Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
File:                     tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json)
Hash identifier:          BEWxIPWIFH//m8L3UzVjRvMUmgT/LS4oUFTPB9mf1m8=
Subject key identifier:   DA:C5:B8:61:6B:15:78:C7:23:F7:F2:67:97:47:31:32:04:25:BD:47
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Certificate issuer:       /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial:       09C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
Manifest number:          09B8
Signing time:             Tue 22 Sep 2026 19:44:57 +0000
Manifest this update:     Tue 22 Sep 2026 19:44:56 +0000
Manifest next update:     Tue 29 Sep 2026 19:44:56 +0000
Files and hashes:         1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: LDI5263kjVIx+UjTB7ym0NuYzhLBVdV6BsR0KoPNIvI=)
                          2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: 71wvUZohybkMpQ5pQ3qkNpzHhHvkpv7S66m77LouPv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
                          rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2500 (0x9c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
        Validity
            Not Before: Sep 22 19:44:56 2026 GMT
            Not After : Sep 29 19:44:56 2026 GMT
        Subject: CN=6ab2dab8-a8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:db:a9:9e:9e:60:f4:de:df:3e:43:da:f5:
                    26:d8:07:c3:86:41:6a:5a:f2:7f:46:ee:3f:14:1f:
                    33:36:0a:b0:fd:f1:81:1d:65:21:e3:10:0d:e8:9e:
                    f2:19:21:e2:d0:59:4e:01:e7:4a:eb:38:16:73:36:
                    76:a1:4d:4f:7d:39:ba:c3:51:19:60:42:52:95:b1:
                    10:b6:61:0f:81:84:bb:c9:1b:f6:5d:66:47:37:ad:
                    47:46:d0:a6:7c:71:16:c4:f5:12:10:56:10:30:45:
                    19:f8:46:72:1d:28:07:3b:48:4e:01:8b:05:dd:fc:
                    e4:59:9b:e3:3a:88:f9:f5:e6:92:33:e9:97:8b:d2:
                    df:6b:3f:a5:b0:7b:95:20:8b:f2:e0:cf:1c:d6:77:
                    8f:52:f8:45:1f:73:f6:39:0c:63:e9:ed:e3:61:5d:
                    83:ef:e3:c3:54:34:f2:08:6b:ae:ec:b1:8d:6f:78:
                    75:c1:58:40:fc:39:dc:74:4f:55:51:ea:38:15:ac:
                    84:75:e2:b6:35:ac:10:92:3b:73:4b:3b:43:8f:56:
                    00:8f:5f:c2:93:ea:6e:0c:03:b7:b8:a2:51:98:c8:
                    c7:d7:c6:e3:05:31:a0:9f:4d:8f:b6:08:48:91:e6:
                    43:e4:35:7f:2c:e4:77:95:64:fc:c5:99:27:bd:93:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C5:B8:61:6B:15:78:C7:23:F7:F2:67:97:47:31:32:04:25:BD:47
            X509v3 Authority Key Identifier:
                keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:55:63:31:d9:66:71:f3:ab:26:31:08:9b:26:ba:ca:3f:ea:
         b8:82:45:a5:bb:44:c8:60:22:e9:25:73:99:b8:79:83:36:0d:
         d6:f6:7c:87:e0:6f:32:4d:ce:15:fa:f5:95:39:f9:1a:e3:c9:
         a3:ef:0a:54:20:5b:63:ed:fb:6b:bd:bb:96:53:e1:4b:bb:3b:
         77:40:8e:bc:c2:4a:7c:e1:96:9c:aa:a7:e8:5e:2d:e0:4f:ca:
         78:83:20:5f:b3:2f:75:b5:e0:7e:7f:84:f7:4c:51:b1:23:e2:
         c7:43:43:76:e6:0e:a2:d1:ed:19:47:8d:57:49:ba:20:eb:07:
         90:7d:ce:ac:07:7b:02:e8:37:44:a2:87:8d:7b:53:4c:da:ab:
         dd:fe:03:7c:9d:50:33:3d:18:96:98:fd:94:bf:06:55:7a:b6:
         9d:eb:60:9f:63:e5:b9:1c:14:2a:46:aa:66:bc:16:d4:83:e7:
         34:3b:35:3d:58:8c:f1:cb:4f:fa:80:77:b4:67:70:dd:8f:f6:
         e1:f2:60:89:7c:c1:5e:e9:eb:7c:e4:54:48:a7:52:f1:3f:59:
         6f:f2:78:36:a1:e9:ea:36:7c:08:01:e6:34:07:76:b9:b1:55:
         81:ea:f5:a9:97:ca:54:e1:e1:22:a1:6a:64:b3:96:29:bb:1b:
         cc:94:26:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:43:49 2026 by rpki-client