Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
File:                     tU-K0c7KwTb8r0eS6_0A5o6h02g.mft (raw, json)
Hash identifier:          A2FrZnYBUf0G8Pct54j0c9yHH+SUFgJQuLFWaRhjni0=
Subject key identifier:   8F:45:38:4D:40:24:0B:59:3D:4A:E8:89:8E:12:D2:9D:0B:2D:65:8E
Authority key identifier: B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68
Certificate issuer:       /CN=A91B7DCB/serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
Manifest number:          0106
Signing time:             Wed 23 Sep 2026 05:55:06 +0000
Manifest this update:     Wed 23 Sep 2026 05:55:05 +0000
Manifest next update:     Wed 30 Sep 2026 05:55:05 +0000
Files and hashes:         1: tU-K0c7KwTb8r0eS6_0A5o6h02g.crl (hash: kWWqrZLP2B3k5sXgDPu9UhKHVB17J7a9Jv87v0G2YbM=)
                          2: D470A60E294511F0B1412377C4F9AE02.roa (hash: GSkbxwT7s713aepzAHb1asdunZV2hHHIcFkvDpvvdJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=B54F8AD1CECAC136FCAF4792EBFD00E68EA1D368
        Validity
            Not Before: Sep 23 05:55:05 2026 GMT
            Not After : Sep 30 05:55:05 2026 GMT
        Subject: CN=6ab369b9-86cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:03:30:54:85:62:a2:ba:dd:39:33:ad:9b:
                    a1:96:56:cb:d9:c8:ce:e2:85:21:27:06:61:0f:1d:
                    95:24:55:94:82:9e:84:c6:3b:a6:97:86:d7:9b:1f:
                    f0:b8:62:00:76:fb:25:53:97:5f:70:ca:99:6e:1b:
                    8c:37:0f:0e:1d:72:c3:e7:99:9b:56:ee:73:73:55:
                    98:22:d0:d2:67:d5:04:ba:81:8e:e2:da:56:ce:84:
                    b1:0a:ba:e7:86:e0:9c:7e:98:26:95:1e:3f:62:48:
                    a6:41:13:5f:e2:51:b8:18:40:22:41:1a:2e:c8:5e:
                    29:1c:52:b0:c4:1e:1c:74:01:c5:1a:cf:64:40:87:
                    90:68:f7:b6:e1:46:6a:33:65:68:3f:04:11:1f:a9:
                    27:dd:44:42:05:6d:f6:5e:bd:ca:d9:c9:c9:4a:26:
                    18:c1:69:00:21:c5:92:8f:d1:c0:d0:41:b3:c8:2d:
                    27:fe:cc:7c:06:78:fe:65:3b:9c:b4:be:14:60:57:
                    49:de:69:12:7f:b9:b7:8a:5c:0f:0a:c4:bb:84:27:
                    5e:30:f0:24:4b:fb:cf:a4:29:67:4d:84:dc:c1:ba:
                    f6:1e:fb:c7:1a:9c:cb:37:b5:ed:24:9f:2b:93:06:
                    d6:32:15:92:33:19:b8:97:3e:6d:2f:0b:9b:a5:2c:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:38:4D:40:24:0B:59:3D:4A:E8:89:8E:12:D2:9D:0B:2D:65:8E
            X509v3 Authority Key Identifier:
                keyid:B5:4F:8A:D1:CE:CA:C1:36:FC:AF:47:92:EB:FD:00:E6:8E:A1:D3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tU-K0c7KwTb8r0eS6_0A5o6h02g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/F83AC494294411F0AE1ABC74C4F9AE02/tU-K0c7KwTb8r0eS6_0A5o6h02g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:23:f9:12:2a:80:60:d6:c0:7f:02:f3:30:f2:cd:bb:48:7b:
         aa:3b:e9:97:1b:83:d3:4e:55:0e:e2:40:f4:73:1d:9e:79:06:
         07:46:eb:8c:e1:25:d1:02:4a:18:25:5a:7d:e1:04:1f:0b:7f:
         da:7c:7a:56:ea:5c:a5:fd:f3:02:09:f4:80:54:14:32:42:f7:
         b9:b2:66:9d:d5:bb:0c:4d:8f:71:34:38:f4:01:cc:a6:54:a8:
         05:09:08:ec:c3:ad:0f:24:48:5c:9a:f5:d8:0c:b1:ae:08:fe:
         3e:c8:f2:6f:7f:29:dc:14:a9:e6:39:18:ab:28:40:42:c9:7c:
         29:da:49:44:ff:f7:7c:7a:70:74:80:16:af:aa:b7:2d:4c:58:
         83:71:4a:26:48:f6:59:b6:f7:59:c0:91:80:04:2c:09:2e:19:
         ad:72:e6:77:10:4c:3f:ee:69:e5:31:de:18:d5:e3:43:e1:d4:
         3b:f8:d6:e5:f2:50:36:13:37:e5:ad:55:e2:76:d2:aa:a3:99:
         e9:7b:14:63:41:7e:f3:2d:66:53:5e:45:c2:93:aa:7c:d2:15:
         1f:91:68:de:26:70:95:f0:5e:47:c1:fd:3c:e8:a9:c3:5f:f6:
         39:5d:a3:f6:95:82:9b:ad:23:1f:16:28:3d:16:cf:f4:f2:ad:
         ea:79:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:04 2026 by rpki-client