Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File:                     Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier:          Rmu/9vB+8+5yPj7UGBGDs/gGRgk4sTE1ZQ3hPp2oWgg=
Subject key identifier:   7A:C8:A7:2B:D8:60:09:FA:75:2E:8D:B2:C7:95:0A:27:A8:71:30:5C
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer:       /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number:          027F
Signing time:             Sun 20 Sep 2026 19:41:11 +0000
Manifest this update:     Sun 20 Sep 2026 19:41:11 +0000
Manifest next update:     Sun 27 Sep 2026 19:41:11 +0000
Files and hashes:         1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: axsCqlFlH2+OedA7yVQX9jxpY/mhVFQuJDBEgFltzOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
        Validity
            Not Before: Sep 20 19:41:11 2026 GMT
            Not After : Sep 27 19:41:11 2026 GMT
        Subject: CN=6ab036d7-3ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:ef:e1:3c:6e:8c:b4:88:4c:60:2b:5b:63:
                    02:46:50:f2:46:a2:f4:f1:e2:10:3d:6d:e3:c2:11:
                    43:0c:08:b6:97:02:fb:35:dc:49:a9:4a:d4:32:a0:
                    e9:34:79:19:9a:58:db:8a:d2:b5:db:69:68:0a:81:
                    fd:2e:e2:da:74:fe:63:f9:e0:88:ee:8d:04:be:73:
                    74:6d:d6:e3:56:d5:c0:47:f9:c6:d0:46:ff:80:c6:
                    55:cc:b7:96:7c:9b:f4:f5:6d:da:55:68:05:b7:23:
                    77:91:56:af:a6:2b:c0:c7:92:ae:ee:06:d8:0e:80:
                    43:67:b1:3a:a7:99:23:60:2d:2e:5d:76:b9:79:48:
                    d1:1b:58:0a:7c:ad:58:9b:0b:36:3d:ba:8a:a3:9c:
                    9d:c4:77:72:22:31:76:72:6b:38:11:c1:6e:67:23:
                    d2:26:5f:23:e5:98:94:34:e6:8e:ec:93:90:75:3b:
                    aa:63:fd:2a:be:5a:fd:00:db:18:df:92:78:55:dd:
                    c3:cd:a6:51:7a:e9:e4:92:94:ae:1a:5c:7e:a1:5e:
                    5f:a3:14:d7:bc:b3:3b:24:c3:04:e1:23:e2:b8:aa:
                    b8:d9:5f:5b:30:46:56:31:12:5f:14:22:d7:6b:93:
                    8d:2b:86:83:ce:e9:76:d8:53:61:34:05:c3:19:73:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:A7:2B:D8:60:09:FA:75:2E:8D:B2:C7:95:0A:27:A8:71:30:5C
            X509v3 Authority Key Identifier:
                keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:d9:4f:63:47:e5:31:49:87:9a:16:66:91:60:cf:2c:98:
         2b:eb:8b:99:c7:0b:bd:1e:26:4c:24:b2:cc:00:0d:ac:7f:57:
         8b:2a:7c:66:3c:0d:a4:65:3e:b5:c1:fd:43:d3:79:fb:a8:56:
         e0:45:3f:5d:43:c9:26:93:0f:b3:75:90:88:dd:00:c6:d5:d2:
         5d:eb:5b:cf:a4:d5:9f:f8:99:06:f4:40:44:ac:29:68:8d:18:
         eb:82:a8:6a:96:63:ed:1b:b7:42:15:03:ff:20:a4:f8:e3:58:
         43:12:a6:a9:06:1c:b4:d1:72:01:61:90:31:1d:2f:c4:90:c1:
         60:dc:c7:29:15:ce:46:c6:d4:9c:aa:1a:59:68:e6:69:6e:a2:
         75:4e:b0:bb:b2:63:4c:df:2b:67:f8:a6:8b:5f:86:2e:fe:a3:
         01:d3:20:35:a4:e0:b0:26:73:bb:f3:b2:2a:11:9f:65:fd:fe:
         ee:41:29:9e:4f:2d:42:9c:42:e4:f8:52:79:b9:26:e3:7b:57:
         15:ce:92:90:c7:2a:58:ec:d0:29:d0:bb:cb:0d:79:9e:d7:7d:
         86:b0:a0:a3:53:1e:e3:b4:b5:13:c3:00:e4:43:64:ae:54:61:
         b5:56:1c:06:38:fd:06:5c:c1:d8:55:30:e8:d4:c3:e2:4b:47:
         b6:c6:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:45:04 2026 by rpki-client