Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
File:                     TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json)
Hash identifier:          XoeXxUauq2/L3U/mb8Gus/UpKUradyCDPWVYjSnTsIk=
Subject key identifier:   09:DD:C0:D3:32:EF:94:3B:20:57:76:FC:8F:43:EE:A8:D6:B9:03:17
Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
Certificate issuer:       /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Certificate serial:       0C68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
Manifest number:          0C5F
Signing time:             Fri 02 Oct 2026 18:56:14 +0000
Manifest this update:     Fri 02 Oct 2026 18:56:13 +0000
Manifest next update:     Fri 09 Oct 2026 18:56:13 +0000
Files and hashes:         1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: pzW3i9WWeXqvBQ544a1MK5m8AJEQnpY5PwNgAzUr5+c=)
                          2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: Wvmba1LumAYwWvomuYM6dmK6vWhw9FVreh3xjgNIg04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl
                          rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
        Validity
            Not Before: Oct  2 18:56:13 2026 GMT
            Not After : Oct  9 18:56:13 2026 GMT
        Subject: CN=6abffe4e-5632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1e:2d:f5:9d:1f:63:f6:1e:5d:1d:0c:8b:aa:
                    45:39:e7:93:70:51:9e:31:8a:d0:5d:01:f0:3a:89:
                    69:ec:bc:54:ba:81:ed:53:44:4d:6e:e4:6c:8f:17:
                    98:b2:ee:09:d6:04:81:1c:e3:b5:79:fe:b7:87:c7:
                    d2:a2:7d:45:e5:bc:c9:af:26:41:d7:67:73:ad:4e:
                    74:a5:1f:ce:4c:03:65:89:d8:60:5d:11:c9:14:e4:
                    ff:23:04:53:17:ca:be:96:da:ff:1e:51:72:ef:f9:
                    68:27:c8:53:46:e6:40:fd:f6:c5:67:54:7e:0a:2f:
                    70:4d:b2:f9:49:a9:31:05:e3:a3:d0:92:3a:54:48:
                    88:09:46:dc:a1:41:ae:3a:07:a7:6d:0c:b2:78:25:
                    f7:e1:57:f6:90:76:97:21:2d:ff:0d:30:73:09:9f:
                    8a:ab:44:cc:1d:21:73:cd:02:56:e4:a0:86:00:ce:
                    9c:46:32:be:f2:4a:70:05:d5:99:29:13:22:27:7a:
                    cd:8f:09:16:7b:6c:d0:5e:8b:f2:b7:dd:59:4b:be:
                    ac:d8:65:3a:12:43:03:4d:f1:4f:c0:8e:45:b8:ea:
                    44:a5:73:af:5a:95:72:cd:d2:49:13:85:3c:3a:cc:
                    dd:70:8a:3d:77:f8:1a:52:87:69:f3:8e:8a:79:3b:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DD:C0:D3:32:EF:94:3B:20:57:76:FC:8F:43:EE:A8:D6:B9:03:17
            X509v3 Authority Key Identifier:
                keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fc:4e:3b:84:61:8e:c2:58:2d:e6:5b:3c:2c:79:4e:e7:24:
         d2:d6:50:91:6c:31:31:34:1d:a4:b7:f9:2e:7c:d8:d5:eb:28:
         ec:6c:cc:33:1d:4f:b7:7b:39:89:b2:76:35:70:10:73:cd:c0:
         62:7e:a9:1f:ff:17:da:ac:ce:4d:d9:f0:fb:42:da:9e:45:df:
         5f:41:06:d6:73:ba:2b:1f:5c:ab:80:d9:03:38:3e:30:c6:38:
         4a:38:67:3c:6e:43:92:24:81:a4:a6:a9:4b:a0:c3:58:67:2e:
         65:09:e4:ce:ec:1f:13:d5:7d:1a:5e:52:05:a6:6a:7f:6a:24:
         20:26:12:56:24:b0:6d:1b:ac:1a:3b:96:b2:b8:18:5a:80:9a:
         73:8f:3b:67:76:43:d4:e0:a8:46:73:87:f2:51:d7:38:27:eb:
         00:2a:3d:1c:d4:9d:3e:e7:89:75:bd:c9:8d:f1:3e:9d:c3:9e:
         f4:b5:d2:2f:d8:78:e5:ee:e6:12:f5:fe:08:60:22:c4:6f:53:
         99:94:6b:20:ae:9f:70:96:88:34:37:8d:bd:98:97:f0:40:49:
         d7:3a:d8:55:bb:ef:73:f7:f0:c3:88:76:d0:b6:ee:1d:eb:41:
         7b:5c:55:cd:4d:06:e5:6a:da:e2:6e:f0:f2:a8:21:ca:44:b8:
         46:ab:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:07 2026 by rpki-client