Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File:                     TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier:          p8l9Dx+iKIL2KHDvS+FLirxv/UDNKAXRc3PskokbR/Q=
Subject key identifier:   3F:D2:D4:90:60:E2:78:1D:33:D6:58:EA:64:E7:4F:AB:71:82:11:D2
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer:       /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial:       0287
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number:          0275
Signing time:             Sun 11 Oct 2026 02:33:31 +0000
Manifest this update:     Sun 11 Oct 2026 02:33:30 +0000
Manifest next update:     Sun 18 Oct 2026 02:33:30 +0000
Files and hashes:         1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: V4R0adhdMS1Chqspa/R3qBp9uoVGrz99ZJLxZq56fxA=)
                          2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
                          3: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
                          rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
        Validity
            Not Before: Oct 11 02:33:30 2026 GMT
            Not After : Oct 18 02:33:30 2026 GMT
        Subject: CN=6acaf57b-b3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:c7:e5:9c:87:18:53:a9:0d:38:19:e3:1c:
                    9e:66:ff:be:fa:30:c2:3c:8c:21:a2:55:fd:55:e2:
                    cd:19:01:81:36:2d:2d:46:4c:c7:ce:cf:ab:12:47:
                    a4:b6:91:07:0a:c5:1f:9a:8b:b4:da:d4:0c:f9:84:
                    a7:6e:d9:4a:c9:03:39:37:55:79:b1:dc:2c:dd:77:
                    09:49:bd:8c:46:88:71:b6:34:a8:68:db:dc:99:84:
                    aa:69:37:5f:00:99:05:d2:bb:e0:c8:67:dc:bb:1d:
                    54:f1:8c:af:4c:37:3a:e6:0b:ef:2e:82:b7:4c:c2:
                    2c:7d:c1:5f:9c:35:04:b6:1f:3a:02:92:00:a5:a3:
                    22:68:d7:68:99:d8:fd:f2:c2:35:21:7f:63:91:d5:
                    75:23:24:49:7e:ab:7a:13:f4:ea:7e:92:9f:42:e1:
                    d0:fe:e8:22:06:ec:07:eb:f7:09:4c:4c:5d:5e:f9:
                    14:90:42:04:20:dd:9a:90:bd:06:72:cf:3d:bd:95:
                    08:aa:a6:b2:ad:a3:82:ab:80:b3:7a:f5:08:60:f9:
                    cc:23:55:6b:6b:a1:78:98:80:cd:83:15:72:1c:a1:
                    28:b0:b5:dd:cf:cb:48:86:bd:e2:19:d6:65:92:86:
                    7f:dd:a9:34:f7:cc:e0:10:34:fc:4f:d7:4e:61:e4:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D2:D4:90:60:E2:78:1D:33:D6:58:EA:64:E7:4F:AB:71:82:11:D2
            X509v3 Authority Key Identifier:
                keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:5f:7f:a3:8b:a7:bc:27:ae:a6:90:94:d4:b1:93:c0:05:dd:
         d1:a0:07:1e:81:ff:e4:19:62:a7:29:02:50:44:6a:d4:84:b2:
         e6:e5:b2:9b:ef:cb:19:0a:61:4a:b0:e0:81:89:3e:12:ed:16:
         0a:56:cc:e5:57:9a:0d:88:23:31:33:b6:e5:32:a2:9d:cc:3d:
         af:b3:d1:29:3c:85:96:9d:4c:9b:26:ff:60:a6:eb:d7:68:ef:
         ee:7e:6b:e0:71:2b:d1:3f:2c:9e:90:a0:5f:57:ea:3f:d5:fc:
         61:75:bb:36:39:05:70:07:55:90:bc:0b:37:b4:f8:7f:db:7b:
         3a:18:03:f2:0e:15:de:f3:59:f8:c7:b0:d5:02:a6:3a:5c:3c:
         74:58:4e:98:a4:e4:fa:14:46:23:5c:1a:97:6e:a5:32:c0:0d:
         10:86:a6:9d:47:ca:ce:b5:4c:ad:65:43:41:4d:44:31:93:30:
         8e:88:21:35:c0:c6:0d:54:48:64:0c:69:5a:ec:80:92:3e:6d:
         21:51:69:61:b1:80:24:5c:93:1f:8b:fe:f4:43:cf:07:7a:2e:
         17:2f:e0:08:d4:41:2f:e0:7d:02:1c:19:4c:01:f0:40:63:cb:
         dc:13:ea:b9:61:cd:0d:02:9c:92:0f:87:fe:1f:71:d0:33:cc:
         15:ee:90:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIwMEYxMTAvBgNVBAUTKDREOTA5MDg3QkRERkExNTA1RTJCQkEwM0YyMDYxMTJF
QUVGRkIxMUIwHhcNMjYxMDExMDIzMzMwWhcNMjYxMDE4MDIzMzMwWjAYMRYwFAYD
VQQDEw02YWNhZjU3Yi1iM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmrrH5ZyHGFOpDTgZ4xyeZv+++jDCPIwholX9VeLNGQGBNi0tRkzHzs+rEkek
tpEHCsUfmou02tQM+YSnbtlKyQM5N1V5sdws3XcJSb2MRohxtjSoaNvcmYSqaTdf
AJkF0rvgyGfcux1U8YyvTDc65gvvLoK3TMIsfcFfnDUEth86ApIApaMiaNdomdj9
8sI1IX9jkdV1IyRJfqt6E/TqfpKfQuHQ/ugiBuwH6/cJTExdXvkUkEIEIN2akL0G
cs89vZUIqqayraOCq4CzevUIYPnMI1Vra6F4mIDNgxVyHKEosLXdz8tIhr3iGdZl
koZ/3ak098zgEDT8T9dOYeTLiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/S1JBg
4ngdM9ZY6mTnT6txghHSMB8GA1UdIwQYMBaAFE2QkIe936FQXiu6A/IGES6u/7Eb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjAwRi8yNTc4NzQwMjE2
NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9WQmVLN29EOGdZUkxxN19z
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RaQ1FoNzNmb1ZCZUs3b0Q4Z1lSTHE3X3NScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjAwRi8yNTc4NzQwMjE2NEYxMUVFOUU3MzQwNEVDNEY5QUUwMi9UWkNRaDczZm9W
QmVLN29EOGdZUkxxN19zUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxl9/o4unvCeuppCU1LGTwAXd0aAHHoH/5BlipykCUERq1ISy5uWym+/LGQph
SrDggYk+Eu0WClbM5VeaDYgjMTO25TKincw9r7PRKTyFlp1Mmyb/YKbr12jv7n5r
4HEr0T8snpCgX1fqP9X8YXW7NjkFcAdVkLwLN7T4f9t7OhgD8g4V3vNZ+Mew1QKm
Olw8dFhOmKTk+hRGI1wal26lMsANEIamnUfKzrVMrWVDQU1EMZMwjoghNcDGDVRI
ZAxpWuyAkj5tIVFpYbGAJFyTH4v+9EPPB3ouFy/gCNRBL+B9AhwZTAHwQGPL3BPq
uWHNDQKckg+H/h9x0DPMFe6QIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:20:03 2026 by rpki-client