Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
File:                     TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json)
Hash identifier:          26h3l/BGQcT9VAwPu976Mzl0SLIM4ed6KgGCrsEj7hA=
Subject key identifier:   82:E8:A0:71:00:39:66:A6:45:27:DE:1D:8C:25:E7:F5:F9:95:FA:FA
Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
Certificate issuer:       /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
Manifest number:          0100
Signing time:             Sun 27 Sep 2026 06:43:32 +0000
Manifest this update:     Sun 27 Sep 2026 06:43:31 +0000
Manifest next update:     Sun 04 Oct 2026 06:43:31 +0000
Files and hashes:         1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: OFO/G0pXZ/QQdrU21maTPJUP4JvkA/CMgsTuaSEq/Ro=)
                          2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 6vkqHmTAkL9wvdFpa2smuN8QtbzfAMrKNImbfN9Tn9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
                          rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
        Validity
            Not Before: Sep 27 06:43:31 2026 GMT
            Not After : Oct  4 06:43:31 2026 GMT
        Subject: CN=6ab8bb14-bd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:d7:87:88:12:74:6d:4b:18:b4:57:74:4b:
                    7b:3b:56:5c:7d:5d:44:72:d0:15:69:ed:b0:95:e2:
                    c6:d0:f3:e9:de:3e:ee:9a:a8:b9:de:42:af:2f:be:
                    b6:8f:24:18:b6:b6:34:c7:eb:df:8f:2d:cd:2c:5f:
                    d5:21:43:c0:7b:96:55:58:97:69:05:92:70:55:26:
                    6b:b1:af:2d:5d:20:fb:a5:04:c0:1c:86:ed:a1:17:
                    52:ca:0d:ab:d2:77:99:7d:de:0b:f0:55:6b:11:e1:
                    d5:b5:a0:bc:c9:09:b1:6c:10:cf:2b:f8:d2:52:01:
                    a8:d5:b4:32:0d:02:29:cb:26:e0:d8:b1:46:bb:bf:
                    55:ce:e2:c3:4d:99:6f:25:3f:a0:c2:70:b7:ae:46:
                    cc:46:24:37:77:27:d6:b3:13:b9:36:9f:e5:a5:1e:
                    35:5e:77:b5:4c:39:57:5b:ab:13:87:54:8e:a4:4b:
                    7a:ec:c0:44:ca:90:f5:6c:4a:f6:4f:b7:05:10:4e:
                    3b:d4:0b:d3:27:d4:b7:69:e9:68:ee:06:61:57:e6:
                    ff:72:ac:42:65:91:5f:41:8f:d2:91:e8:94:4c:65:
                    97:43:3a:96:4f:3a:30:16:54:8e:81:5f:60:df:38:
                    f6:1f:4f:1d:f5:93:34:52:a5:99:75:cd:2a:fa:f0:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:A0:71:00:39:66:A6:45:27:DE:1D:8C:25:E7:F5:F9:95:FA:FA
            X509v3 Authority Key Identifier:
                keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:74:26:ab:1b:bf:0e:22:61:5d:cf:50:2b:8c:5a:38:bf:
         60:15:c4:31:0d:e3:12:6e:61:09:e3:18:5e:fe:f7:28:46:a3:
         b7:b2:68:ff:8c:1d:b8:91:8d:8a:ee:48:f5:dc:22:84:a7:8e:
         71:22:13:2c:f4:0b:37:1d:0e:bf:a0:52:76:79:6a:eb:0c:c0:
         f7:ca:c2:a5:51:95:24:32:48:da:97:df:04:37:43:dd:d1:1f:
         bd:b6:c8:6e:e2:4d:c3:71:85:36:82:a1:e2:cb:3b:59:51:f4:
         4f:b4:d1:26:b5:fa:b1:bb:f9:a6:30:e5:ad:c7:9a:b6:fb:d7:
         8f:a7:9c:82:74:b9:56:d6:13:3d:e5:42:c9:00:0a:8d:b2:83:
         d4:71:6e:62:df:ba:95:62:2b:a3:6c:86:fc:32:bc:98:45:9c:
         eb:75:5a:b6:55:63:78:f1:b4:9a:55:8e:97:38:72:9a:88:2c:
         b1:f3:a7:1b:57:b8:8d:d5:6d:d6:fd:97:b5:8a:98:a0:c3:11:
         b4:be:99:d8:0c:49:2a:59:0a:89:a9:28:6e:02:3f:34:09:5e:
         3f:97:30:f6:69:7e:52:07:c1:c9:27:25:7f:8b:ee:2c:28:8f:
         91:c4:36:cf:06:ee:2b:9a:07:27:b5:ed:5f:5b:1c:97:fe:5b:
         fa:ac:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:04:17 2026 by rpki-client