Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File:                     Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier:          3hL5DgQNKUzfB+IU6mcUHYjReqaC1Y+vuwgMtWAeKAA=
Subject key identifier:   9B:50:C2:6E:1C:C6:05:C9:05:E2:B6:C7:79:EB:0C:23:86:75:7D:A2
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer:       /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number:          0559
Signing time:             Thu 24 Sep 2026 23:15:37 +0000
Manifest this update:     Thu 24 Sep 2026 23:15:36 +0000
Manifest next update:     Thu 01 Oct 2026 23:15:36 +0000
Files and hashes:         1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: Ql9YNQgUWHW7tk2V52EYOH7pXdcVjz/jkz6H73NsaE0=)
                          2: 7B0E744E994111F09D282143C4F9AE02.roa (hash: RIRYfr61sHgifDiH6nHo4HSm1yDt5mAbyC1X19pS+Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
                          rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
        Validity
            Not Before: Sep 24 23:15:36 2026 GMT
            Not After : Oct  1 23:15:36 2026 GMT
        Subject: CN=6ab5af19-e278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:59:72:6f:b5:b7:8e:9c:fc:bc:75:bb:92:
                    a9:4b:3d:cd:5e:fb:a1:c6:66:7d:78:9c:d6:12:3a:
                    c4:f2:a1:2a:80:c5:cc:fa:e6:6d:56:f3:7e:db:66:
                    8e:97:41:08:80:d7:fe:40:71:17:48:59:30:77:5f:
                    29:eb:2d:72:4b:fe:22:e0:f3:cc:09:d1:84:d9:fb:
                    80:42:62:bd:1f:b9:93:71:d8:42:c1:83:23:20:73:
                    f0:66:d5:00:9c:2e:0f:e8:1a:5b:42:9f:49:57:13:
                    fc:3f:cd:83:77:6f:9b:d5:d8:3d:f9:0a:a5:54:d7:
                    f1:bb:a4:51:c2:ed:31:a8:54:c6:6a:24:a8:c0:fd:
                    b4:04:81:64:f2:c8:30:12:2f:e0:ac:67:88:2f:14:
                    0f:fb:60:93:67:c2:ca:db:35:63:73:f3:d4:46:40:
                    b6:de:8b:62:2e:e4:56:d8:98:19:64:72:51:93:1f:
                    0c:b7:f2:50:0f:24:14:55:70:5b:ab:fc:e2:73:bc:
                    04:f9:4e:7d:0d:3d:95:da:6f:86:ae:63:5e:60:8e:
                    dc:84:05:fe:79:49:a6:88:b9:6f:4b:cd:78:0e:c1:
                    c9:5d:df:08:cc:0f:2d:35:43:fe:7d:45:d6:64:37:
                    85:f9:13:1c:2e:6c:ca:6e:33:3d:30:4e:4a:df:22:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:50:C2:6E:1C:C6:05:C9:05:E2:B6:C7:79:EB:0C:23:86:75:7D:A2
            X509v3 Authority Key Identifier:
                keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:f6:52:4b:d4:3d:22:9f:5d:7d:ed:24:c4:00:ef:d5:2a:
         b1:af:54:70:8d:31:23:32:98:7e:15:28:71:4c:4e:4f:80:b1:
         28:ba:48:77:f7:20:87:22:3f:79:2e:32:c9:d8:92:7d:81:38:
         71:f5:ed:91:34:ec:9e:71:f3:b5:11:31:d4:2a:99:9a:71:34:
         6b:bf:d1:8c:b1:ed:0f:84:93:70:d6:d2:ef:bf:89:d6:29:07:
         21:ab:74:9b:1f:e4:8c:0a:a0:04:fc:87:97:e6:32:f9:af:ff:
         67:60:2e:cf:38:28:9b:be:fe:57:27:72:65:f3:2c:f9:c7:e0:
         17:e6:f3:fa:85:30:79:63:cb:46:44:d6:43:5e:74:f1:82:0e:
         17:40:8c:ec:92:60:df:65:b2:9b:f2:21:d6:dc:e9:60:fa:79:
         f8:15:99:c5:ea:bd:10:55:c6:ad:e8:b3:12:9a:b9:eb:58:fe:
         64:e1:7f:47:83:2c:14:8d:0d:41:d5:41:3d:2b:1d:e8:be:2b:
         c7:e8:91:6f:7d:f6:d0:e8:6a:b7:45:6e:97:15:b5:8b:d2:76:
         06:7c:8f:91:24:78:5f:4b:ef:81:90:62:7c:f4:ba:90:b4:b7:
         2f:83:ec:81:77:8e:fa:45:f2:c5:52:b7:ab:e6:d1:cf:d0:e2:
         a8:15:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:45:58 2026 by rpki-client