Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File:                     TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier:          3VrYtAFXP9950hMZo7JBUpAvhuWLqa+8xB89Tt7hIdQ=
Subject key identifier:   CD:4E:FD:63:6C:F8:EB:1C:D4:E0:68:41:5F:96:71:4E:EF:60:4A:15
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer:       /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number:          01BF
Signing time:             Fri 25 Sep 2026 04:01:53 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:52 +0000
Manifest next update:     Fri 02 Oct 2026 04:01:52 +0000
Files and hashes:         1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: 6mA6gAStyDcGdkbAu0XxPD1a+UPuS074Iwa1R5fBE/8=)
                          2: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: ldVTUduJM4awD22oX4Wh1DDTuXz753kcX+6QqQWssrU=)
                          3: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: lrxbuGY2PK1BQs//qiBiMMewL0JNYkGU90gNllT/uBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
        Validity
            Not Before: Sep 25 04:01:52 2026 GMT
            Not After : Oct  2 04:01:52 2026 GMT
        Subject: CN=6ab5f230-8c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:b5:3f:99:79:fd:fc:2b:ed:e0:49:13:c9:
                    a5:29:86:6c:82:d9:19:dd:5f:18:a4:f7:25:0c:a6:
                    97:4e:02:1a:7c:3e:ea:a4:e6:02:a6:8d:8f:56:84:
                    e8:20:1a:09:e8:b3:a1:ce:ad:40:eb:d1:f5:57:81:
                    e1:c1:f3:0b:74:96:70:85:7d:b8:8c:52:69:94:63:
                    a1:f5:c9:e1:7a:db:37:46:66:fd:68:9c:04:9b:56:
                    cc:2a:5a:0f:a6:3a:4d:cd:da:98:7c:4a:12:86:38:
                    0a:7a:c0:ba:b4:05:a2:f0:07:0e:cc:cb:61:fc:a0:
                    ed:21:43:78:27:a6:78:7a:1e:7a:c4:60:4b:ba:c6:
                    7b:0b:4e:bf:e2:15:8f:5c:37:6d:14:83:48:ad:04:
                    f4:d8:47:e1:68:da:2e:aa:1c:7f:01:dd:26:44:e7:
                    89:eb:0f:34:b4:19:32:d8:02:96:63:57:8a:9b:8a:
                    9b:5c:75:99:f7:4e:0c:4a:5a:f0:74:4a:1c:f0:53:
                    3d:ae:47:07:b4:93:59:93:bb:e7:e5:25:01:76:1e:
                    f8:bb:4c:94:c8:b6:1e:27:49:57:7c:e8:cb:88:fe:
                    83:34:ec:b5:ad:0a:65:99:be:59:6f:b5:16:8d:ed:
                    87:ac:40:c6:02:55:28:e9:4c:52:f1:24:98:1f:0d:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:FD:63:6C:F8:EB:1C:D4:E0:68:41:5F:96:71:4E:EF:60:4A:15
            X509v3 Authority Key Identifier:
                keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:9c:5f:ba:9d:0f:cd:0b:87:65:e9:e2:a3:cf:74:2a:7d:
         a1:f0:10:3b:da:32:0b:9f:51:5f:79:b8:e3:f2:5a:0d:0c:23:
         11:00:d3:c3:57:66:2b:e5:96:51:62:8a:af:55:a6:9b:0e:48:
         4c:1a:01:6d:8a:84:dd:1c:e1:a1:11:27:61:52:a0:b3:dd:d7:
         84:a7:f1:35:16:6c:10:89:6d:1f:18:de:c1:1d:7c:45:6b:cd:
         60:98:d7:32:8e:2b:0d:a8:0e:c1:5f:d8:97:3e:c2:2c:1b:0d:
         a3:32:3d:60:56:d3:eb:6d:02:0d:59:e7:1b:6e:30:ae:64:a1:
         7a:7b:b1:7f:4d:ac:ee:04:34:09:fa:55:ee:54:e6:17:14:5d:
         e6:05:73:22:29:b3:21:a8:6c:4e:d5:29:4a:5a:54:d7:e5:9f:
         f2:9a:d5:05:65:cc:b8:bd:96:df:2c:ad:9d:c7:3b:56:f0:59:
         88:d5:ad:28:2e:34:6b:ad:1a:3e:27:7a:2b:36:df:69:75:07:
         97:46:7c:d2:8f:71:21:ba:33:c1:0a:41:62:4a:81:fe:e5:c3:
         15:6c:d3:f6:e7:c1:d7:b5:e6:fc:0b:d8:94:92:49:ea:9e:8d:
         a8:d5:b8:db:ab:db:12:2f:ce:be:5f:37:c5:c4:c6:b3:ba:04:
         99:27:b3:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4
RkFGMUQyQjcwHhcNMjYwOTI1MDQwMTUyWhcNMjYxMDAyMDQwMTUyWjAYMRYwFAYD
VQQDEw02YWI1ZjIzMC04YzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu121P5l5/fwr7eBJE8mlKYZsgtkZ3V8YpPclDKaXTgIafD7qpOYCpo2PVoTo
IBoJ6LOhzq1A69H1V4HhwfMLdJZwhX24jFJplGOh9cnhets3Rmb9aJwEm1bMKloP
pjpNzdqYfEoShjgKesC6tAWi8AcOzMth/KDtIUN4J6Z4eh56xGBLusZ7C06/4hWP
XDdtFINIrQT02EfhaNouqhx/Ad0mROeJ6w80tBky2AKWY1eKm4qbXHWZ904MSlrw
dEoc8FM9rkcHtJNZk7vn5SUBdh74u0yUyLYeJ0lXfOjLiP6DNOy1rQplmb5Zb7UW
je2HrEDGAlUo6UxS8SSYHw2jWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1O/WNs
+Osc1OBoQV+WcU7vYEoVMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx
NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpH
NmZNSzkwcFl4bWVQcngwcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdF+cX7qdD80Lh2Xp4qPPdCp9ofAQO9oyC59RX3m44/JaDQwjEQDTw1dmK+WW
UWKKr1Wmmw5ITBoBbYqE3RzhoREnYVKgs93XhKfxNRZsEIltHxjewR18RWvNYJjX
Mo4rDagOwV/Ylz7CLBsNozI9YFbT620CDVnnG24wrmShenuxf02s7gQ0CfpV7lTm
FxRd5gVzIimzIahsTtUpSlpU1+Wf8prVBWXMuL2W3yytncc7VvBZiNWtKC40a60a
Pid6KzbfaXUHl0Z80o9xIbozwQpBYkqB/uXDFWzT9ufB17Xm/AvYlJJJ6p6NqNW4
26vbEi/Ovl83xcTGs7oEmSeztg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:34:30 2026 by rpki-client