Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File:                     TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier:          5zcjgauGwuOCexJtLdPdcU2INOR5d/R0YAM14HpB0Cs=
Subject key identifier:   1E:D8:41:6C:1C:2E:C5:C3:CD:F6:CE:64:1A:C0:5C:30:B0:9A:BC:68
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer:       /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number:          D6
Signing time:             Wed 23 Sep 2026 06:27:33 +0000
Manifest this update:     Wed 23 Sep 2026 06:27:32 +0000
Manifest next update:     Wed 30 Sep 2026 06:27:32 +0000
Files and hashes:         1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: eOzTQOTWZP1Q6Wo41eMr+yac4EdiyMVf1nlEZZPDTtI=)
                          2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
        Validity
            Not Before: Sep 23 06:27:32 2026 GMT
            Not After : Sep 30 06:27:32 2026 GMT
        Subject: CN=6ab37155-dff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:a9:66:eb:01:e1:9f:0b:0f:12:2d:47:50:
                    08:b4:a2:8d:d2:b2:83:8c:18:12:6f:7b:8f:4a:bb:
                    f3:25:c3:ec:66:b2:63:ef:55:d0:d6:99:75:81:9c:
                    0d:48:0f:c9:74:8c:04:ee:0c:80:ed:5e:68:6e:a2:
                    af:da:01:9a:ab:aa:fa:a3:88:c7:b3:0c:da:39:6b:
                    18:0c:96:d1:04:c0:e7:ae:d7:38:d9:8f:39:53:5a:
                    b1:8a:b0:c0:8b:f2:15:04:52:b4:38:02:29:4e:0a:
                    cb:60:35:53:d3:96:a3:34:bb:1d:e6:ee:de:b8:12:
                    e5:ef:95:78:d7:74:f7:6b:51:94:3c:70:76:d8:1f:
                    84:45:15:c1:73:dc:b7:d6:da:ff:1f:7c:7f:36:8d:
                    c3:73:45:49:b8:82:15:00:91:97:cb:1d:dd:1d:4a:
                    df:bb:a8:73:b9:04:78:77:87:6f:33:27:cf:89:92:
                    2e:ef:a8:a1:ad:16:e8:98:bc:4d:de:3f:15:d0:ce:
                    90:8c:09:12:49:86:3c:b6:4f:7e:06:e3:ce:28:d8:
                    8e:9d:72:3a:fc:eb:8a:8a:ce:f4:7c:d1:87:8d:f3:
                    c1:e1:86:78:0c:45:24:6f:95:4c:bd:fe:32:7b:c5:
                    aa:8c:bc:48:f5:4b:ca:d6:a5:3a:5d:5e:79:e3:55:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:41:6C:1C:2E:C5:C3:CD:F6:CE:64:1A:C0:5C:30:B0:9A:BC:68
            X509v3 Authority Key Identifier:
                keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:78:97:f6:26:90:95:0a:dd:8e:de:fd:5c:a5:51:13:ec:71:
         f5:ae:c6:36:2a:c8:d0:ff:23:58:79:3d:c4:44:7a:ac:5e:9b:
         3a:5e:c6:79:2f:83:2f:50:e0:f6:4e:23:38:61:dd:7d:ce:80:
         4d:57:af:5a:e3:c7:1c:62:96:00:74:cc:87:d6:3e:b4:59:54:
         73:cd:bf:e6:be:8e:6d:e7:26:fa:b8:cc:3c:d3:f6:dc:d6:08:
         1c:8c:5c:7f:f2:ee:27:6c:b1:56:53:f1:30:e2:60:dd:d4:17:
         ca:da:7d:69:80:03:d4:8d:eb:6f:38:10:33:79:6f:b4:d1:1b:
         bc:d7:b5:65:90:37:51:d9:ec:23:88:d9:0a:43:7a:6a:3f:d5:
         6d:9a:dc:78:a8:e3:a2:fd:87:a4:c7:75:df:31:1f:a6:91:89:
         70:89:05:a3:b0:3a:4d:0c:a1:a5:cd:53:75:d8:79:83:a0:32:
         8b:01:39:ca:78:38:08:2c:22:85:11:8d:04:a8:38:cc:5f:eb:
         27:26:2f:8f:ea:c3:e9:85:ae:c1:77:a6:89:19:18:ce:49:0d:
         1c:ed:3e:f1:c9:d9:14:b4:a6:c0:db:d7:86:2d:15:7e:84:22:
         f7:05:3e:00:d2:23:12:2a:36:0d:c4:9f:de:55:55:54:63:c5:
         9a:d6:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:05:55 2026 by rpki-client