Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File:                     Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier:          cagmLG/nvs9Pjof3/cKi87AcMbg8qU4LGDq6+M0vyfc=
Subject key identifier:   BD:65:45:27:58:D0:C0:1C:3A:B2:2E:72:58:E6:E0:10:0A:EC:0C:8A
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       3632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number:          35C5
Signing time:             Thu 24 Sep 2026 14:17:00 +0000
Manifest this update:     Thu 24 Sep 2026 14:17:00 +0000
Manifest next update:     Thu 01 Oct 2026 14:17:00 +0000
Files and hashes:         1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: 8ALQenLGFzboJDbgtn0OlPhTiw0d9iYjW9/0S/vig2E=)
                          2: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
                          3: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
                          4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13874 (0x3632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Sep 24 14:17:00 2026 GMT
            Not After : Oct  1 14:17:00 2026 GMT
        Subject: CN=6ab530dc-d4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:ad:af:54:ed:34:55:14:ce:77:a7:6d:c6:
                    85:5e:9a:2e:c9:dc:c4:12:20:9a:84:1a:f5:57:a1:
                    6f:2b:a2:73:70:84:b0:4b:3f:a6:82:f0:82:dc:34:
                    7f:d2:96:bf:1f:43:4e:bc:a8:04:bd:bd:66:6b:90:
                    d5:d4:c8:ec:87:ef:47:57:e7:42:5d:8e:c7:8f:c6:
                    98:e7:a5:bf:60:53:0c:57:8c:65:4c:8f:e0:77:9b:
                    02:a3:83:16:82:49:84:db:4e:67:84:64:17:99:70:
                    27:8b:ef:5a:47:b0:48:ce:25:d4:54:2a:98:37:dc:
                    51:c6:81:a6:b2:da:4e:19:5e:8e:a2:5c:c5:5e:a0:
                    af:7b:a5:2e:90:73:78:ec:f4:eb:1e:19:aa:85:3f:
                    c4:9c:c1:98:ec:cf:0d:28:2a:3c:03:80:8b:84:aa:
                    2a:9c:b9:30:42:43:8e:ea:de:45:70:1c:07:f6:96:
                    7b:7e:7f:f3:5c:3e:46:33:b1:e5:4d:a0:1e:71:f9:
                    45:02:a5:cf:4e:e0:ee:77:df:97:44:21:44:2e:98:
                    bc:16:c0:05:08:35:22:b6:e5:f8:b5:de:e5:86:7e:
                    3d:68:27:26:24:83:9e:d9:7f:ed:8c:d8:e7:24:41:
                    84:47:6b:b8:5f:95:c3:8d:fe:13:56:14:ce:58:f9:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:65:45:27:58:D0:C0:1C:3A:B2:2E:72:58:E6:E0:10:0A:EC:0C:8A
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3d:1e:96:88:80:3f:0d:4c:35:20:f3:12:06:81:30:be:42:
         dc:10:be:47:82:d2:00:cf:83:35:9a:8d:eb:e5:da:9d:e3:50:
         e7:e3:5a:04:74:15:e6:08:7e:9e:91:f5:33:6d:a3:94:54:fa:
         25:26:00:5a:01:c4:06:29:1c:ab:a3:72:3a:04:e6:3b:d0:49:
         8b:ea:69:84:22:3d:52:50:91:0e:0e:4c:f8:d0:71:dc:36:89:
         ef:f7:41:2f:fe:f3:03:27:00:07:95:c2:29:36:fb:6d:a8:da:
         fa:ac:49:db:97:fa:b8:41:8f:be:8c:7f:d4:73:38:d3:02:83:
         09:94:25:fb:40:36:18:35:51:a6:ed:ea:36:ca:e3:71:f9:78:
         1f:f6:d2:47:90:c5:45:8a:54:b2:93:a3:dc:52:9c:5c:56:89:
         6c:bf:3d:f3:65:c8:f4:86:f0:ad:2f:05:30:e9:90:49:d7:18:
         a6:b7:9a:e8:94:54:b9:67:ca:1c:c3:52:08:ff:4f:94:02:11:
         13:1c:12:14:06:d8:2e:1f:4b:85:e8:c7:36:51:b6:09:5b:54:
         6c:94:0f:ea:e1:1b:78:0a:69:0f:4e:03:bc:f6:12:2c:1d:5b:
         fd:df:2a:10:f3:33:ba:90:5c:84:35:f9:31:dc:1e:63:f2:c3:
         b8:44:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:35:21 2026 by rpki-client