4:dd:c6:b1:07:5b:2d:47:7d:0a:82:a5:ea:1b:26:
                    b1:71:ca:80:b5:45:4a:7f:12:56:42:3a:06:1b:f6:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:A0:EB:3A:E9:B0:91:CF:9C:DA:C4:85:0C:9C:4D:DC:5E:60:38
            X509v3 Authority Key Identifier:
                keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:c0:48:78:f1:47:65:40:22:42:a5:0f:e0:7f:4d:89:07:
         a5:6d:ee:e1:f9:7f:b8:2d:45:e9:05:8f:c5:bc:35:8a:a1:56:
         07:4b:7e:da:77:d0:0e:9f:2d:cf:48:a3:e9:50:9a:a4:4c:65:
         1f:46:ac:c9:72:27:11:1c:60:46:b2:d6:3f:fe:af:77:f8:84:
         21:cf:88:db:f4:63:27:97:50:b9:16:9c:33:33:6e:c7:c5:e5:
         02:7f:8b:0a:ac:d8:7d:ad:c7:69:34:cd:9a:af:9f:f3:4d:9f:
         47:2c:8c:ec:1d:69:f5:e5:dc:60:8f:bd:8b:cc:4c:3c:68:dd:
         c4:1e:1a:cb:93:41:0f:f7:42:83:52:e6:59:2a:6e:56:de:e8:
         f8:12:a8:61:38:05:e8:c1:f5:35:e9:db:3c:ff:73:32:21:42:
         a6:8e:1c:4d:09:e7:44:0a:dd:1e:a3:7f:ed:cd:28:94:ef:06:
         7e:24:9e:20:5a:e7:bb:96:ec:37:c0:07:62:ed:60:55:fe:6f:
         c6:92:7f:db:20:d0:f7:f6:04:50:f0:7f:a0:5c:81:5b:ae:7f:
         88:0a:ba:21:88:82:6d:f1:59:6c:0e:aa:69:d2:6a:ae:83:55:
         a1:ba:ca:ca:76:43:c7:33:d7:01:4c:fe:f2:53:34:c3:e9:cf:
         71:a5:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:51:23 2026 by rpki-client