Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
File:                     tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json)
Hash identifier:          JtabzxJcfsBNOLiDAlcy8GuXazkCG5NuGNihdTnzuv8=
Subject key identifier:   D2:5B:A1:11:C6:25:2F:68:2E:7F:BF:9F:10:94:E6:6F:EB:CE:A5:C6
Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE
Certificate issuer:       /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
Certificate serial:       0D51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
Manifest number:          0D41
Signing time:             Fri 02 Oct 2026 18:23:17 +0000
Manifest this update:     Fri 02 Oct 2026 18:23:17 +0000
Manifest next update:     Fri 09 Oct 2026 18:23:17 +0000
Files and hashes:         1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: qRNvqdAocOjEsBTnlJ2cslyq30KHRFSq1gxnBihYn4s=)
                          2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl
                          rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE
        Validity
            Not Before: Oct  2 18:23:17 2026 GMT
            Not After : Oct  9 18:23:17 2026 GMT
        Subject: CN=6abff695-948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:21:e2:77:9f:26:bd:3b:75:b7:5a:f1:29:
                    53:d5:8d:e2:1b:0a:30:fa:83:86:78:8b:21:e0:0f:
                    00:57:11:98:8d:01:02:d5:3c:e9:7a:20:96:31:c6:
                    13:be:64:59:b0:ea:b1:ab:41:86:69:14:17:28:bc:
                    26:2a:35:df:66:e4:ba:39:83:b0:26:ad:30:e0:00:
                    80:b1:72:cf:63:47:7d:c4:ec:3b:49:02:00:0e:3d:
                    4e:40:63:2a:f7:fc:d2:ee:56:20:47:12:41:4b:d9:
                    c9:bd:d5:e8:01:71:85:33:d9:a8:0d:b1:e1:84:32:
                    c0:93:c3:b7:5f:31:ad:df:8c:bc:de:6f:c7:49:c7:
                    13:fe:33:0b:5f:40:d0:aa:25:25:1d:1c:ba:df:73:
                    bd:3b:b4:de:01:ff:d5:99:c4:c4:37:b9:31:8e:77:
                    ba:76:d8:d3:82:ef:72:0c:28:9a:f3:a4:ab:4d:66:
                    07:12:b0:f2:30:32:b3:57:f4:05:47:1e:aa:5a:12:
                    a8:7a:fb:1e:ec:e7:58:ca:a0:28:68:6d:59:9e:c3:
                    8d:48:6b:7c:2d:00:78:87:7a:ce:b4:6a:5a:51:a9:
                    e3:f7:43:6a:c4:7e:dc:e6:76:01:8a:ca:43:de:c7:
                    4c:98:df:ef:6a:4b:d2:61:5d:0b:83:6c:22:5e:51:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:A1:11:C6:25:2F:68:2E:7F:BF:9F:10:94:E6:6F:EB:CE:A5:C6
            X509v3 Authority Key Identifier:
                keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:71:ff:42:de:5f:d2:7a:38:85:2b:25:94:b9:ae:18:4f:10:
         e9:09:13:68:b3:1c:d3:97:f4:ab:50:1d:36:7a:2c:b7:2e:c3:
         fd:03:2c:a9:21:15:5b:8a:0b:75:66:d5:d4:2c:10:09:07:0d:
         11:24:06:24:b6:13:b5:1f:ce:ad:e3:dc:62:87:64:8d:82:8b:
         ba:3a:1c:76:51:13:c1:7d:48:e2:a1:d1:05:b0:43:2f:03:d0:
         46:e5:45:41:de:74:91:a9:d3:39:c5:76:5a:31:3c:c4:03:50:
         28:3a:26:2e:2a:c9:ea:2e:1e:24:43:b7:58:ee:a8:8e:f5:c0:
         58:71:03:77:c9:76:45:9b:d5:a9:8e:a0:7c:d3:74:fb:1a:56:
         46:14:55:77:46:60:f1:01:87:7b:77:0b:eb:a1:06:fd:f7:40:
         eb:f8:61:a2:5e:d3:b8:c3:cc:ee:bf:94:67:9c:19:39:f0:47:
         56:d3:f6:81:7e:6d:a0:08:d3:74:0e:59:12:37:53:53:ac:82:
         95:5e:a5:7f:5c:86:42:23:0d:11:25:86:71:e7:6a:34:be:20:
         1f:10:ba:3b:db:20:f4:38:14:01:36:e2:3d:bf:d2:f9:78:43:
         ba:f1:a9:e1:ae:e5:0f:2f:57:0a:5e:e4:61:10:20:90:47:5e:
         c4:97:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:09 2026 by rpki-client