Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File:                     TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier:          EfCMr9X4PlCkRFz6Z88Ln8KmfPh0Plp9Ts7mYumD89o=
Subject key identifier:   02:00:8C:C2:41:75:F3:FA:75:05:E0:2F:63:ED:C7:B9:BD:BD:6C:FB
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer:       /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial:       0C12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number:          0BFB
Signing time:             Thu 24 Sep 2026 18:53:56 +0000
Manifest this update:     Thu 24 Sep 2026 18:53:55 +0000
Manifest next update:     Thu 01 Oct 2026 18:53:55 +0000
Files and hashes:         1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: k/gituwM0X+1ad42lp7GB/3peKcMJQSTU1lFr1ITOvk=)
                          2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: 1Rl4AWS27tXktsB4oZ9/cQrbDdYUzTGKNR1jiXI3rWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
                          rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3090 (0xc12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
        Validity
            Not Before: Sep 24 18:53:55 2026 GMT
            Not After : Oct  1 18:53:55 2026 GMT
        Subject: CN=6ab571c4-45cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:39:ef:dc:73:0f:6c:05:cc:e5:d0:9c:4f:88:
                    52:97:8f:b7:b4:59:e2:8f:fb:e0:e1:98:68:1b:34:
                    2f:ff:c5:b6:6f:9a:79:ac:6d:46:7f:4b:59:65:7f:
                    35:9a:10:b5:43:06:69:8c:80:d3:40:ac:e0:58:06:
                    2d:88:a4:02:62:fd:83:17:6b:17:f6:b6:1f:e6:d0:
                    a0:84:36:e3:85:65:5a:e3:b7:9a:93:2c:4b:26:bb:
                    6b:d3:8a:0e:f5:ae:ac:81:e5:7b:d9:4e:0f:f2:7a:
                    37:78:10:df:43:22:58:5e:a0:f2:16:af:38:0e:27:
                    42:b9:e2:f7:42:70:c6:10:6a:c9:9d:3c:9e:24:f5:
                    9e:10:5b:fc:88:b9:0b:aa:56:7b:a4:ad:68:3a:14:
                    c4:90:d1:c1:75:2c:58:80:ae:eb:08:dc:f5:35:e8:
                    e4:ce:e4:c8:a4:8c:2b:11:1a:64:a1:2d:e5:c1:c3:
                    75:1c:49:7c:e0:6b:ec:75:16:4f:bc:07:47:d9:93:
                    4a:ab:ee:30:74:22:c6:aa:63:2f:1c:d3:7c:d8:e4:
                    6c:e2:a9:16:cc:ae:02:d0:ae:49:7b:a4:d5:27:a3:
                    75:25:7b:64:9a:4e:45:bb:e3:7a:a4:92:13:a3:ad:
                    9a:02:5e:31:2f:d2:43:0a:05:f7:98:45:a5:50:3e:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:00:8C:C2:41:75:F3:FA:75:05:E0:2F:63:ED:C7:B9:BD:BD:6C:FB
            X509v3 Authority Key Identifier:
                keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:f9:9c:b1:56:94:e2:7a:f7:08:dc:01:b1:f2:1b:13:b1:
         b1:ec:d3:49:8a:eb:8f:22:70:52:47:fa:06:5a:cc:f1:92:ca:
         ec:0b:67:61:8e:f7:93:02:0d:66:13:bd:55:d8:3b:a0:db:71:
         19:82:9a:2f:39:62:72:33:ad:93:92:b0:ae:c2:43:84:41:95:
         9d:16:12:24:b2:a6:23:54:3c:48:9f:15:56:31:82:a5:45:4a:
         3f:91:7b:7c:d0:2b:01:c5:f4:45:bb:d8:28:08:84:d5:d4:df:
         68:20:b8:b3:84:cb:68:a4:e3:54:e1:b6:de:f9:bd:57:87:ca:
         da:9d:fb:6d:41:c7:4a:ad:14:e1:aa:85:c3:a4:c8:16:5f:aa:
         3a:30:23:48:ef:4d:53:11:2c:2e:1a:3c:0a:90:17:13:84:4c:
         f2:43:f5:d9:c9:35:b7:a9:ad:1c:b9:8c:10:97:70:fc:7a:6c:
         e1:1e:ac:97:27:d7:99:a6:fc:0a:9f:ad:11:1a:13:87:51:73:
         12:b4:a7:93:92:9e:d4:79:be:15:08:05:0a:0c:e5:ca:09:fb:
         8b:01:97:67:68:b1:61:c7:fb:c5:4e:24:43:8a:16:57:f9:f8:
         b5:3b:b2:3d:f4:61:6f:7b:76:83:b4:47:23:76:e4:7e:26:bd:
         8b:c7:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:24:47 2026 by rpki-client