Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File:                     TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier:          2E1nLgeiwXzVZP7V/beMd2V71NjgfTctOIu2hS1+I4g=
Subject key identifier:   72:69:90:0F:5C:3A:4F:B5:CC:93:B9:DC:3F:8A:69:61:D9:69:25:0D
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number:          0AB4
Signing time:             Wed 28 Oct 2026 22:21:34 +0000
Manifest this update:     Wed 28 Oct 2026 22:21:33 +0000
Manifest next update:     Wed 04 Nov 2026 22:21:33 +0000
Files and hashes:         1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: Loxmxvydv7pAHHvcRCoT1QN2x2rq8JPmcDbT6XruQQk=)
                          2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: xGANVjy2VvXNk071/ARO9hOsZlt0dX8oI6u/EpvRYNA=)
                          3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: mD0truY139TasISWyGrYu2Hz7EW2kY2oOZUl6qnCEFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 22:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Oct 28 22:21:33 2026 GMT
            Not After : Nov  4 22:21:33 2026 GMT
        Subject: CN=6ae2756d-36d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:65:fc:1f:b7:2e:d0:03:f2:23:78:da:34:
                    a2:0e:91:c5:91:27:06:6f:a2:99:4e:63:4d:f7:49:
                    bb:84:9d:15:bd:ea:cc:87:e6:48:7a:04:12:33:2e:
                    b7:36:56:b0:5c:06:02:73:6b:f7:29:88:1e:a0:f9:
                    d2:a2:65:f7:3c:19:91:ae:69:b5:dd:ae:d9:5f:f7:
                    46:59:7b:7a:25:68:a9:5d:84:fd:90:c7:cb:a8:d6:
                    fb:cf:74:50:d4:c1:28:df:1e:8b:63:80:83:f3:24:
                    52:b1:0a:b7:76:36:0b:70:74:94:8e:07:8c:fd:59:
                    1c:6e:11:10:4c:0f:24:37:02:7d:ee:05:c8:b5:5d:
                    b4:4a:e1:df:0a:49:82:eb:97:f4:e2:65:b7:ce:0d:
                    4a:05:3c:4a:be:44:40:77:32:12:96:ab:08:e6:56:
                    75:31:d8:ec:53:90:7a:74:40:00:02:56:76:c1:12:
                    a8:36:5b:e2:5f:f0:f2:a1:df:d3:ce:42:11:07:3c:
                    d7:99:71:e7:9e:a6:ce:07:4b:50:a2:a1:93:80:82:
                    e0:44:7e:81:0a:a0:88:eb:68:36:b3:a7:08:87:08:
                    9e:98:81:0e:30:46:34:e7:ba:bf:1b:db:ac:4b:61:
                    61:f1:e6:f5:86:78:34:37:20:9d:4c:e5:70:e1:26:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:69:90:0F:5C:3A:4F:B5:CC:93:B9:DC:3F:8A:69:61:D9:69:25:0D
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:7f:90:63:ca:12:7b:45:d5:55:29:0b:cc:5f:1f:61:ae:
         5a:5e:da:eb:99:90:52:75:68:dd:2c:44:cb:14:32:aa:a8:df:
         8d:64:84:53:a6:00:87:8a:e4:bf:b4:0d:17:c6:3e:1a:59:74:
         2e:b5:cb:fb:05:37:16:f0:ea:8f:1c:f2:2f:36:62:d1:a2:44:
         84:4e:a3:3c:89:75:48:d5:7e:45:86:8d:f2:85:26:9b:02:20:
         3f:75:66:33:9c:e3:60:8c:00:31:85:55:ec:9f:15:10:00:40:
         4c:41:dd:48:80:7d:cd:34:42:85:35:24:23:9f:fd:f4:fd:a0:
         46:73:5f:15:36:06:41:f0:c3:ea:24:42:40:ea:fd:25:0e:99:
         8a:2f:a2:0c:4d:f7:5e:12:e0:33:2a:41:81:44:e8:f8:08:7f:
         f8:b1:03:b5:b8:6c:fc:36:6e:e7:f0:a6:26:70:4c:b0:fb:d4:
         b8:6e:45:1d:d9:1d:f3:04:06:50:61:d9:5c:28:b2:07:37:40:
         50:ac:d5:03:c0:44:b2:2f:08:22:9b:58:48:4a:20:a4:24:ed:
         dc:49:b3:38:b3:cd:24:2f:ca:3f:b7:5d:5d:fe:5f:b6:51:92:
         46:14:20:39:f0:8b:00:fb:01:aa:39:47:cc:00:6b:69:6c:f5:
         10:11:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:06:41 2026 by rpki-client