Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File:                     tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier:          NdhiXvqHZS3tdP9vXXYQm/1ViSzYIw1IUEDvtuWZ4Vo=
Subject key identifier:   58:9E:49:5D:77:52:28:04:FE:5C:7C:CE:D3:C1:28:76:51:3D:C1:09
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number:          01F5
Signing time:             Wed 23 Sep 2026 03:28:14 +0000
Manifest this update:     Wed 23 Sep 2026 03:28:14 +0000
Manifest next update:     Wed 30 Sep 2026 03:28:14 +0000
Files and hashes:         1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: BGp2Cwe+FE62XiYPgWhjbNFy5E/OikrF6jusNfHKC8Y=)
                          2: A6AB9D38335211F1960FCBDEC6833773.roa (hash: eXxCFDfnDfAFb+VxnPASq3AvIfkbg/uecOo6gz8yP10=)
                          3: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: bdKA7kvKI2THYNjeyi3Lbacr6XK2z8rAQaWiwHnpqT8=)
                          4: 657EDAC0003D11F187167F2F4B6F56BC.roa (hash: 4QNpZ4lYAWDyFPtVqSrnEIjMO2wek++7TF/91yII7Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Sep 23 03:28:14 2026 GMT
            Not After : Sep 30 03:28:14 2026 GMT
        Subject: CN=6ab3474e-486e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:e6:3b:06:23:45:c4:6a:91:35:ba:71:66:
                    35:88:98:53:79:0c:f9:78:31:29:95:1a:1d:c1:f1:
                    92:fd:3c:1f:bc:95:33:20:7f:95:2c:67:3e:d0:96:
                    c2:6d:18:35:b9:4b:12:9e:42:77:da:30:8b:b1:4e:
                    23:7f:6b:05:fe:f8:de:da:95:9f:a8:3c:25:fb:ce:
                    10:b5:ce:72:a2:7f:8d:9a:40:12:39:5b:9f:f3:b5:
                    79:9b:ab:2d:18:93:20:59:62:3a:54:70:6d:5e:60:
                    75:74:cc:b0:77:39:e7:53:0a:59:e7:5b:b7:8e:a8:
                    9e:b5:91:fb:e1:b4:e2:5b:81:53:39:7b:05:0b:75:
                    c2:83:86:39:65:16:fc:4b:35:5d:7e:74:46:11:db:
                    d1:fd:c2:c3:e1:7d:48:7c:fe:34:f5:d5:38:4f:a0:
                    60:4d:20:40:8f:01:57:9b:d1:1b:cf:06:58:ba:ab:
                    90:30:44:b2:93:07:86:c8:60:26:3f:64:a7:28:ad:
                    72:65:d5:1b:e2:3c:94:76:3a:d3:3f:ce:55:87:ad:
                    ac:aa:3c:d3:ff:d7:d2:24:c0:0c:a9:7b:7c:47:cc:
                    12:9f:b5:08:e5:32:90:2e:7b:a3:31:38:14:ff:30:
                    2e:8d:18:0a:c1:b5:7a:aa:b9:bd:00:41:56:18:c4:
                    ed:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:49:5D:77:52:28:04:FE:5C:7C:CE:D3:C1:28:76:51:3D:C1:09
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:80:a5:b1:6e:cb:13:de:5d:32:66:78:7a:39:68:ef:86:
         94:b9:3d:72:92:5f:da:df:35:57:07:c8:af:12:80:df:2e:78:
         cb:84:8f:b2:80:d4:55:50:9d:4b:71:6f:f7:1d:10:fd:c9:b5:
         2c:35:8c:50:35:91:58:6a:50:be:82:1a:e7:a8:6b:41:5f:14:
         95:0f:3a:74:87:e2:36:9b:b1:c0:33:0f:f9:bb:a8:dd:6d:7d:
         0f:a7:b3:d0:da:48:03:8e:3c:c6:55:0c:a6:d8:ef:6c:ae:cb:
         36:0c:7f:a2:01:80:da:fe:17:67:00:00:1e:32:ba:91:11:42:
         40:4a:88:98:41:d0:44:69:21:42:0f:c2:a2:31:05:b6:24:5c:
         4b:85:c0:70:9d:33:07:1f:ad:bc:f3:10:e0:73:00:51:3d:6d:
         11:28:6e:bf:af:1c:cc:98:15:d0:59:b0:b7:a4:bb:21:92:72:
         34:10:77:4f:8f:79:9b:92:23:58:41:28:f4:ac:f6:39:f5:14:
         2e:87:fb:c8:23:d6:f1:28:7a:f5:e3:02:a1:29:df:c6:26:10:
         84:94:3b:a9:1f:2a:cc:f1:d3:ac:f2:9f:4e:88:b9:0f:d3:cc:
         55:44:1f:d3:08:4b:fc:e3:b0:d0:b9:ff:bd:05:6d:02:fb:6f:
         40:18:d6:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4
MDg2OEZCRDkwHhcNMjYwOTIzMDMyODE0WhcNMjYwOTMwMDMyODE0WjAYMRYwFAYD
VQQDEw02YWIzNDc0ZS00ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GbmOwYjRcRqkTW6cWY1iJhTeQz5eDEplRodwfGS/TwfvJUzIH+VLGc+0JbC
bRg1uUsSnkJ32jCLsU4jf2sF/vje2pWfqDwl+84Qtc5yon+NmkASOVuf87V5m6st
GJMgWWI6VHBtXmB1dMywdznnUwpZ51u3jqietZH74bTiW4FTOXsFC3XCg4Y5ZRb8
SzVdfnRGEdvR/cLD4X1IfP409dU4T6BgTSBAjwFXm9EbzwZYuquQMESykweGyGAm
P2SnKK1yZdUb4jyUdjrTP85Vh62sqjzT/9fSJMAMqXt8R8wSn7UI5TKQLnujMTgU
/zAujRgKwbV6qrm9AEFWGMTt2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFieSV13
UigE/lx8ztPBKHZRPcEJMB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2
NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri
VXc4UksySWs4WkNBaG8tOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAENmApbFuyxPeXTJmeHo5aO+GlLk9cpJf2t81VwfIrxKA3y54y4SPsoDUVVCd
S3Fv9x0Q/cm1LDWMUDWRWGpQvoIa56hrQV8UlQ86dIfiNpuxwDMP+buo3W19D6ez
0NpIA448xlUMptjvbK7LNgx/ogGA2v4XZwAAHjK6kRFCQEqImEHQRGkhQg/CojEF
tiRcS4XAcJ0zBx+tvPMQ4HMAUT1tEShuv68czJgV0Fmwt6S7IZJyNBB3T495m5Ij
WEEo9Kz2OfUULof7yCPW8Sh69eMCoSnfxiYQhJQ7qR8qzPHTrPKfToi5D9PMVUQf
0whL/OOw0Ln/vQVtAvtvQBjWhA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:59:54 2026 by rpki-client