Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
File:                     TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json)
Hash identifier:          41IUK2UGTYDQS7wlfqY0Z7vF3o0i/wn0nzW7i2egR8s=
Subject key identifier:   A5:09:C0:79:04:09:01:85:66:05:8F:93:9F:48:28:58:B4:FC:46:80
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Certificate issuer:       /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial:       0675
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
Manifest number:          066C
Signing time:             Tue 06 Oct 2026 22:44:40 +0000
Manifest this update:     Tue 06 Oct 2026 22:44:39 +0000
Manifest next update:     Tue 13 Oct 2026 22:44:39 +0000
Files and hashes:         1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: 5myql2jN2BeQ3A0xU2jN2RdVUDYPyzfjrxvNawlGtdM=)
                          2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: aU5xrCVr0rx2dJrESHwVd+dJg3AOWpB3NnDDFJyaC0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
        Validity
            Not Before: Oct  6 22:44:39 2026 GMT
            Not After : Oct 13 22:44:39 2026 GMT
        Subject: CN=6ac579d8-efa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:ae:4a:d7:bd:63:2e:af:e0:70:d9:3f:47:
                    48:cd:c4:34:5c:39:c3:ae:29:93:d7:ac:4d:c3:c5:
                    0f:be:38:01:e6:14:ac:e3:44:37:29:44:3f:26:da:
                    d7:da:70:a8:c3:10:84:cd:96:5c:5c:96:b0:a5:0f:
                    ee:fc:3d:93:41:ef:f4:6c:ff:cd:36:8e:1d:45:63:
                    81:01:2b:bd:ba:63:48:c7:9e:11:e2:a8:0f:4a:14:
                    e4:1c:cc:88:1a:1a:d4:da:2b:d9:b4:fa:24:56:b1:
                    bb:3b:09:f2:a5:e8:5e:e8:0c:ae:ff:35:67:0b:b4:
                    5a:c1:4c:a2:59:57:00:2f:bb:ca:d2:09:4e:21:82:
                    7c:aa:78:af:82:b4:74:c5:17:bf:b3:14:aa:95:ef:
                    67:d7:f2:46:ba:8a:b5:4f:ff:35:6f:b1:f6:da:03:
                    32:f9:90:dd:84:2d:2a:09:11:7b:d6:94:9e:6c:2a:
                    e2:9e:c3:5a:9e:7b:fb:22:10:11:a2:1c:fd:45:82:
                    69:86:13:5e:f2:e8:eb:65:79:b2:e9:54:bc:af:5b:
                    6f:81:91:89:5d:c7:4d:39:46:f2:6d:d6:47:36:89:
                    45:43:04:d3:ed:c0:92:04:f0:ac:e2:ee:25:8d:e8:
                    6b:97:23:d4:87:ea:34:e2:f1:fe:b0:37:92:01:1d:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:09:C0:79:04:09:01:85:66:05:8F:93:9F:48:28:58:B4:FC:46:80
            X509v3 Authority Key Identifier:
                keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:6a:36:98:58:7e:d3:44:41:5e:1f:c0:91:ce:ce:89:47:
         3c:e4:0e:e7:d5:81:f9:2e:5b:79:c5:8a:84:a6:5d:47:41:52:
         7d:54:83:00:3b:d0:36:9c:8a:f8:e4:d1:bb:99:3d:83:fa:87:
         fb:9b:18:21:26:7f:5e:d0:0a:3c:eb:c4:05:8e:37:97:97:66:
         d3:b7:12:fb:5b:f1:8a:0d:2c:7a:3f:e6:f4:89:85:b7:b5:98:
         a0:01:2e:13:3a:a0:64:d0:cb:02:fe:24:32:f8:2b:cb:9f:53:
         e9:f2:14:48:28:fe:a1:8d:ce:51:9a:05:71:49:ab:f7:18:4c:
         80:12:b9:e6:be:c0:b2:7c:c6:89:a0:19:ba:b5:f4:fb:4d:62:
         0f:f1:e5:dc:cd:9d:1e:2c:f8:41:59:6e:39:14:e5:fe:0c:75:
         cf:c2:af:04:2b:43:64:36:ee:83:8a:05:12:7b:b3:9e:df:67:
         36:9e:fc:9c:4a:6d:fa:ad:36:5f:c0:4b:5a:c9:c8:7d:e9:e7:
         98:93:68:d1:60:9c:f2:78:9e:b8:8f:d4:d3:be:e9:57:12:45:
         53:5f:50:56:e1:f9:02:17:69:ac:a5:99:d1:c8:08:d5:e1:56:
         c4:ba:84:3a:2b:bb:bc:10:50:81:29:9b:3c:3e:9b:e5:3c:d9:
         a1:2c:e8:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw
NzFEMjQ1MzUwHhcNMjYxMDA2MjI0NDM5WhcNMjYxMDEzMjI0NDM5WjAYMRYwFAYD
VQQDEw02YWM1NzlkOC1lZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLWuSte9Yy6v4HDZP0dIzcQ0XDnDrimT16xNw8UPvjgB5hSs40Q3KUQ/JtrX
2nCowxCEzZZcXJawpQ/u/D2TQe/0bP/NNo4dRWOBASu9umNIx54R4qgPShTkHMyI
GhrU2ivZtPokVrG7Ownypehe6Ayu/zVnC7RawUyiWVcAL7vK0glOIYJ8qnivgrR0
xRe/sxSqle9n1/JGuoq1T/81b7H22gMy+ZDdhC0qCRF71pSebCrinsNannv7IhAR
ohz9RYJphhNe8ujrZXmy6VS8r1tvgZGJXcdNOUbybdZHNolFQwTT7cCSBPCs4u4l
jehrlyPUh+o04vH+sDeSAR15dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUJwHkE
CQGFZgWPk59IKFi0/EaAMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1
NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUMwQi9CNzNBMTc5Q0U1NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZw
Qk1HRy1TQ0JkMEFISFNSVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE+pqNphYftNEQV4fwJHOzolHPOQO59WB+S5becWKhKZdR0FSfVSDADvQNpyK
+OTRu5k9g/qH+5sYISZ/XtAKPOvEBY43l5dm07cS+1vxig0sej/m9ImFt7WYoAEu
EzqgZNDLAv4kMvgry59T6fIUSCj+oY3OUZoFcUmr9xhMgBK55r7AsnzGiaAZurX0
+01iD/Hl3M2dHiz4QVluORTl/gx1z8KvBCtDZDbug4oFEnuznt9nNp78nEpt+q02
X8BLWsnIfennmJNo0WCc8nieuI/U077pVxJFU19QVuH5AhdprKWZ0cgI1eFWxLqE
Oiu7vBBQgSmbPD6b5TzZoSzokg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 11:15:10 2026 by rpki-client