Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File:                     TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier:          LqCmOaSbhk4Wv/8rfSkPn1WGOD8kvvRtvkn9iJ6cgQQ=
Subject key identifier:   63:14:E5:E0:61:29:75:3A:72:93:40:43:C7:FF:0D:8F:23:A0:C8:AF
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer:       /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial:       35CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number:          35A2
Signing time:             Thu 24 Sep 2026 14:29:34 +0000
Manifest this update:     Thu 24 Sep 2026 14:29:33 +0000
Manifest next update:     Thu 01 Oct 2026 14:29:33 +0000
Files and hashes:         1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: ip9aes4Z+s8jd7i5msWPPw4cHmZ+xNCZMhfcU85WtU4=)
                          2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
                          3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
                          rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13773 (0x35cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
        Validity
            Not Before: Sep 24 14:29:33 2026 GMT
            Not After : Oct  1 14:29:33 2026 GMT
        Subject: CN=6ab533ce-acd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:44:7c:33:ab:5d:6b:66:0f:91:13:d3:0c:
                    28:10:6c:ab:cc:ca:d8:d3:20:1b:ba:6f:84:4e:4a:
                    a3:8f:35:39:4e:be:b6:a7:70:e8:6e:93:6d:17:41:
                    5c:d1:0c:a0:16:1b:28:87:cc:cb:c6:d3:8c:6c:22:
                    88:03:3d:34:5b:f0:64:79:25:71:87:21:e4:08:77:
                    32:ab:ed:6c:15:87:55:de:3d:88:11:90:6f:52:88:
                    2d:40:dd:7a:8a:58:97:6d:5d:93:d7:81:9b:21:dd:
                    16:df:fe:75:36:22:77:15:5a:90:6d:93:d7:1d:83:
                    8e:f2:81:1f:0d:f7:0f:98:04:27:2a:eb:95:5e:5f:
                    5f:ad:ca:f9:78:8a:2a:b8:28:f5:07:fb:f2:21:73:
                    12:a8:2b:e7:71:0e:24:73:9f:e7:47:27:29:34:f7:
                    78:01:b8:91:4f:56:c4:f9:43:d3:cc:c5:e0:75:53:
                    08:f7:d6:c6:fa:89:53:50:e8:be:cd:4d:e7:eb:c1:
                    14:e1:d1:bb:64:68:1d:c8:fa:55:83:ab:dd:da:0e:
                    ce:b7:28:94:f3:38:2e:70:b6:cc:00:b2:a8:7f:6f:
                    b0:ca:5a:ac:41:10:7f:08:db:9b:dc:33:f7:d2:c4:
                    c9:e6:9a:1e:59:ab:12:df:d9:1f:be:40:e7:75:c2:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:14:E5:E0:61:29:75:3A:72:93:40:43:C7:FF:0D:8F:23:A0:C8:AF
            X509v3 Authority Key Identifier:
                keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:56:66:52:9c:d9:02:90:fe:8e:03:59:63:9e:3b:e2:dc:ac:
         67:b9:78:f8:64:36:f5:87:3b:ea:a0:d2:41:bb:09:6d:f3:6d:
         e8:8b:14:8c:ea:41:ec:56:96:a1:0e:2a:45:fb:0e:49:ec:42:
         1e:ac:98:57:d4:71:28:d9:60:f8:1a:d9:ed:d9:f7:31:36:05:
         c5:88:04:68:09:d1:0c:e1:3f:5a:93:43:9b:9e:4a:12:43:3a:
         d0:45:d2:d6:5a:e0:56:86:be:b4:e2:a3:e5:b7:4e:b6:c6:54:
         3b:0d:2d:24:2a:f3:f2:dd:e5:6d:1e:87:c7:54:0e:38:8d:4a:
         fa:24:23:16:76:77:0c:b1:a0:80:eb:0a:a7:47:35:60:1d:bc:
         dd:fe:95:dc:b8:92:ad:cd:b4:1d:e2:15:78:0f:4f:40:6f:39:
         64:b8:8d:36:91:2c:92:79:a6:c3:88:42:9d:bc:36:99:a8:60:
         c4:a7:d4:e2:9c:c9:6c:75:92:dc:dd:8a:08:a9:40:86:f2:fe:
         d0:66:21:5e:b0:cd:67:0b:ed:be:be:5c:68:cf:bf:1f:63:98:
         ea:b9:c9:13:cc:cf:7a:35:0d:d5:65:7a:50:ca:9c:71:f8:48:
         fe:e6:82:47:46:10:b4:e4:6a:83:b7:e3:60:ae:50:2c:7e:3a:
         ca:d9:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:50 2026 by rpki-client