Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
File:                     TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json)
Hash identifier:          vo4V/slaWCnlkN6yhZVUiG/soZwhcxGcMmHyk/8dFbo=
Subject key identifier:   17:83:1F:08:34:08:2F:74:9C:2A:1A:A8:B7:84:E1:28:45:59:F6:C6
Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
Certificate issuer:       /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Certificate serial:       1042
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
Manifest number:          1035
Signing time:             Tue 22 Sep 2026 17:20:29 +0000
Manifest this update:     Tue 22 Sep 2026 17:20:29 +0000
Manifest next update:     Tue 29 Sep 2026 17:20:29 +0000
Files and hashes:         1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: N8jlbpZ0N0IPldAYV31PzHF8/fT88RD/xlENuKFFMLM=)
                          2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4162 (0x1042)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
        Validity
            Not Before: Sep 22 17:20:29 2026 GMT
            Not After : Sep 29 17:20:29 2026 GMT
        Subject: CN=6ab2b8dd-bb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:60:67:7f:a2:73:b1:00:32:df:39:f0:e9:
                    75:c6:89:1e:11:94:4c:6c:04:7e:f7:1d:07:0c:0d:
                    08:80:dc:ad:63:50:0b:ae:14:63:3c:8a:7b:99:f2:
                    cf:0e:25:d1:fc:16:52:12:0e:03:43:ca:dd:b4:7c:
                    84:c3:0f:4e:dc:e3:4d:07:b5:e6:6d:f7:6a:66:07:
                    b2:b7:71:b8:3f:3f:9f:3d:3c:cc:fe:1f:70:85:77:
                    ae:24:1a:b5:87:49:0a:bb:f4:7a:a5:d2:4e:d6:80:
                    51:90:a2:9f:3a:2d:2a:e0:46:2a:52:e6:cd:c9:0e:
                    f3:58:5a:e7:12:2f:41:b0:59:af:c1:6d:cd:99:91:
                    7f:76:5c:13:49:7a:f9:21:c6:5d:4b:34:2e:3b:c2:
                    b8:e9:dd:60:a4:ca:79:3f:86:6d:f8:4f:8e:c1:b2:
                    c1:64:e4:50:f7:d5:a2:40:91:68:66:73:18:8c:c4:
                    2f:aa:32:1f:3f:1b:a6:43:43:dd:a0:02:dd:ce:61:
                    75:a4:47:6c:65:e1:c6:4c:1b:cb:f6:32:d4:1a:57:
                    7f:b7:ed:39:a7:86:43:f0:95:6d:8f:00:cd:57:df:
                    81:0c:99:2e:00:32:c8:e1:10:5e:7c:19:f5:25:a4:
                    5a:d2:54:8d:f5:bf:2e:92:0c:a9:50:65:1c:73:00:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:1F:08:34:08:2F:74:9C:2A:1A:A8:B7:84:E1:28:45:59:F6:C6
            X509v3 Authority Key Identifier:
                keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:21:fc:05:82:d3:7f:43:31:7e:c8:e5:34:fe:9a:d6:6c:d9:
         44:7b:9e:cf:b3:1b:cd:2a:53:a9:87:91:40:1a:3f:cd:34:ba:
         67:72:0f:47:f8:04:00:cc:2d:87:63:fc:87:3a:85:45:a7:cb:
         4b:77:5d:97:97:0f:16:19:df:fb:60:17:d5:87:64:61:11:b3:
         1f:95:c5:52:a1:09:2e:4a:4d:d9:4a:8f:f2:99:6a:0c:31:b6:
         45:53:a7:64:05:f5:ad:98:00:d8:75:12:f4:7c:1b:e2:e2:7c:
         58:44:4e:8f:5a:67:c0:7c:92:67:5a:a6:d1:e9:1b:5a:4a:85:
         25:3e:af:f2:fe:c2:46:6f:9c:3b:3f:9d:36:5a:70:6d:2f:ba:
         65:fa:b9:ec:5d:ed:9e:19:eb:13:dd:78:26:e7:8b:96:ac:79:
         c5:7c:a5:04:63:8b:97:f9:a3:93:1e:0e:48:59:13:3f:6c:ef:
         cf:f6:6f:76:31:f8:3b:40:d7:d3:8a:fb:ff:29:f4:8f:94:6c:
         56:79:a7:eb:ec:e0:1c:ae:96:43:4b:64:24:0a:cd:35:4f:4d:
         48:d7:b8:ad:48:2b:95:b2:6e:d7:65:be:1b:a6:ee:92:fb:2a:
         53:58:32:c6:4a:9f:96:04:20:c3:01:44:8e:18:79:91:2c:14:
         70:69:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:20:41 2026 by rpki-client