Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          AGB3VVdZ5WNLuO77R82djqTq4mqisfRvYj0b0wo8C2s=
Subject key identifier:   1E:59:5D:81:EA:B6:92:2E:E9:0B:FA:4D:6D:41:34:C7:8F:A4:3A:07
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       0351
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          0343
Signing time:             Sat 03 Oct 2026 01:17:17 +0000
Manifest this update:     Sat 03 Oct 2026 01:17:16 +0000
Manifest next update:     Sat 10 Oct 2026 01:17:16 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: 2RDszvUhsXwD2Uak6Z0+fNNWDNBJk7BSdi9BJ7aV+Ns=)
                          2: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: k7oa0gyVDVstpxNJdtdSBjaevXmXY8KxLGB4YjxHPeM=)
                          3: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: zLRwlyYQoMCNATwicvYcavIJagOdRZfxbGUFbhuhVoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Oct  3 01:17:16 2026 GMT
            Not After : Oct 10 01:17:16 2026 GMT
        Subject: CN=6ac0579d-8aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:db:73:8f:26:2f:f0:0a:37:ba:86:97:e2:
                    55:1d:ae:41:37:49:20:93:37:a2:36:85:10:f1:fe:
                    10:57:dc:22:21:fb:cb:f9:6d:19:fa:1c:80:e1:86:
                    48:aa:6c:86:7d:84:d2:ce:c8:2a:38:54:a2:64:a4:
                    26:bb:c6:e3:16:3c:71:27:74:0f:e0:9c:31:be:27:
                    96:ee:54:e0:25:88:04:ae:ca:71:f0:c9:65:e6:73:
                    d3:6e:25:4d:d7:23:77:e3:70:b8:af:53:ab:58:05:
                    9c:a5:11:f0:96:76:bf:1f:14:67:36:8a:be:81:f0:
                    52:1e:ec:53:42:b7:ab:92:ce:19:6d:d9:4c:48:08:
                    b8:ad:a3:85:72:38:df:65:db:ad:92:e9:46:f7:a6:
                    98:89:70:29:8c:eb:56:cb:df:10:e5:e3:93:d3:5c:
                    c1:85:f3:25:89:20:5d:d1:d0:f4:de:dc:8d:ac:1a:
                    b1:9c:b3:07:25:48:83:a3:d2:36:5d:3a:2f:b0:1d:
                    8b:4b:27:1b:22:d0:0e:79:4a:53:b1:fc:22:ad:1b:
                    14:6f:48:9a:d5:96:16:b2:3c:48:89:2c:ba:49:29:
                    c5:e7:7e:89:e1:16:63:c6:26:d1:57:74:fc:5b:e8:
                    e4:65:67:63:01:78:af:f5:ac:bc:bb:48:0d:88:42:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:5D:81:EA:B6:92:2E:E9:0B:FA:4D:6D:41:34:C7:8F:A4:3A:07
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e3:b9:37:4f:aa:4a:82:08:2a:34:04:81:76:d1:77:51:30:
         52:cd:2d:a9:16:ec:ec:0f:bc:b1:e8:ab:61:ed:56:57:14:06:
         f2:1a:0f:25:97:26:2a:3e:11:0b:da:cb:b0:37:db:c6:ed:33:
         41:bc:5f:71:18:68:4b:2b:ac:4d:bd:57:f5:ee:ef:8c:dd:74:
         8e:d0:08:82:35:5d:67:ab:96:16:e1:92:60:16:a8:53:db:f3:
         b9:1a:00:db:23:c7:bb:5a:2f:58:79:bf:03:81:a5:0c:78:01:
         5f:bd:03:54:f2:2f:67:b5:61:f6:4a:72:59:1d:bf:df:a6:ac:
         8b:9d:ab:ed:47:bb:2b:77:e7:0c:bf:11:56:b9:bf:e9:ee:0f:
         29:b7:f2:69:8e:6b:aa:81:d0:4c:2f:1f:ed:9b:2b:40:ce:d3:
         19:2d:2a:fb:13:a3:cf:a3:f7:33:10:02:6b:a5:12:75:48:dc:
         3d:63:8a:9f:01:b4:3b:90:fa:69:73:13:8c:a2:cb:ff:cc:b8:
         b1:d1:e7:78:b3:e1:71:b7:88:e7:47:82:f1:0d:3d:94:3d:b2:
         f0:ad:77:49:85:88:60:cb:68:61:80:53:26:52:7f:6c:01:58:
         73:73:c2:85:50:a7:0b:e4:a3:0f:ab:3b:6b:11:1c:2b:05:2b:
         fd:74:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:31:33 2026 by rpki-client