Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
File:                     TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json)
Hash identifier:          CeBJLk20Q62urRoR92qQzto/g8ZoS1EQckmLVEpdvhI=
Subject key identifier:   4C:3E:C6:3A:1D:1F:17:BE:04:90:20:84:BD:95:BC:94:70:F0:F4:7B
Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F
Certificate issuer:       /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
Manifest number:          02D0
Signing time:             Tue 06 Oct 2026 16:19:37 +0000
Manifest this update:     Tue 06 Oct 2026 16:19:37 +0000
Manifest next update:     Tue 13 Oct 2026 16:19:37 +0000
Files and hashes:         1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: zjIkmZOksGr+eOWLWuqQrPnxQU7Ki/Z/wrl16G/k/ZI=)
                          2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: ueHqaGP9BcHIMZqPcQWizwyy9v5xkPDp7cUx2N9DhCY=)
                          3: E4C7F5CC861C11F1A1A4787881A30FBC.roa (hash: eS4gifaEB1Ko6koZdynUYduB0XDv64fPCwP13PzmRbY=)
                          4: D999BCE486E911F189970DEF85A30FBC.roa (hash: PM+CjH8NGl/svPw8N5o7ZKEH0zYFpc1M+Q6DjNKK8fc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F
        Validity
            Not Before: Oct  6 16:19:37 2026 GMT
            Not After : Oct 13 16:19:37 2026 GMT
        Subject: CN=6ac51f99-7e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:27:3a:e2:22:e6:49:2f:7a:38:a7:b2:93:
                    0d:ff:67:ae:60:48:d2:4b:ca:5e:a4:16:41:d1:36:
                    fe:50:ce:7c:0d:e0:9a:b0:62:c8:a5:72:3b:f9:5c:
                    0c:ed:63:22:74:f6:03:29:a7:40:bb:54:21:79:43:
                    6a:f6:d6:6a:9b:d8:7d:da:2f:17:df:25:43:d9:57:
                    14:44:83:8a:ca:fb:cd:d8:1c:33:c0:61:f1:5c:27:
                    d0:25:f5:d7:14:5a:26:05:1c:41:94:c4:0e:f0:ba:
                    d2:d1:81:f5:84:f8:39:87:22:bd:7b:fe:a7:61:05:
                    1f:87:9f:77:57:6c:59:22:b3:3c:45:8d:0e:15:3d:
                    86:9f:45:21:5f:d2:c3:a1:05:00:29:bb:69:61:56:
                    e4:ae:94:76:9f:75:46:f0:af:ac:d2:c6:77:96:ad:
                    d4:3d:17:c3:78:99:aa:87:6c:61:91:b7:21:97:9e:
                    e7:42:84:14:32:66:43:e1:b8:d7:27:51:2e:c1:60:
                    ac:28:56:74:af:13:37:47:ed:a6:77:6a:dc:10:dc:
                    84:ec:e2:8e:55:bf:45:de:82:2d:3c:c9:2d:14:8a:
                    53:a6:2f:09:8b:72:30:a6:84:89:20:b9:4d:93:5f:
                    4f:6e:81:68:96:3e:a9:5d:3b:c8:ca:ae:24:7d:9f:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:C6:3A:1D:1F:17:BE:04:90:20:84:BD:95:BC:94:70:F0:F4:7B
            X509v3 Authority Key Identifier:
                keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:4f:92:4f:5e:7a:85:7d:d7:d1:c2:f7:37:c4:44:c8:27:
         03:36:75:04:df:44:04:ca:67:e7:77:cf:b8:2a:04:fc:be:f1:
         43:e5:b9:ec:04:60:49:35:a1:47:dc:ad:72:7b:a6:63:74:04:
         d2:87:86:34:25:fc:7c:3c:35:5c:14:23:d4:64:74:d0:77:2e:
         89:75:2c:ee:f0:f4:bc:5d:92:7a:e8:91:b0:62:1d:df:83:e2:
         a6:f4:d6:9f:91:5a:84:6f:9b:f7:e1:b2:ea:6b:4a:1e:be:f9:
         3f:73:cd:8b:b7:98:bd:e1:36:78:6c:e1:6a:a5:66:d8:b7:50:
         7c:d8:3d:13:34:92:36:a0:37:ac:c8:ea:a8:4e:38:a2:71:b2:
         bd:bf:14:fb:49:c2:33:52:c8:45:2a:b2:92:1e:b5:fe:5a:10:
         80:d3:89:39:e5:82:6f:73:53:e4:65:af:13:0d:74:02:75:64:
         29:26:b7:8a:04:ba:37:f6:24:6e:ee:d5:7f:ae:47:ee:ef:4e:
         d6:dd:de:46:55:fc:f4:ff:ff:76:02:52:aa:6c:4c:0f:a9:76:
         2a:a1:fd:63:24:b5:fb:b8:be:30:51:7e:45:28:ff:9a:89:82:
         cd:fa:ec:42:e5:d5:52:c6:7e:f9:f0:b5:88:a2:5b:34:22:5c:
         5c:e8:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:54:08 2026 by rpki-client