Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File:                     tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier:          l8wSqUvPLihrkVvmXlKeqoe+gUBtFnp/1TuNTaNopVc=
Subject key identifier:   A6:98:ED:56:E6:53:76:BC:F5:80:73:6F:76:12:C4:21:A8:71:23:A2
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer:       /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number:          C6
Signing time:             Thu 15 Oct 2026 07:48:34 +0000
Manifest this update:     Thu 15 Oct 2026 07:48:33 +0000
Manifest next update:     Thu 22 Oct 2026 07:48:33 +0000
Files and hashes:         1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: TsBp/LY4jeLbBNmSdlcgThoCMx2xY2bK6DANM1DKll0=)
                          2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 07:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
        Validity
            Not Before: Oct 15 07:48:33 2026 GMT
            Not After : Oct 22 07:48:33 2026 GMT
        Subject: CN=6ad08552-bfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:2d:27:bc:a9:b7:22:ef:b5:bf:ea:c2:bb:
                    47:90:63:75:23:f6:5b:4d:61:40:97:9a:4f:d3:4d:
                    c2:17:0f:66:ba:75:a2:ff:c5:c5:cf:e7:c3:f4:24:
                    54:6a:87:51:8d:65:a9:44:59:25:8a:8d:b2:8d:be:
                    35:e2:17:f0:cb:db:a7:c0:e3:1e:27:13:f0:29:e4:
                    6f:f3:c0:37:aa:09:df:6c:93:7c:a4:5a:50:d0:38:
                    73:4f:9b:a8:89:34:cf:4a:37:bc:0e:11:77:f9:cc:
                    5b:55:da:77:10:81:98:2a:6f:db:46:56:1b:ae:4f:
                    5a:c3:70:1b:d0:d8:23:76:19:e0:dd:61:ca:8f:97:
                    dc:e8:5b:51:9c:07:f1:cb:28:dd:be:b2:da:79:70:
                    14:4a:aa:d5:aa:94:fd:a9:3b:4f:18:ad:82:37:e4:
                    26:59:23:3e:19:54:89:db:4e:98:92:d9:3a:ad:21:
                    3e:66:fc:5e:db:0a:28:5a:8f:4a:8e:5e:b5:11:0a:
                    af:ad:7a:ac:63:27:21:d1:d9:73:b6:0e:c5:8e:00:
                    ac:85:4e:c7:b9:94:ec:b2:54:a8:9f:c7:09:6a:f2:
                    ba:d7:16:31:f7:98:12:bf:76:95:da:5f:5e:35:00:
                    04:8e:ee:08:e1:ba:a0:73:b9:66:2c:de:42:8b:4c:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:ED:56:E6:53:76:BC:F5:80:73:6F:76:12:C4:21:A8:71:23:A2
            X509v3 Authority Key Identifier:
                keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:2d:67:d6:d8:e2:19:7a:85:ff:bf:55:2e:18:4f:52:ae:
         f6:a6:6f:2b:4e:8f:24:01:ad:4a:9b:98:bb:2c:3d:b3:8a:32:
         bd:c9:6f:f7:99:b1:4b:e3:d9:d6:63:9a:33:ad:81:fb:9d:05:
         e5:4b:1f:ec:48:ac:03:cf:2d:77:11:1b:5b:8c:13:ba:4d:48:
         8a:df:6f:5b:c5:b4:25:ab:60:ec:f0:bd:a0:1e:2d:6b:82:e9:
         ab:38:83:5f:a7:d5:4c:ae:f7:96:ca:5c:8f:b2:d9:9b:2e:e9:
         06:dd:28:93:0b:c4:21:30:0e:23:84:15:b4:52:12:9d:0b:d1:
         73:7c:f5:85:44:8c:bf:c8:2b:b6:05:3a:08:de:f2:3b:5a:39:
         9a:36:5c:4a:19:5b:13:27:2f:d4:b3:08:d6:fb:95:da:aa:31:
         09:43:2b:b3:35:25:64:26:34:1d:5d:67:45:ff:a1:de:d5:a9:
         1e:c0:9f:00:0d:ab:7f:00:bf:38:20:8a:de:5b:a0:d6:c7:30:
         f5:f6:d2:7b:b3:0c:f4:0e:d2:c2:b5:77:c0:a2:6c:27:f1:16:
         59:28:57:ac:4c:de:79:c6:a8:32:98:97:d6:7a:84:5d:6d:48:
         f1:cb:ab:04:a3:df:5e:55:b3:a9:ff:f4:e8:95:77:23:79:74:
         87:69:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:45 2026 by rpki-client