Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
File:                     tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json)
Hash identifier:          AFWJ5bMd5J/60eafXUrxeECTZFVqIH8L8nTywUPpMlQ=
Subject key identifier:   22:6F:25:6F:92:8D:05:B8:10:2E:70:EE:CD:E5:63:94:A3:3E:98:08
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
Manifest number:          010D
Signing time:             Sun 11 Oct 2026 06:38:41 +0000
Manifest this update:     Sun 11 Oct 2026 06:38:40 +0000
Manifest next update:     Sun 18 Oct 2026 06:38:40 +0000
Files and hashes:         1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: FqImIz6mtiI+pPwzeDQX0X/LtppXrGmBbBx2F2n1CSU=)
                          2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: bVsu56znidGrIajKiO+ImUloohJgR7Y2wqgwesz6s7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: Oct 11 06:38:40 2026 GMT
            Not After : Oct 18 06:38:40 2026 GMT
        Subject: CN=6acb2ef1-9e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:a3:1b:9d:97:de:4f:2f:5b:7a:66:d8:76:
                    d2:56:0f:0a:a0:86:80:13:48:6d:3a:7d:91:6d:f4:
                    84:07:ed:bc:da:06:08:c6:59:20:be:a8:3c:ac:71:
                    0f:cd:55:b4:3c:89:40:da:48:57:72:f5:77:fa:64:
                    61:23:8c:36:a1:bc:74:ac:7b:10:10:95:f1:c1:de:
                    0e:e4:48:83:d9:38:7a:b2:91:fe:5e:e7:c7:4b:e5:
                    fb:94:9e:b7:55:35:83:09:94:a9:74:44:43:80:0f:
                    29:db:a7:10:f0:33:c2:31:6d:c7:c3:bc:6a:05:5b:
                    ce:ab:5b:00:1e:91:b4:2f:02:02:32:b4:5c:8b:02:
                    8f:e6:53:08:11:ba:cb:18:a6:df:6e:00:f8:e5:f9:
                    62:8c:eb:74:2e:90:a0:f3:12:78:c2:d4:4c:5f:0c:
                    e2:50:56:d0:71:f5:43:43:65:4c:fb:a3:5d:3f:fa:
                    50:ce:a4:e2:6a:94:2b:b6:17:7a:cd:c1:84:7a:80:
                    7e:de:13:1e:0c:97:31:79:e5:b8:01:97:94:f1:ee:
                    68:4b:3f:55:14:56:08:60:36:71:d1:d9:38:23:f3:
                    4a:96:5a:1f:7d:09:ef:5d:c7:04:68:c6:32:3d:36:
                    a7:57:4a:cc:b9:16:fa:98:67:11:b5:8a:c8:8b:7a:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:25:6F:92:8D:05:B8:10:2E:70:EE:CD:E5:63:94:A3:3E:98:08
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:03:6c:1f:21:d2:8d:20:12:bc:20:ad:93:5c:8d:35:ae:
         1e:11:74:4d:2d:1b:b7:ae:a0:cd:da:11:a8:60:f7:73:e3:4b:
         f0:34:82:a2:51:9a:fb:d0:af:01:6a:b6:18:98:55:14:22:72:
         27:f2:34:cb:7f:31:34:1e:9c:4b:5e:52:10:f2:92:2e:a6:52:
         1b:c8:69:a3:26:bf:56:7f:6e:6a:1a:21:7d:cf:d5:fa:9d:f2:
         ab:15:e3:8d:cd:95:87:a3:bc:78:4e:47:64:0c:51:48:c9:08:
         29:dd:4e:63:91:ca:fa:f5:70:86:ee:f5:27:a3:1b:70:d8:0a:
         c2:fa:3d:e3:dd:7b:67:2b:db:45:da:42:ec:9d:ce:e6:66:a8:
         e1:09:2a:95:61:fc:b0:fc:e7:f3:a2:da:ae:5a:36:0f:22:08:
         ca:3c:7f:86:60:75:5c:6f:8d:84:43:1c:b2:93:0b:1e:5c:67:
         59:bf:ee:6c:f8:15:49:cb:a1:3f:d7:65:3e:ca:99:d9:d9:a4:
         51:a0:a7:05:0f:05:aa:23:a5:cc:f7:31:d0:d6:d6:d4:6b:79:
         c4:cd:a5:8f:be:65:0f:92:a8:52:ca:c8:b2:d2:73:c5:62:92:
         25:46:49:15:79:4d:a1:f6:f7:10:ef:81:cd:fe:09:cc:38:86:
         24:b5:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:22:23 2026 by rpki-client