Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
File:                     tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft (raw, json)
Hash identifier:          dQK1iDCb0TRYx3biFWeRSmYEoBYCHOHQUN4RlbasLqQ=
Subject key identifier:   EC:BA:C1:19:50:31:08:8E:FA:D8:EC:7D:1C:C1:7F:D8:B8:CE:1B:AB
Authority key identifier: B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E
Certificate issuer:       /CN=A91CF477/serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
Manifest number:          34
Signing time:             Sat 03 Oct 2026 09:23:13 +0000
Manifest this update:     Sat 03 Oct 2026 09:23:12 +0000
Manifest next update:     Sat 10 Oct 2026 09:23:12 +0000
Files and hashes:         1: tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl (hash: s5vl9YnIuhECJyQ/usSdEqr8Or0fvUpyWG/LEZ4W96k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl
                          rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF477, serialNumber=B6747083A4B53669360F88B099D4974F8F28950E
        Validity
            Not Before: Oct  3 09:23:12 2026 GMT
            Not After : Oct 10 09:23:12 2026 GMT
        Subject: CN=6ac0c980-b2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b5:68:68:48:1b:eb:13:34:08:35:93:40:f1:
                    a9:d3:30:ed:11:07:5d:fc:44:4d:a9:cd:cf:7d:a9:
                    e2:ef:ae:f4:7d:11:d2:c4:e3:94:d9:e3:10:38:55:
                    ac:fb:51:ba:ed:74:f9:91:52:e9:70:e1:32:5e:a4:
                    fa:98:cd:ef:22:09:db:3c:21:74:c9:e4:54:c1:3f:
                    10:7d:e6:fd:c5:7e:5f:35:33:4c:c9:f3:ab:38:b2:
                    61:32:c4:41:26:a4:ca:7c:de:02:84:bb:75:f4:20:
                    03:73:be:61:ce:ad:3f:d8:03:31:30:c6:3a:a9:cb:
                    b3:8b:e5:b4:20:c5:ef:7f:03:9a:8a:19:4b:ca:ab:
                    8a:cf:4c:3a:0d:03:27:72:00:fb:50:f0:88:86:04:
                    af:af:4c:20:ee:28:12:4a:74:d7:09:4c:62:9f:b6:
                    34:ef:2c:24:2b:20:e3:91:d0:36:06:8c:a0:f1:f1:
                    9c:d7:ed:67:27:b5:4a:02:fd:35:66:c0:be:d7:ec:
                    cc:e5:e6:60:e8:f8:10:42:7c:4d:49:47:9c:af:4c:
                    68:f2:04:70:8a:10:4c:4a:fe:fb:a6:1c:9c:64:d1:
                    95:6e:bb:b9:c8:5d:4a:7a:f9:c1:30:19:00:10:ab:
                    21:fa:65:c4:72:e5:05:4a:d9:6c:92:e2:3e:f8:6d:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:C1:19:50:31:08:8E:FA:D8:EC:7D:1C:C1:7F:D8:B8:CE:1B:AB
            X509v3 Authority Key Identifier:
                keyid:B6:74:70:83:A4:B5:36:69:36:0F:88:B0:99:D4:97:4F:8F:28:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnRwg6S1Nmk2D4iwmdSXT48olQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6F0CBCDE712511F187EAADCA6DA30FBC/tnRwg6S1Nmk2D4iwmdSXT48olQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c5:07:66:dd:d0:95:b9:5c:4f:a8:9d:7b:bb:7f:e4:98:34:
         25:4a:a9:38:a2:a7:e9:13:91:e8:6d:34:1f:80:e5:8f:62:7e:
         28:80:4c:d5:95:11:85:55:2b:05:f5:e6:a8:96:b8:64:4c:14:
         aa:f6:96:a0:b4:24:9b:33:38:36:1c:3b:53:3c:4f:e9:b9:b1:
         c9:be:ff:4c:07:c4:eb:dc:ab:17:39:ab:73:e2:9c:1a:1a:5c:
         86:ed:59:7a:1c:cc:69:b7:d9:ec:42:c0:7f:2d:6c:9b:8b:86:
         8a:a9:67:00:38:13:5d:e7:c0:fb:54:32:95:19:c9:5c:74:81:
         db:f3:2d:41:31:df:5d:27:9e:e2:4b:23:38:98:a5:96:ab:03:
         ff:62:46:bd:40:a4:ab:28:73:37:e1:aa:87:25:f3:88:03:0f:
         8f:6b:de:d0:0c:9b:7b:dc:cd:ed:ad:fd:00:b0:57:30:76:fa:
         86:85:53:d8:c2:79:b6:2b:d9:ad:ff:7b:78:f2:2d:c7:4a:5c:
         01:50:ae:4a:fc:c1:4e:13:56:56:ab:8a:f4:9b:a3:08:00:53:
         c3:40:ef:74:f0:f5:69:07:0e:5f:89:52:68:a6:74:c9:59:64:
         db:44:f3:d0:60:e4:83:3f:d8:59:ff:49:2f:6e:63:48:49:5e:
         f9:80:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:13 2026 by rpki-client