Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File:                     TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier:          FLwcIcPGK/8Z96iPH95i4EkadMwaM1N2m0p9im/co7s=
Subject key identifier:   0E:4B:4A:80:55:EB:1D:2C:5A:C9:0D:B3:B1:48:0D:1D:20:03:81:0F
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer:       /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number:          011E
Signing time:             Wed 23 Sep 2026 05:41:55 +0000
Manifest this update:     Wed 23 Sep 2026 05:41:54 +0000
Manifest next update:     Wed 30 Sep 2026 05:41:54 +0000
Files and hashes:         1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: x1Ouv9IIDQ3VwtAz3OS48Wgf+NC7LdhMPP98QqqGqEM=)
                          2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: rbHttiCNfct4rPH7XHoUz+IWP4BlD4I/02xhzj8Jyag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
                          rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
        Validity
            Not Before: Sep 23 05:41:54 2026 GMT
            Not After : Sep 30 05:41:54 2026 GMT
        Subject: CN=6ab366a3-c64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:3f:9b:9a:12:95:71:3d:bd:78:6d:f8:40:
                    39:e6:b3:7f:65:e9:5a:4a:d3:e1:ef:ac:61:f7:a3:
                    33:c7:7d:d6:ad:c7:c5:8b:c6:d7:8c:98:7a:41:1d:
                    d6:10:5f:cb:b3:d4:94:c7:e2:d8:f7:ba:f5:b3:b1:
                    ef:ea:9a:66:5d:ca:ca:f1:3a:ae:e5:c3:e9:d6:b6:
                    77:26:51:78:fe:99:70:a5:6b:fd:e0:22:9e:ea:da:
                    c1:93:3a:f2:11:08:96:40:b1:50:72:95:6e:50:c8:
                    d6:1c:7c:2d:d3:40:39:00:46:51:df:88:65:78:b5:
                    52:89:9a:93:33:c2:b3:c5:72:17:fd:bc:91:a6:b0:
                    cf:fc:54:d4:cb:ba:4b:47:47:a6:5c:a2:1f:7c:ee:
                    31:a1:cf:2a:ad:93:4d:bd:80:15:e7:78:03:f5:c3:
                    81:cf:93:11:9f:8e:43:d2:fb:16:43:86:4a:9d:5a:
                    13:79:be:e6:e4:92:80:24:0d:95:c2:2f:09:61:26:
                    1a:80:bc:d6:ec:25:b1:70:2d:55:17:58:a8:31:d0:
                    ae:57:6e:cd:70:92:c4:ef:8f:9b:3f:4f:98:df:c6:
                    53:f4:b4:c2:82:a3:36:8a:d1:1b:fc:f0:ac:d3:6b:
                    d2:99:ee:43:e6:11:40:cb:df:df:08:32:b0:54:1f:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:4A:80:55:EB:1D:2C:5A:C9:0D:B3:B1:48:0D:1D:20:03:81:0F
            X509v3 Authority Key Identifier:
                keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:bd:f0:0e:ae:ff:08:41:52:ee:2c:53:60:fe:c1:3b:04:1a:
         7d:a5:8d:c5:35:40:e4:9f:19:7f:9c:11:f9:af:83:e6:17:ed:
         c6:7d:80:80:c7:32:e8:27:07:ff:34:63:94:74:50:96:f4:28:
         fc:7a:6c:a8:5c:33:fd:09:1f:d1:43:f7:8e:85:30:30:af:56:
         31:9f:4b:33:77:ca:59:8c:1a:22:b6:1d:1f:11:93:bd:32:ee:
         c6:ce:d1:42:27:70:5e:95:06:6c:a9:29:dc:37:86:a3:57:f4:
         ed:e9:a5:80:70:dd:b8:16:75:45:23:53:24:4b:73:a5:24:37:
         68:45:9f:37:a8:cf:03:1d:42:aa:3e:b4:16:3a:ae:c5:94:6e:
         4b:81:94:cf:45:e1:ec:4c:78:4d:7a:79:b5:09:b6:39:9d:9e:
         3d:e1:9f:0b:8b:cb:e8:22:e9:08:f4:de:e6:93:dc:4c:bb:f9:
         b6:cb:7d:0a:29:e9:0e:61:f7:ac:8d:67:92:8e:87:28:b9:2e:
         6a:1b:36:48:5e:26:45:5e:17:4d:54:aa:73:6f:ad:9c:7b:fa:
         6f:bf:c4:55:3b:bb:08:1a:42:63:1e:84:b8:af:8d:04:f2:03:
         cf:f1:fb:0a:9b:b0:0a:d5:f9:88:eb:93:5c:01:52:c2:c6:75:
         f9:ad:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:47:42 2026 by rpki-client