Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File:                     Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier:          R783Yb+mZV0UxNr0L30AbNB1DVw0wx4167lrhUlhjwc=
Subject key identifier:   0B:1F:16:7D:C8:C8:7F:A8:0D:83:17:1D:50:6E:6B:0E:DB:48:F7:5E
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number:          08CA
Signing time:             Tue 22 Sep 2026 20:13:37 +0000
Manifest this update:     Tue 22 Sep 2026 20:13:36 +0000
Manifest next update:     Tue 29 Sep 2026 20:13:36 +0000
Files and hashes:         1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: bCWy/lZzjIF6P4326dPuWIAPg6vtst6yZyEzJvvQpVk=)
                          2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: Oq5n7YTpwRwxE6QPyxWPtqKwDnI0oieXsSLQCrD8sXk=)
                          3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: FHMJGrrxUvRBeY9Ihx5SI/go/dc2sMa74hHT1NwYti8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Sep 22 20:13:36 2026 GMT
            Not After : Sep 29 20:13:36 2026 GMT
        Subject: CN=6ab2e171-acb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:47:f6:0a:b9:44:9d:9c:8e:23:2f:4c:6d:
                    f3:51:c7:7f:0e:39:9e:71:11:e6:1e:71:70:77:cb:
                    eb:32:40:66:f0:df:c5:db:d5:84:ae:37:88:79:65:
                    72:42:bc:68:b3:95:3e:98:3f:94:9b:1d:79:4e:bb:
                    13:85:60:5f:79:55:ae:ae:04:6e:5e:5b:6e:a8:eb:
                    53:c3:91:76:4d:25:63:fb:2a:64:2a:33:32:99:70:
                    f5:12:74:97:97:0c:c3:5d:63:43:dc:48:52:30:99:
                    fa:6c:65:62:35:f5:5c:07:c2:4d:8d:98:a0:56:bc:
                    75:2b:8f:ed:c7:76:10:8a:bc:25:06:cc:0a:d0:6c:
                    0f:b2:af:2a:e8:0f:0d:f6:6d:69:31:48:f3:e1:f3:
                    cb:8f:2f:12:a5:10:71:e5:ae:85:5a:cc:b8:7d:11:
                    ed:ca:b4:31:ae:a2:2c:69:a6:6b:9e:42:7e:ab:98:
                    46:46:dc:81:f4:93:8f:dc:74:7a:48:92:59:2a:a5:
                    cd:c2:42:c7:95:87:c0:4b:45:b7:e7:e8:5b:aa:cd:
                    a4:21:d5:fe:4f:43:73:a5:d4:d0:50:6e:c3:99:15:
                    8c:bf:99:56:b9:4f:f3:b1:31:69:e3:f8:14:66:76:
                    7e:1b:74:e6:dd:7b:22:14:ef:f9:f4:42:2a:0d:7a:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1F:16:7D:C8:C8:7F:A8:0D:83:17:1D:50:6E:6B:0E:DB:48:F7:5E
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:c8:00:46:24:38:23:70:41:a9:93:78:cc:b3:5e:d3:e4:
         32:ee:b9:07:16:b8:25:e7:ce:f2:01:74:1c:2e:66:21:85:03:
         50:2a:e3:35:e0:12:27:ca:50:7a:bd:76:73:fa:11:5b:d5:fd:
         f3:61:57:de:0b:49:0a:6d:57:69:9b:5b:a1:ef:38:a5:3c:c6:
         de:9b:26:12:fe:d6:43:36:21:53:42:49:73:0c:99:0f:bd:be:
         e6:e7:f4:db:8e:d1:95:bf:00:6e:86:b3:81:5a:b2:6c:82:63:
         90:c7:98:b6:92:c0:6a:6e:3b:d8:f6:3e:76:83:41:0b:2d:06:
         71:5b:20:8f:f8:73:24:c1:2f:de:29:ec:cc:09:d2:a8:76:bc:
         80:a8:e0:43:fb:88:9c:e1:d9:9b:82:64:63:0c:16:12:07:1e:
         87:1c:31:7e:b7:1f:44:a6:60:32:fb:4d:17:94:44:25:47:26:
         2d:97:ec:f8:05:03:1d:6e:96:8c:d7:55:88:24:85:51:d6:6c:
         b3:bb:ec:a4:57:13:f8:62:f6:c3:2f:5c:ae:c9:44:e2:95:ef:
         23:ef:c5:2e:9b:45:62:b5:5e:b2:7f:c2:b8:cb:99:fc:d2:4a:
         2a:08:cf:a1:3c:5d:c7:09:9e:93:7c:03:4f:ca:d9:e6:66:b2:
         3b:41:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:11:45 2026 by rpki-client