Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File:                     Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier:          7z1JxKeKLb0QkDKtNftX0VzjVp+EVo6scF3iegvgys0=
Subject key identifier:   98:57:29:E5:2C:F2:5F:D5:03:46:EE:A2:75:7C:65:FA:6E:FF:AC:E7
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       037C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number:          0362
Signing time:             Sun 15 Nov 2026 00:40:43 +0000
Manifest this update:     Sun 15 Nov 2026 00:40:42 +0000
Manifest next update:     Sun 22 Nov 2026 00:40:42 +0000
Files and hashes:         1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: ry2as7COCjojmiDUgCQSmrIQ5vt8paDVB09bAvQeN24=)
                          2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
                          3: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
                          4: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
                          5: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Nov 15 00:40:42 2026 GMT
            Not After : Nov 22 00:40:42 2026 GMT
        Subject: CN=6af8ff8b-93cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:ce:94:76:ee:a9:02:46:59:d3:4b:2c:8d:
                    75:b6:3d:c7:fc:64:57:08:cf:51:8f:c2:a0:18:cf:
                    92:c0:13:14:d5:41:6a:2a:e6:9c:b1:b1:0b:ac:d6:
                    69:59:3e:23:19:d9:b2:2b:fa:e8:ec:6f:67:a3:11:
                    30:80:eb:42:8f:ff:37:ea:20:ca:97:c7:e4:d2:7d:
                    54:ac:b2:2d:a2:da:17:4a:72:2a:be:67:fe:cf:b5:
                    78:d0:6f:f1:4f:94:79:fa:3b:8a:0f:e5:3b:6c:43:
                    2c:f2:6e:6e:f4:17:49:ed:c9:22:a4:35:e5:b9:5d:
                    40:7d:93:38:a4:76:0e:01:8e:9c:a8:20:a8:00:56:
                    27:2c:42:a8:0d:fb:4b:43:a9:56:99:de:ad:ed:74:
                    42:4c:e4:da:4b:74:65:ef:36:8a:03:87:cd:d4:b4:
                    7b:8e:ba:49:dd:3d:d6:8a:9b:49:39:a9:8b:e9:66:
                    a9:f4:c7:d2:00:77:3d:2f:9c:5f:73:29:40:0e:5c:
                    9d:95:e6:d0:db:a9:0d:a9:67:bf:1a:0f:88:0a:d9:
                    83:f7:0c:27:cc:97:e1:62:f1:0c:52:1d:93:91:87:
                    fc:be:1e:a3:2e:5d:6e:08:43:fd:1d:c9:72:16:93:
                    14:8c:0e:40:62:d7:7b:88:03:27:72:a2:a8:41:c1:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:57:29:E5:2C:F2:5F:D5:03:46:EE:A2:75:7C:65:FA:6E:FF:AC:E7
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:60:09:bc:aa:02:69:ef:79:5b:f1:8f:f3:4e:89:d3:e0:
         d3:15:78:fe:d9:8d:d8:68:5b:b3:45:10:1f:02:1f:25:e0:71:
         58:ca:28:21:0b:e3:80:ab:92:da:94:8a:5e:fc:7d:34:fd:16:
         8e:36:83:0d:00:28:9e:2d:61:b3:7f:87:7d:d7:0b:2d:c5:3b:
         05:b0:aa:52:5f:88:0c:44:fe:90:22:91:e7:6a:03:30:e5:3e:
         03:04:89:51:04:ef:17:7d:7e:1f:72:75:cc:fa:24:d6:d8:02:
         54:7f:2d:11:8d:68:ed:aa:e2:1a:39:2b:f1:87:5b:34:36:e1:
         a1:26:c5:85:be:de:63:e1:b1:aa:87:ab:0e:83:2e:e0:6e:4b:
         de:af:5c:bd:1f:79:37:7d:69:b6:65:2e:83:e2:6d:c6:d9:08:
         af:71:6c:cf:23:b6:eb:8a:b7:76:32:88:c1:fc:ca:54:1f:bf:
         67:09:73:50:5f:45:4e:5f:34:4b:a6:34:a5:4f:f9:d0:94:89:
         31:99:23:b6:30:27:01:17:19:e0:26:b1:c0:8c:d2:66:4b:e6:
         17:a1:c7:b6:89:ee:52:ce:0b:73:fa:8e:31:ae:1e:5b:cb:a6:
         c3:fb:35:ba:3f:c4:e1:f0:f7:93:af:8b:cf:ad:fb:fc:6c:5d:
         c3:5d:24:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4
QjA4QzI4RTEwHhcNMjYxMTE1MDA0MDQyWhcNMjYxMTIyMDA0MDQyWjAYMRYwFAYD
VQQDEw02YWY4ZmY4Yi05M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGbOlHbuqQJGWdNLLI11tj3H/GRXCM9Rj8KgGM+SwBMU1UFqKuacsbELrNZp
WT4jGdmyK/ro7G9noxEwgOtCj/836iDKl8fk0n1UrLItotoXSnIqvmf+z7V40G/x
T5R5+juKD+U7bEMs8m5u9BdJ7ckipDXluV1AfZM4pHYOAY6cqCCoAFYnLEKoDftL
Q6lWmd6t7XRCTOTaS3Rl7zaKA4fN1LR7jrpJ3T3WiptJOamL6Wap9MfSAHc9L5xf
cylADlydlebQ26kNqWe/Gg+ICtmD9wwnzJfhYvEMUh2TkYf8vh6jLl1uCEP9Hcly
FpMUjA5AYtd7iAMncqKoQcFBywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhXKeUs
8l/VA0buonV8Zfpu/6znMB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0
MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzJENy9GOTc5NTlDMjI0MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2Vk
VTlaUTVTVFI2UG1MQ01LT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGztgCbyqAmnveVvxj/NOidPg0xV4/tmN2Ghbs0UQHwIfJeBxWMooIQvjgKuS
2pSKXvx9NP0WjjaDDQAoni1hs3+HfdcLLcU7BbCqUl+IDET+kCKR52oDMOU+AwSJ
UQTvF31+H3J1zPok1tgCVH8tEY1o7ariGjkr8YdbNDbhoSbFhb7eY+GxqoerDoMu
4G5L3q9cvR95N31ptmUug+JtxtkIr3FszyO264q3djKIwfzKVB+/ZwlzUF9FTl80
S6Y0pU/50JSJMZkjtjAnARcZ4CaxwIzSZkvmF6HHtonuUs4Lc/qOMa4eW8umw/s1
uj/E4fD3k6+Lz637/Gxdw10ksg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:22:34 2026 by rpki-client