Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File:                     tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier:          5noKtxh0y8DVkpiD8gv4a/LkRHMHqkjBLHRtriv85V0=
Subject key identifier:   3B:66:A1:B5:12:20:F7:4F:0A:09:AB:C4:A2:BB:7D:0E:13:1B:5E:E2
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer:       /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial:       05A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number:          0597
Signing time:             Wed 28 Oct 2026 23:25:49 +0000
Manifest this update:     Wed 28 Oct 2026 23:25:49 +0000
Manifest next update:     Wed 04 Nov 2026 23:25:49 +0000
Files and hashes:         1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: bb8wgL8hvYhMIl78X5uBzCGDqCkSXxFxGsX1nEf6cLU=)
                          2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=)
                          3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
                          rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 23:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
        Validity
            Not Before: Oct 28 23:25:49 2026 GMT
            Not After : Nov  4 23:25:49 2026 GMT
        Subject: CN=6ae2847d-2b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:4a:81:11:39:7e:1b:3d:1a:ab:f7:86:51:
                    ad:3f:7f:a0:e0:52:0e:4b:62:28:2e:e8:f7:aa:b4:
                    31:cb:35:d7:15:11:94:83:bb:68:86:64:39:c7:e4:
                    f6:43:7a:53:26:3d:dc:4e:08:5b:77:4d:e8:9f:83:
                    05:0f:d3:9e:65:54:cf:46:fa:89:ce:89:38:81:47:
                    e2:28:59:fc:ae:62:a4:eb:0c:98:90:fc:9a:be:00:
                    39:f9:49:9e:04:14:2c:59:bd:5d:40:29:33:0d:04:
                    aa:49:e1:9d:fd:8b:7d:4b:7f:60:d7:07:b3:73:e7:
                    84:77:c4:4a:31:f0:73:e6:ac:3a:4b:f5:c3:d7:50:
                    6b:24:f0:dd:14:07:11:ef:63:94:0e:b0:96:e3:5c:
                    f3:ff:0a:54:ed:71:cb:ea:22:50:be:72:f5:b6:a0:
                    8c:51:87:14:d9:48:2f:1b:0f:ef:e4:2c:10:01:12:
                    8f:a4:24:36:b5:c7:09:cd:7e:99:f2:97:92:bc:d6:
                    e1:e4:d4:d5:1b:bf:d5:80:1a:91:db:b4:45:b4:4f:
                    3c:19:fe:26:00:40:90:48:13:73:e2:75:45:09:5f:
                    e0:73:db:0a:16:da:62:e9:b0:2c:36:2c:bd:c6:bb:
                    aa:a9:54:cb:8f:7d:38:80:27:e2:d8:c8:ea:82:7b:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:66:A1:B5:12:20:F7:4F:0A:09:AB:C4:A2:BB:7D:0E:13:1B:5E:E2
            X509v3 Authority Key Identifier:
                keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:7c:0f:32:d2:92:e5:da:e8:d8:0c:5b:b7:3d:85:5c:73:
         8a:e3:a0:93:b1:8c:1b:cc:4f:7c:fb:4e:d1:13:52:a6:fb:a1:
         bc:e7:b8:22:28:d1:ad:0f:7b:2c:92:f6:c8:d7:f3:78:52:0d:
         9a:6d:99:42:c2:27:30:3d:c1:7a:80:55:14:31:1c:be:a6:a2:
         9e:48:f2:8e:be:93:43:76:59:f9:8e:26:8a:a6:f3:98:1f:83:
         ca:52:6e:2f:ea:2c:af:17:a4:cd:a1:e0:56:7b:4c:40:2d:b1:
         2e:e3:03:92:a9:03:5e:ba:fb:b8:49:43:2e:cd:bd:74:d9:fc:
         e9:5e:34:95:5b:57:66:1a:39:7d:15:a0:e4:c7:7f:1e:be:5c:
         d5:06:cd:04:d6:56:a5:2e:99:88:1e:c9:9d:a8:68:2a:7e:8c:
         ef:dc:64:ff:3e:6e:cb:b2:eb:4d:93:c8:c3:2b:26:e2:57:dc:
         ea:70:ed:04:70:56:b3:de:9a:5a:ff:95:f1:2d:f5:2f:2a:28:
         77:68:fd:af:2a:fe:75:1f:6d:8d:3d:9c:bf:6c:62:a0:6d:71:
         e3:9a:c0:2a:54:dd:6a:37:be:b5:27:4e:58:4b:ef:d6:a6:c1:
         2c:77:ff:e0:02:5e:3c:2f:41:6a:dc:cd:36:ec:c5:2f:56:70:
         73:e1:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:41:29 2026 by rpki-client