Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File:                     tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier:          6MIuZswbvX8X1lCP20WULSGVguOe0NvxPIeNIn2RIts=
Subject key identifier:   75:EF:53:C9:F9:51:08:95:3D:FC:C4:D6:4E:6A:15:05:38:5E:82:6F
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer:       /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial:       058E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number:          057C
Signing time:             Fri 04 Sep 2026 23:04:29 +0000
Manifest this update:     Fri 04 Sep 2026 23:04:29 +0000
Manifest next update:     Fri 11 Sep 2026 23:04:29 +0000
Files and hashes:         1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: ryJ0amGiePbccBvWqbXgL2hlxeM2sbCrlAk2tMwqbT0=)
                          2: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=)
                          3: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
                          rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
        Validity
            Not Before: Sep  4 23:04:29 2026 GMT
            Not After : Sep 11 23:04:29 2026 GMT
        Subject: CN=6a9b4e7d-e7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:6b:5e:97:93:c2:6e:ca:6a:4e:27:00:e3:
                    46:82:ff:6a:ff:be:d2:02:0a:1f:c3:fc:03:e5:68:
                    3a:ae:45:c1:bd:bb:8d:13:52:87:16:80:5d:b3:fe:
                    e1:eb:cd:9e:d6:8c:af:e3:b2:07:c9:09:6e:64:87:
                    41:19:ae:d3:d1:d4:07:0e:bb:de:a4:73:3c:c3:cf:
                    be:6e:c0:86:95:ee:45:fa:a8:7a:d7:dd:65:96:e7:
                    1f:c4:9b:75:5b:4f:bc:06:73:9f:9a:bb:55:e4:3a:
                    d7:4c:ff:5f:9e:2a:15:e2:a4:da:0e:ab:e5:ab:4b:
                    4a:83:1d:43:56:30:3b:64:ee:22:59:d0:7b:d2:ec:
                    24:e0:b2:6e:7b:c4:c4:6c:2e:47:25:da:3f:86:e3:
                    71:a8:17:5f:a8:0e:49:04:1e:30:8f:af:45:e3:de:
                    f1:a7:10:9e:7c:33:ff:fd:91:17:a3:ea:0a:62:79:
                    65:d1:f4:28:27:b6:09:f7:23:fa:e6:06:68:ff:15:
                    a7:8b:4c:cc:b1:99:3b:22:9c:54:e2:cc:20:60:1e:
                    67:9b:0b:b9:2b:ba:3e:b2:65:6b:04:a2:d6:3e:63:
                    65:a4:c4:f7:4a:79:27:eb:ea:df:ef:4c:51:fb:ac:
                    93:d8:b0:b8:b6:e5:5a:01:b4:d1:33:a6:cb:5c:27:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EF:53:C9:F9:51:08:95:3D:FC:C4:D6:4E:6A:15:05:38:5E:82:6F
            X509v3 Authority Key Identifier:
                keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:31:8f:58:82:98:29:66:e4:75:a9:63:c0:28:e0:76:9f:
         dd:ce:f2:01:b4:f4:bb:91:b3:e9:fe:92:23:34:6e:ab:85:9a:
         28:02:94:84:4c:4a:ca:5f:28:21:93:d1:22:4e:fb:ec:c8:9e:
         ba:7a:88:d1:6f:d9:9c:8a:ef:5f:45:c4:40:78:56:c5:29:2a:
         ab:80:1b:06:da:4e:c0:80:78:61:05:58:81:f3:3c:3c:ed:5b:
         e3:57:c9:4b:2d:00:df:81:e3:05:15:7c:53:98:51:0d:50:c6:
         53:5c:4d:17:46:2c:bf:95:ca:b4:b7:f1:7f:be:79:79:ca:62:
         f0:3e:57:8e:01:b7:a9:a3:c3:ac:2a:30:f6:92:ca:20:5c:42:
         bf:f1:53:f5:6b:19:84:f4:ce:01:36:eb:01:0c:50:50:e9:3b:
         24:04:ef:62:bb:85:fe:2f:81:9e:ff:0e:8f:8e:c3:36:78:cd:
         df:fa:31:ae:ff:d1:51:4c:c9:46:cc:6c:cf:8f:9a:a8:67:3f:
         e6:90:73:2a:4f:82:d5:3c:d0:5f:54:c6:de:0a:d9:72:90:39:
         62:d5:f5:2d:90:68:5d:26:5e:06:00:53:cb:ef:0e:3d:6b:b2:
         99:8b:c4:75:3b:83:cb:88:58:4b:a0:53:d1:b3:80:06:d8:c4:
         56:a6:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:17 2026 by rpki-client