Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File:                     TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier:          TAyjxN9nQ40lOg6CPLVdxHqBzfcJoF6uZoCl6HFcyvI=
Subject key identifier:   A0:FD:B3:F5:9C:88:20:94:B5:0B:99:D4:EE:3E:26:49:80:84:00:3B
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number:          0124
Signing time:             Wed 23 Sep 2026 05:46:56 +0000
Manifest this update:     Wed 23 Sep 2026 05:46:56 +0000
Manifest next update:     Wed 30 Sep 2026 05:46:56 +0000
Files and hashes:         1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: Lp/mwbOiiR9zUG/Fmflt0DgeeVwj2Jh+79aMR7Cr6VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: Sep 23 05:46:56 2026 GMT
            Not After : Sep 30 05:46:56 2026 GMT
        Subject: CN=6ab367d0-bcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:11:9e:84:d2:c8:2b:d5:50:c7:cd:5c:17:65:
                    ab:4b:a3:09:a9:26:6f:70:50:f6:c7:58:55:d3:77:
                    f1:2d:fb:d8:ef:ba:15:e5:4a:65:30:0b:8b:01:07:
                    4e:d2:d5:0c:86:55:79:9d:05:fa:ac:46:7c:8e:9e:
                    93:e0:4e:7f:c2:72:6f:a9:46:39:2e:69:7a:ea:06:
                    4d:08:05:7b:54:0c:da:2e:3c:2c:ab:56:25:a1:5f:
                    58:93:5f:55:a4:31:d3:40:3f:0b:17:b2:9e:57:1a:
                    d5:04:f2:54:63:51:ce:59:5f:31:0a:df:50:e0:4a:
                    9d:c3:8c:8a:28:83:cf:8f:2a:16:00:fc:cf:c4:94:
                    ab:ae:b5:e7:1b:21:67:92:6e:62:d9:95:00:36:a7:
                    13:96:1f:cc:14:9f:87:75:ce:5c:e4:e3:29:87:65:
                    8c:36:59:db:3b:54:34:d7:e5:f2:ac:83:f0:46:c1:
                    b1:b6:a6:28:46:19:9f:ee:93:4b:fa:df:64:db:9b:
                    40:2c:7d:01:16:f5:1c:d6:fc:47:3a:b3:72:f5:54:
                    f5:24:b3:ef:94:a2:8e:e1:15:5b:1d:f2:4e:a6:21:
                    5b:9b:83:bf:4c:12:73:e1:1c:8c:1b:e2:aa:44:c7:
                    40:a2:20:72:b4:03:2e:98:cb:8c:2f:d5:30:2b:bf:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:B3:F5:9C:88:20:94:B5:0B:99:D4:EE:3E:26:49:80:84:00:3B
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:44:9c:99:ca:f8:b1:14:cd:eb:21:b7:c8:cf:3c:24:b8:
         b0:1a:47:aa:2a:be:10:76:6a:21:00:70:a9:b5:a0:cf:54:1c:
         ae:43:80:10:a6:34:58:e4:27:90:0a:a8:b9:4e:44:02:53:cc:
         82:33:f3:7d:19:78:70:62:0b:3c:79:fa:18:86:0f:66:c0:21:
         3e:5f:6b:65:f7:28:27:29:93:4e:10:eb:b4:1c:85:d6:09:39:
         21:45:b4:30:38:fb:a4:8e:41:a1:0c:8a:35:e7:6b:78:23:af:
         1e:80:ab:86:50:f2:f0:94:93:5d:37:da:56:94:83:8a:18:63:
         81:fe:cf:99:26:36:dd:48:01:36:8a:05:e7:02:c8:e7:97:e6:
         ee:04:ca:c1:c5:27:71:06:ce:04:69:b5:e7:4f:b9:0c:16:02:
         ab:d0:31:9c:d6:fe:c4:89:26:41:f1:12:c3:07:fb:17:99:b6:
         2e:3f:d7:b4:5e:61:62:f4:81:f9:ee:d2:0f:7c:9d:98:93:a5:
         42:4e:1f:ff:0d:3d:ae:cf:dd:de:ed:3a:d0:81:0a:f9:16:93:
         37:f4:d9:6c:a1:84:4d:4c:20:b1:09:51:f3:cd:60:3e:27:c0:
         23:9a:48:82:c9:97:b9:a2:e8:b2:97:7e:5c:ee:16:b6:db:f6:
         c6:f2:e9:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2
QUVDOTlBQzYwHhcNMjYwOTIzMDU0NjU2WhcNMjYwOTMwMDU0NjU2WjAYMRYwFAYD
VQQDEw02YWIzNjdkMC1iY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8RGehNLIK9VQx81cF2WrS6MJqSZvcFD2x1hV03fxLfvY77oV5UplMAuLAQdO
0tUMhlV5nQX6rEZ8jp6T4E5/wnJvqUY5Lml66gZNCAV7VAzaLjwsq1YloV9Yk19V
pDHTQD8LF7KeVxrVBPJUY1HOWV8xCt9Q4Eqdw4yKKIPPjyoWAPzPxJSrrrXnGyFn
km5i2ZUANqcTlh/MFJ+Hdc5c5OMph2WMNlnbO1Q01+XyrIPwRsGxtqYoRhmf7pNL
+t9k25tALH0BFvUc1vxHOrNy9VT1JLPvlKKO4RVbHfJOpiFbm4O/TBJz4RyMG+Kq
RMdAoiBytAMumMuML9UwK78kDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKD9s/Wc
iCCUtQuZ1O4+JkmAhAA7MB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz
ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs
WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABC9EnJnK+LEUzesht8jPPCS4sBpHqiq+EHZqIQBwqbWgz1QcrkOAEKY0WOQn
kAqouU5EAlPMgjPzfRl4cGILPHn6GIYPZsAhPl9rZfcoJymTThDrtByF1gk5IUW0
MDj7pI5BoQyKNedreCOvHoCrhlDy8JSTXTfaVpSDihhjgf7PmSY23UgBNooF5wLI
55fm7gTKwcUncQbOBGm150+5DBYCq9AxnNb+xIkmQfESwwf7F5m2Lj/XtF5hYvSB
+e7SD3ydmJOlQk4f/w09rs/d3u060IEK+RaTN/TZbKGETUwgsQlR881gPifAI5pI
gsmXuaLospd+XO4Wttv2xvLpGg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:38:22 2026 by rpki-client