Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File:                     tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier:          t3GPYVUDsgka8NDgWUlKrf8Uw7WQESbTeomn2C1eKzY=
Subject key identifier:   0A:C4:5E:E1:0A:6B:35:B4:D9:DF:F9:8B:FA:0B:5C:5D:1E:73:42:B8
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer:       /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial:       03E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number:          03E0
Signing time:             Sun 15 Nov 2026 00:14:57 +0000
Manifest this update:     Sun 15 Nov 2026 00:14:56 +0000
Manifest next update:     Sun 22 Nov 2026 00:14:56 +0000
Files and hashes:         1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: CINkMfbuekpBohob31IY+Kl8phx0TBoAwpICaNzSz4g=)
                          2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
                          rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
        Validity
            Not Before: Nov 15 00:14:56 2026 GMT
            Not After : Nov 22 00:14:56 2026 GMT
        Subject: CN=6af8f981-1694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:6a:31:10:f5:8e:68:9c:0e:9b:8c:02:ce:
                    2e:34:d2:66:f9:dc:d6:47:f0:44:1b:1c:fc:e8:ef:
                    94:c7:42:c0:4d:a0:6a:a3:f7:e9:5c:c0:d2:76:97:
                    75:eb:e1:fa:ab:67:cc:f9:ec:0d:6f:61:5c:82:59:
                    53:38:4e:96:8b:9b:b8:0c:e0:b6:de:d9:78:c9:61:
                    ec:54:68:ae:28:bb:6f:cb:c5:9c:72:26:f6:76:c7:
                    46:49:00:dc:c6:cb:9d:bd:7a:00:98:9b:51:92:2a:
                    70:d1:10:ec:14:e1:97:31:ec:44:47:a6:83:c4:e2:
                    55:78:c6:a9:7f:c9:94:b9:a5:b6:75:20:86:88:fa:
                    96:38:7d:3e:0d:01:6b:25:04:e3:11:e4:d9:b8:cf:
                    88:85:bd:99:30:15:4b:1b:58:1c:79:9b:c2:c8:19:
                    1f:d7:dd:01:ad:d4:c1:0a:03:01:b2:6e:9f:80:d9:
                    c3:cf:45:8f:cd:93:c1:47:88:d7:5c:20:99:c0:00:
                    57:d7:cf:df:23:25:a9:71:b0:61:71:a5:39:01:5c:
                    89:3f:22:55:b7:79:3b:16:75:c5:93:a9:4c:cc:da:
                    8b:53:58:88:f3:ab:70:43:4d:fa:78:b3:68:75:96:
                    6c:d8:bf:a5:fb:89:87:b8:68:3d:f7:b5:88:cf:1c:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C4:5E:E1:0A:6B:35:B4:D9:DF:F9:8B:FA:0B:5C:5D:1E:73:42:B8
            X509v3 Authority Key Identifier:
                keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:a1:67:4f:40:dc:3d:bd:84:d5:47:bf:79:67:41:83:48:
         9f:dc:6d:4c:e9:19:e6:4e:2d:d6:10:91:c5:6b:ca:0c:71:45:
         02:bc:34:43:1f:82:82:09:ab:cf:c1:bb:2c:ac:8f:cd:dd:68:
         35:f4:a7:3e:56:09:7b:d5:02:05:c3:76:33:dc:bd:b7:16:01:
         4d:fa:c4:57:26:eb:63:ee:df:86:8d:5b:a5:0e:fe:31:2e:2e:
         35:31:19:b9:5f:c1:5e:e8:6b:9a:5d:cb:c3:fe:f4:ed:2f:0d:
         8c:87:ba:0b:87:60:14:1e:d1:e9:f8:f5:b2:c7:25:05:66:01:
         77:a0:e0:d5:25:7d:05:dc:e8:3f:25:49:57:5b:5d:e0:6c:b5:
         ca:a8:03:7a:29:d7:49:3a:af:aa:17:41:8e:05:12:f3:cd:07:
         58:3e:1a:a1:bb:e8:a3:2f:a1:85:09:5b:16:8b:bc:00:e4:56:
         e2:38:0c:3c:54:44:c0:3f:4f:9a:be:f5:3a:5f:c1:ad:7d:3f:
         b1:0b:fb:66:88:4d:f0:e1:9e:55:7b:22:90:8c:21:4d:ad:8c:
         57:de:66:cf:c9:1b:a1:6f:60:84:d8:ce:fd:48:72:20:20:01:
         36:86:5b:56:96:f0:d5:12:c4:b2:ae:5e:17:9a:2f:a1:50:f6:
         2a:47:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:29 2026 by rpki-client