Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          RkBr2/5fIfTk8K/vaLrXlsYcmdX4t6JMqw4h/sYHTgs=
Subject key identifier:   91:C6:37:B7:4A:46:A9:6C:28:0A:B8:EC:03:28:5C:7B:43:08:DC:02
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          0141
Signing time:             Fri 25 Sep 2026 05:31:31 +0000
Manifest this update:     Fri 25 Sep 2026 05:31:30 +0000
Manifest next update:     Fri 02 Oct 2026 05:31:30 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: +FIkb1UpuvTJuga8dID6S8ZqWO2H6KxwByUwlf4CwLM=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Sep 25 05:31:30 2026 GMT
            Not After : Oct  2 05:31:30 2026 GMT
        Subject: CN=6ab60732-68cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:3c:9d:0b:78:0d:eb:65:24:0d:56:d1:82:
                    b0:bb:5e:48:85:96:61:78:e2:15:65:23:3b:46:9e:
                    f0:91:2c:27:36:1e:a6:06:aa:ce:40:78:c9:c9:70:
                    95:34:dd:4a:53:20:ca:53:9b:d2:24:bb:c8:1f:da:
                    53:b3:3a:94:9b:bc:c3:de:0b:f7:b2:f4:2b:7c:05:
                    6f:eb:4d:21:64:6d:88:d6:53:2f:77:53:bc:4d:60:
                    f7:90:6e:c8:11:26:b0:df:d0:9b:66:3a:c3:8f:16:
                    1e:83:34:1c:76:b3:63:8c:79:43:ab:17:77:85:32:
                    81:91:d6:35:be:54:e0:70:7a:d8:33:34:cc:9d:9b:
                    5f:2d:ad:4a:2d:68:79:65:c5:ab:c0:14:6f:44:89:
                    89:98:34:1c:1b:2c:56:6e:9e:f9:a5:ed:19:66:6c:
                    39:bb:10:d1:bd:c2:44:4b:75:de:a0:e9:08:6f:16:
                    2b:d3:aa:85:19:ee:6a:e4:b7:09:f9:26:8f:4b:85:
                    d3:c5:68:fa:03:16:aa:72:ca:f6:ba:81:2f:0f:c0:
                    87:c7:d8:5e:21:00:85:e1:e5:0d:97:ae:79:36:b1:
                    3a:fd:82:b1:29:ab:06:c5:e7:f0:76:a5:8a:69:bc:
                    46:97:fd:93:be:a2:5c:23:05:79:88:07:97:7c:3f:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:37:B7:4A:46:A9:6C:28:0A:B8:EC:03:28:5C:7B:43:08:DC:02
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:46:7d:4f:b3:41:2b:16:15:db:33:eb:06:5b:ae:00:35:18:
         58:42:65:1c:46:b1:8d:0b:5d:fa:09:4f:03:9f:d8:1f:b1:b9:
         75:53:c6:76:9d:a9:4a:09:56:23:a9:8e:69:dc:76:fe:72:a1:
         61:5c:d0:82:e6:fa:23:39:91:19:56:fc:20:e1:b3:64:57:41:
         26:7f:08:d4:22:49:15:22:66:d7:76:61:25:6f:49:25:3d:31:
         45:0a:c6:aa:aa:ee:ef:26:bd:17:51:56:d7:0e:ca:4c:c1:03:
         f8:06:88:97:e1:b4:d9:ee:92:ad:ff:12:2c:39:d2:b7:f5:96:
         61:b4:67:11:64:ab:7b:43:56:ca:55:94:f6:49:b2:06:1b:f7:
         5f:3b:f5:3a:89:b3:70:e9:8d:22:6a:db:14:5a:68:7b:06:2e:
         fe:c0:c4:3e:ea:c2:57:cd:c1:62:7e:ab:f8:cc:11:ec:6b:61:
         f0:72:d6:5d:10:ac:dd:8e:13:87:0e:62:a4:27:1d:42:3f:a7:
         9e:25:71:55:f3:7a:c1:34:4d:23:bb:e0:cb:f7:6b:f8:be:1d:
         43:37:d8:bb:cf:6c:1f:20:9b:06:0b:44:62:84:46:47:1a:4e:
         b3:64:5b:cd:3a:57:38:9e:f6:07:da:b8:8a:cc:b9:2c:c4:7d:
         5f:1b:53:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU2NjAxMTAvBgNVBAUTKDRDQjBCOTVCNEJEQzIzMzE0RjI4M0VGNzM5QTk2QTdD
NjU4QzBBNkMwHhcNMjYwOTI1MDUzMTMwWhcNMjYxMDAyMDUzMTMwWjAYMRYwFAYD
VQQDEw02YWI2MDczMi02OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzR48nQt4DetlJA1W0YKwu15IhZZheOIVZSM7Rp7wkSwnNh6mBqrOQHjJyXCV
NN1KUyDKU5vSJLvIH9pTszqUm7zD3gv3svQrfAVv600hZG2I1lMvd1O8TWD3kG7I
ESaw39CbZjrDjxYegzQcdrNjjHlDqxd3hTKBkdY1vlTgcHrYMzTMnZtfLa1KLWh5
ZcWrwBRvRImJmDQcGyxWbp75pe0ZZmw5uxDRvcJES3XeoOkIbxYr06qFGe5q5LcJ
+SaPS4XTxWj6Axaqcsr2uoEvD8CHx9heIQCF4eUNl655NrE6/YKxKasGxefwdqWK
abxGl/2TvqJcIwV5iAeXfD+J/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHGN7dK
RqlsKAq47AMoXHtDCNwCMB8GA1UdIwQYMBaAFEywuVtL3CMxTyg+9zmpanxljAps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY2MC8wMUM1MkEzMEQy
NDMxMUVGODhDNUJDMTFDNEY5QUUwMi9UTEM1VzB2Y0l6RlBLRDczT2FscWZHV01D
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RMQzVXMHZjSXpGUEtENzNPYWxxZkdXTUNtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTY2MC8wMUM1MkEzMEQyNDMxMUVGODhDNUJDMTFDNEY5QUUwMi9UTEM1VzB2Y0l6
RlBLRDczT2FscWZHV01DbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGEZ9T7NBKxYV2zPrBluuADUYWEJlHEaxjQtd+glPA5/YH7G5dVPGdp2pSglW
I6mOadx2/nKhYVzQgub6IzmRGVb8IOGzZFdBJn8I1CJJFSJm13ZhJW9JJT0xRQrG
qqru7ya9F1FW1w7KTMED+AaIl+G02e6Srf8SLDnSt/WWYbRnEWSre0NWylWU9kmy
Bhv3Xzv1OomzcOmNImrbFFpoewYu/sDEPurCV83BYn6r+MwR7Gth8HLWXRCs3Y4T
hw5ipCcdQj+nniVxVfN6wTRNI7vgy/dr+L4dQzfYu89sHyCbBgtEYoRGRxpOs2Rb
zTpXOJ72B9q4isy5LMR9XxtT5A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:39:04 2026 by rpki-client