Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
File:                     tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json)
Hash identifier:          viug5pMucMs6jTq+ECWOtvdciRLLsoDXEYkNk2nvp4A=
Subject key identifier:   A1:5A:E8:37:56:C6:2C:09:8A:F4:B6:A7:FD:0F:57:08:60:CE:13:B6
Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
Certificate issuer:       /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
Manifest number:          02CA
Signing time:             Fri 25 Sep 2026 01:18:12 +0000
Manifest this update:     Fri 25 Sep 2026 01:18:11 +0000
Manifest next update:     Fri 02 Oct 2026 01:18:11 +0000
Files and hashes:         1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: hwr/b07EihK3Gri02YuPYXhdufwnCQAQJw996ZT5DJI=)
                          2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: ySHcIoYi69/klx1xfZit6p/PRcBh2GhqWocAom0vCPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
                          rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
        Validity
            Not Before: Sep 25 01:18:11 2026 GMT
            Not After : Oct  2 01:18:11 2026 GMT
        Subject: CN=6ab5cbd3-7e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:8d:c2:11:99:70:dc:4f:41:82:f7:a2:e0:
                    74:d5:2d:fb:8c:fa:d3:1f:10:67:e4:2b:27:f7:da:
                    26:3b:92:39:32:30:84:31:27:fd:d4:ad:b1:cf:e7:
                    d0:8d:03:5a:32:47:97:49:52:f9:38:eb:d8:42:e7:
                    db:76:e9:fc:a0:f3:70:5c:62:b2:1e:90:51:5e:16:
                    0e:60:fd:a4:ff:42:e5:c4:61:6e:79:fb:14:43:2a:
                    ac:17:61:4e:47:8a:47:0b:34:55:54:8a:fe:e1:5e:
                    8d:8a:0b:c9:72:af:79:97:40:ae:fd:2b:de:19:c2:
                    75:7b:a7:72:9d:22:7b:af:fa:77:18:0c:93:a6:bf:
                    67:fc:85:4d:ce:91:fc:ac:dd:af:7a:4a:1c:c7:cf:
                    eb:4c:8b:9e:7a:6c:4d:ca:3e:9d:db:01:3b:05:d3:
                    84:98:c4:1d:25:9d:4b:41:b3:4b:1f:59:b2:e7:ef:
                    5b:ad:58:b4:2f:3f:cf:a5:80:93:2f:74:d2:59:75:
                    67:85:57:49:98:b0:7e:93:fd:d6:88:e3:bd:0e:2a:
                    f0:89:d5:1b:4f:d2:93:bb:d9:d0:36:d1:10:59:b5:
                    08:44:8a:98:c4:13:ba:ea:b7:47:e3:60:9d:f0:4f:
                    f0:6b:c7:14:a3:17:fa:e1:a7:52:a7:64:bb:d5:a9:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5A:E8:37:56:C6:2C:09:8A:F4:B6:A7:FD:0F:57:08:60:CE:13:B6
            X509v3 Authority Key Identifier:
                keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:70:38:3a:18:55:45:2d:25:ba:a0:2c:93:1c:60:27:bc:b7:
         06:10:7b:75:da:03:9f:4e:8b:c8:4b:72:7d:54:05:f6:ac:07:
         6f:16:d5:8e:d1:b6:08:b5:26:46:41:ee:5e:6f:5a:da:b0:52:
         04:cb:81:c8:8c:da:ff:2e:35:46:aa:60:6f:bb:fd:e5:8a:0b:
         f3:69:82:56:1c:db:24:20:02:63:e7:64:54:a8:c8:4e:93:91:
         0f:2f:9e:6b:92:01:d8:51:20:6d:31:58:a4:fe:e8:65:61:ab:
         54:2a:22:d9:d4:28:93:22:31:ba:aa:ad:9b:8c:74:a8:b6:e7:
         04:92:de:58:cb:ee:64:de:6f:b7:b8:57:e3:a5:df:bb:40:cc:
         5d:48:4f:31:7b:dd:0e:c7:df:5f:99:5a:69:3c:b8:6f:c9:fe:
         1a:ce:65:83:b6:87:45:e8:5f:a9:3d:83:70:16:9e:bc:90:99:
         0a:25:83:6e:6b:c6:8f:67:ca:73:11:34:cd:57:02:46:a6:30:
         0a:70:47:14:c8:8e:ee:ff:63:91:b1:85:fa:1a:8d:b9:94:d3:
         a3:9a:67:fd:e2:f2:cc:ce:29:95:55:32:63:44:89:e9:b1:bf:
         25:d5:99:31:cb:79:b2:1b:85:c1:aa:87:22:b7:d9:06:e7:bb:
         8f:e9:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:54:39 2026 by rpki-client