Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
File:                     tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json)
Hash identifier:          tiXxkhet4zU+moaHwbuD+JxfQOn4PPJKfKbSbR68NWg=
Subject key identifier:   F7:9B:15:7C:A4:93:ED:E5:FF:BD:3D:13:FD:3D:6F:0D:5D:1A:81:97
Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Certificate issuer:       /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Certificate serial:       13A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
Manifest number:          1396
Signing time:             Thu 08 Oct 2026 17:00:53 +0000
Manifest this update:     Thu 08 Oct 2026 17:00:52 +0000
Manifest next update:     Thu 15 Oct 2026 17:00:52 +0000
Files and hashes:         1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: QWsxHKeWRl1hfJl2SbDt9rvrYvFMSAtYo0Hp0XMdqZw=)
                          2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: YJPmy2lvkpzM1TQd3+bIRc6QpQXpCHaQ7yQiRk50o14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
                          rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5025 (0x13a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
        Validity
            Not Before: Oct  8 17:00:52 2026 GMT
            Not After : Oct 15 17:00:52 2026 GMT
        Subject: CN=6ac7cc45-d136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:99:88:a5:8b:d7:f2:ed:40:06:a6:3e:98:
                    fb:32:ba:7a:ca:ac:a1:34:bd:f3:f8:f9:36:22:b7:
                    39:a1:f8:b3:a7:e0:9e:8e:da:06:d2:73:aa:95:ff:
                    b5:08:f3:55:44:34:77:db:90:b7:85:f5:a6:f5:bb:
                    2a:fb:83:13:00:64:7a:5a:b8:30:82:30:b1:31:f9:
                    5b:96:61:00:0d:9e:e4:8c:3e:23:73:74:27:7a:75:
                    3e:a3:8c:b0:3c:3b:be:04:48:43:33:82:fe:8e:e4:
                    24:85:76:1e:29:b1:73:13:b9:2e:47:c1:55:a1:f9:
                    da:9c:98:86:e3:92:a8:c1:d5:fc:37:6e:de:47:ee:
                    23:4f:c8:08:ad:b6:a9:68:e5:66:dc:ef:b5:8f:b1:
                    04:c4:f6:23:bf:3f:09:3f:3f:09:a1:cb:50:d5:56:
                    b4:10:de:9e:e3:cc:b7:df:31:39:20:11:34:e5:2c:
                    10:78:e2:f4:39:8e:d7:4f:dc:30:db:c4:d9:a8:31:
                    6b:62:c2:16:ba:f1:5e:e6:dc:e6:ec:7d:82:63:b1:
                    ec:e0:b7:6d:42:23:2c:41:96:34:f3:67:e3:9d:75:
                    96:35:be:4d:9b:7d:13:72:e9:9f:f6:7e:5d:73:b2:
                    c2:f5:63:0d:fb:0b:ef:57:32:f0:bc:66:8a:72:2c:
                    86:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:15:7C:A4:93:ED:E5:FF:BD:3D:13:FD:3D:6F:0D:5D:1A:81:97
            X509v3 Authority Key Identifier:
                keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:bd:37:45:fa:40:6a:7e:ac:41:65:0c:fd:df:62:92:c9:
         79:6c:bb:80:dd:e5:a6:b7:8c:3e:47:51:34:62:20:53:05:b3:
         e7:38:19:ff:6a:af:a8:d7:0c:8b:b2:ac:fb:26:71:c3:87:24:
         54:67:fd:0d:67:fb:e1:b5:2b:8d:e0:ef:83:65:ca:66:aa:6e:
         20:b7:8d:8d:77:6c:92:f5:45:40:54:96:fd:72:a7:03:b6:b5:
         60:5e:dd:90:ee:d0:93:2f:a4:f3:ec:60:39:28:60:b0:74:0b:
         b8:e4:f9:5d:e5:ba:87:4b:3b:94:7c:59:d8:c3:8e:d5:0a:02:
         5c:38:df:80:f8:a2:3f:02:ff:01:02:d3:b5:5f:c8:1e:b6:ab:
         32:d0:5d:cf:7e:30:ef:85:40:d6:70:de:01:ec:1d:3b:70:4f:
         85:ae:09:f2:c1:13:ba:4a:db:c0:20:de:e7:4b:ca:93:30:cd:
         95:73:e5:47:f1:b7:44:fc:74:41:de:de:fe:b4:29:e9:61:a1:
         5e:ee:23:5a:95:c0:21:00:13:0f:33:62:7a:33:8d:8c:5e:5c:
         07:bd:a3:81:84:94:e5:3a:f7:4e:18:9c:42:2a:37:5b:a1:80:
         07:65:c4:d3:03:10:b2:15:d6:4d:80:16:7c:8b:1b:12:91:7b:
         af:a6:ba:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:51:43 2026 by rpki-client