Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
File:                     T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json)
Hash identifier:          DQdJQa3sVjPtMDf1mJzxcSKNRcr+5brFFR/uTyLtlB4=
Subject key identifier:   99:56:43:A4:C1:99:91:41:CB:CE:C2:0C:C1:31:17:6F:81:F4:E9:61
Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4
Certificate issuer:       /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
Certificate serial:       08D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
Manifest number:          08C0
Signing time:             Sun 04 Oct 2026 20:36:20 +0000
Manifest this update:     Sun 04 Oct 2026 20:36:20 +0000
Manifest next update:     Sun 11 Oct 2026 20:36:20 +0000
Files and hashes:         1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: Iwz+oUMJ6LAwn6eVVTPWU5MfyT51gZT9B1Qcr0fqlFI=)
                          2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: ZEKagWdv0yeK8YKk4M4X2WCGHhhS2XrEDrg/1/ecl20=)
                          3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: W7VEuZ0XJHIgHkuqLntiZruVzDvsuhDDdtNUQSpIguA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4
        Validity
            Not Before: Oct  4 20:36:20 2026 GMT
            Not After : Oct 11 20:36:20 2026 GMT
        Subject: CN=6ac2b8c4-8a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:40:95:14:b9:2b:e1:7e:22:3f:39:4b:15:
                    57:f4:e3:50:79:9d:01:e1:9e:e0:5b:7d:6c:b2:fd:
                    3c:8e:27:34:73:bb:51:6e:53:e7:72:70:49:1f:44:
                    af:0d:b6:f0:62:36:78:53:7f:be:6b:66:25:b8:a3:
                    f0:93:21:ce:ae:a5:04:f8:17:55:12:c1:cd:ac:55:
                    2d:e2:fe:60:2e:07:64:be:f5:8d:24:50:2f:7f:bb:
                    03:47:5d:f3:3a:ae:63:7e:81:35:99:8a:ed:08:f1:
                    13:dd:2f:f3:3c:54:98:ca:d0:48:92:ce:0f:c1:e8:
                    54:01:f5:fa:19:aa:2d:ac:65:2a:ad:03:00:6f:e1:
                    74:be:be:68:57:44:b2:c4:ee:95:13:12:ee:b5:f4:
                    61:25:aa:d1:79:1b:01:33:ac:a2:eb:48:05:79:00:
                    be:d6:51:cf:e5:92:1e:fe:fe:28:07:e9:99:ff:c6:
                    f1:0b:81:cd:31:54:14:16:b0:94:0f:d3:a7:f4:19:
                    0f:36:1e:3f:49:cc:4a:68:b2:cb:2f:86:db:94:33:
                    76:42:1b:a9:2d:3a:d5:9b:8c:3e:af:9b:1c:38:af:
                    44:8b:b8:cb:da:fc:64:21:6f:82:5a:41:70:ed:67:
                    d8:3d:63:3a:08:9f:5e:ef:fa:16:f9:eb:ad:de:20:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:43:A4:C1:99:91:41:CB:CE:C2:0C:C1:31:17:6F:81:F4:E9:61
            X509v3 Authority Key Identifier:
                keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:e1:a5:18:9b:5d:15:1b:68:c6:fc:ce:67:3c:c0:e7:a2:
         3a:06:18:20:fc:d6:9f:05:28:ef:0f:2a:15:5f:d1:e2:92:5c:
         76:f0:85:3a:dd:81:56:70:a9:46:aa:f4:0b:69:f8:83:14:1e:
         b3:91:9c:5d:23:ae:21:e5:ab:42:83:f9:40:68:fb:fc:a4:f5:
         b9:1c:e3:f9:3d:c3:bf:b4:26:66:ed:17:98:0d:c5:e3:b6:f8:
         46:d6:d3:b9:3e:cb:3c:72:8d:9c:c5:fe:c2:f2:f0:19:32:8d:
         78:41:a3:1b:21:a4:2a:5b:d6:78:fb:9b:a2:83:7e:cd:39:44:
         2d:48:d0:98:23:1f:5e:88:63:1d:3a:04:56:3f:63:62:29:cd:
         5f:2a:17:61:d0:be:eb:4b:80:83:3e:d9:92:23:ca:71:3c:84:
         98:d9:5e:6e:f8:f1:0c:b8:cf:67:f4:af:5d:16:be:91:16:5a:
         69:12:b0:b5:10:40:4e:6b:64:b2:2f:ff:00:4b:ba:31:73:f9:
         db:13:da:47:25:a3:8e:3b:c2:0b:30:6d:1f:06:2d:1c:69:0c:
         25:f7:71:47:db:8f:ea:44:aa:d7:c8:5d:76:13:00:97:b1:f2:
         be:75:ef:82:bb:d5:64:f5:b4:c5:ae:11:0b:9e:18:d1:43:2b:
         35:ba:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:29:28 2026 by rpki-client