Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File:                     tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier:          T5B7aSHX+AIEpUMvk/IMPI61ExsgEScN9xa9a03Vfdk=
Subject key identifier:   9B:A8:57:42:1A:CE:E1:D6:28:5B:F3:8E:FF:B0:E5:9F:3F:0B:6D:B5
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer:       /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial:       054F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number:          0546
Signing time:             Thu 24 Sep 2026 23:19:35 +0000
Manifest this update:     Thu 24 Sep 2026 23:19:34 +0000
Manifest next update:     Thu 01 Oct 2026 23:19:34 +0000
Files and hashes:         1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: siMYP0Au05BNToCZSMIblxKU7BpfDSF01N3dZVG/59Q=)
                          2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: IckI08GnWY7VkqyIQpUbqPFyMQQDG/IZLaBCKjOdxWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
        Validity
            Not Before: Sep 24 23:19:34 2026 GMT
            Not After : Oct  1 23:19:34 2026 GMT
        Subject: CN=6ab5b006-62e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:79:f2:ce:65:91:59:47:96:af:3f:26:61:
                    1a:35:a4:7f:3f:b1:bd:a0:f1:fb:ec:ef:6c:03:dd:
                    5c:b4:ac:aa:7a:8f:91:a5:37:73:37:72:d0:91:1a:
                    2d:a3:93:06:ab:77:9a:2c:33:a5:6c:66:4b:c8:f1:
                    57:72:56:60:93:1b:89:75:2e:97:54:5b:20:a9:85:
                    c2:08:a3:6e:5b:0e:82:cd:2f:82:44:8a:2c:48:38:
                    7e:50:3d:b8:5b:f4:4a:bc:a6:5b:14:c6:38:3c:e9:
                    03:27:56:a0:dd:f0:2f:fd:80:14:78:40:8c:3c:aa:
                    41:a4:cb:e3:17:31:1b:10:96:28:b5:a3:8c:11:19:
                    f7:43:26:b8:79:ab:8a:47:73:59:53:85:27:9c:e8:
                    ca:30:3b:66:94:73:57:15:7f:eb:5b:b8:19:27:f0:
                    7b:66:96:c9:a1:70:a2:9e:92:ae:36:c9:aa:8b:22:
                    b6:ec:0d:88:df:8c:36:11:db:93:46:42:b8:08:5c:
                    4f:17:91:71:80:70:93:84:d3:b5:5d:e2:b3:73:55:
                    8d:2b:db:e2:d4:14:54:25:9f:44:34:fc:0c:a2:6d:
                    f0:e4:1f:ee:42:d5:21:43:5c:96:57:c7:af:db:b7:
                    70:6d:5e:60:dd:99:dd:df:47:4d:e1:6a:e4:fd:5b:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A8:57:42:1A:CE:E1:D6:28:5B:F3:8E:FF:B0:E5:9F:3F:0B:6D:B5
            X509v3 Authority Key Identifier:
                keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:19:36:a1:ed:26:61:0a:72:e9:3b:cc:82:9a:b4:8b:89:cb:
         cb:bd:2b:0e:76:99:32:3e:92:37:fe:69:d3:d2:19:e6:0a:88:
         20:10:22:85:c8:4c:07:fe:1a:5b:7a:fe:b9:db:d3:6a:e1:bd:
         cd:28:79:b3:30:e6:27:1c:9a:54:1c:c9:62:78:6e:f7:2c:45:
         c7:3c:69:f9:b3:a7:ff:74:7d:27:69:47:26:e6:79:b2:2f:cb:
         b6:d1:33:15:01:d0:07:f8:11:0b:c4:0c:2b:1e:b7:3a:ee:18:
         af:40:a2:37:c9:d4:5d:95:71:26:5f:43:e2:af:d5:39:93:22:
         c0:cb:ae:19:68:a6:b9:9d:57:09:ba:53:ba:9d:71:b4:1b:2e:
         c8:4b:95:39:f1:09:77:67:60:a4:c0:88:11:c0:5b:10:58:7a:
         10:cd:f8:f7:67:d9:5b:86:1b:b6:ce:e6:a3:cf:f3:18:e5:84:
         e4:73:25:82:b2:7b:7a:ce:1f:cf:97:87:32:47:f3:c0:9f:90:
         23:62:7d:ea:8a:74:ff:88:6c:ec:bd:4f:66:a5:46:9f:3e:75:
         52:8e:fe:f1:9b:87:51:5a:e4:cd:bb:9f:e6:7c:f8:36:9e:92:
         80:0c:1f:d9:7c:e0:2e:e6:24:8e:c1:f1:86:91:27:f7:c0:71:
         56:5d:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:05 2026 by rpki-client