Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File:                     tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier:          cjG0sze7hcdWV0cemqFqAdwxHqkcSTgfhcIrMbSGcnc=
Subject key identifier:   F5:2F:A1:D1:13:F8:6B:BC:10:61:8D:D9:8E:D2:FB:1B:9B:44:F2:D9
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer:       /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial:       03CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number:          03C5
Signing time:             Wed 23 Sep 2026 00:11:01 +0000
Manifest this update:     Wed 23 Sep 2026 00:11:00 +0000
Manifest next update:     Wed 30 Sep 2026 00:11:00 +0000
Files and hashes:         1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: 42EE9chDyfcunOeBciFnsYzACGvL5xgoNfXTRq1mDco=)
                          2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
                          rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
        Validity
            Not Before: Sep 23 00:11:00 2026 GMT
            Not After : Sep 30 00:11:00 2026 GMT
        Subject: CN=6ab31915-be42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:e1:d0:cc:23:8c:b8:aa:9f:83:5d:43:88:
                    19:44:0b:0b:9a:14:ea:75:f1:b6:9d:31:1c:7b:89:
                    6e:b5:6c:5a:5c:6b:cc:55:99:02:a5:de:95:6f:d6:
                    cf:a7:e9:4e:5d:01:06:76:2d:b4:e4:96:1a:dd:4a:
                    3d:97:a5:8a:cb:ee:5b:17:a3:41:bd:55:ee:92:59:
                    19:a7:b8:3a:60:c1:1f:62:2c:af:41:9e:78:0f:f7:
                    1f:9b:eb:58:f7:0b:eb:1d:e9:b3:47:cb:df:68:7a:
                    8a:ad:b1:ca:69:32:cd:fc:f2:40:92:26:15:63:93:
                    e3:16:d0:5d:eb:b2:20:e9:13:96:9b:09:b2:64:75:
                    df:23:42:51:6f:26:51:31:dd:4a:6e:c2:a0:2b:eb:
                    ba:40:46:db:f8:fb:ae:08:aa:7b:fb:e8:76:af:4b:
                    5d:90:6b:5e:82:bb:b0:40:76:07:cd:d3:5f:d1:da:
                    a6:25:a4:6e:2b:e3:e4:07:90:3d:58:2d:47:e7:05:
                    3c:d1:a9:58:22:72:ba:15:f5:56:03:29:9f:6f:d4:
                    3b:07:df:c4:a8:7a:f7:91:41:27:e2:ad:0e:61:fb:
                    cf:66:aa:90:bc:4c:ce:7d:68:7e:e3:81:26:d6:90:
                    1a:46:9b:4c:16:0e:ab:25:ac:48:ec:d1:83:51:61:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2F:A1:D1:13:F8:6B:BC:10:61:8D:D9:8E:D2:FB:1B:9B:44:F2:D9
            X509v3 Authority Key Identifier:
                keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1e:1b:57:cb:09:86:c3:9c:aa:1b:3d:fe:70:31:8e:ac:2d:
         a0:f8:38:2e:9d:a8:0e:81:09:fe:f0:4c:dd:12:8c:e0:ad:b2:
         31:46:aa:60:04:0a:63:10:14:8e:59:77:26:30:c4:f8:17:e8:
         ae:8a:b7:c1:a1:0b:9b:f1:1d:67:ec:f1:55:cc:90:5c:56:e3:
         75:6d:3a:21:00:96:af:8a:e0:ae:5c:7a:50:ed:95:f8:f5:84:
         b2:d3:69:7f:d3:eb:3b:c4:e1:10:82:80:55:b3:9f:df:77:e2:
         fb:b2:ab:27:dc:08:d1:6c:75:1d:25:bb:d2:94:f6:65:8c:34:
         f2:54:f6:dd:b4:8d:ee:c2:4b:bd:c8:8b:81:2e:e2:4a:49:21:
         98:50:1a:b8:4d:1f:d9:78:f3:13:04:ab:8c:67:67:59:fe:ba:
         e2:b8:3c:e3:f0:6b:13:a8:ac:43:b5:38:f3:19:7a:a6:98:cd:
         f2:5c:f5:67:98:36:de:ff:ab:9f:43:6c:64:2d:36:29:50:3b:
         77:2c:7a:e1:95:4c:3a:cd:25:e3:7c:dc:ae:30:f0:1d:c5:e4:
         8a:89:93:50:c4:3c:f1:89:0d:71:62:2d:48:95:59:ea:e8:76:
         3e:5f:73:db:a1:d6:7a:e4:c8:ef:6e:64:dc:8e:ff:2a:39:d9:
         03:75:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:32:22 2026 by rpki-client