Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
File:                     TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json)
Hash identifier:          jFo6xVbzoXo/IdZoZUB1Jgxn91U6VxX/Ix2rIewtx5I=
Subject key identifier:   D8:E3:2B:06:E2:8D:4A:BE:22:59:8F:36:7A:F9:67:54:11:63:2B:85
Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7
Certificate issuer:       /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
Certificate serial:       079D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
Manifest number:          0794
Signing time:             Sun 20 Sep 2026 21:25:30 +0000
Manifest this update:     Sun 20 Sep 2026 21:25:30 +0000
Manifest next update:     Sun 27 Sep 2026 21:25:30 +0000
Files and hashes:         1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: X+GRbIt+dz47OeQXqrCSbPkavW70HIcR0CsNQMnQONw=)
                          2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: s/2DoIpcOiXHmZ/+KE5myA7kBVq4IytAgITPwjdjfgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl
                          rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949 (0x79d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
        Validity
            Not Before: Sep 20 21:25:30 2026 GMT
            Not After : Sep 27 21:25:30 2026 GMT
        Subject: CN=6ab04f4a-da9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:b4:f8:18:ee:42:65:43:a7:8a:29:09:3d:
                    f1:8f:ba:bb:41:c5:45:3c:ee:f2:70:16:24:bf:9f:
                    47:76:d9:b0:10:04:a9:8c:bb:18:14:93:ca:a5:0a:
                    9f:c7:34:30:c8:57:9b:51:a5:29:f6:89:63:54:db:
                    78:9a:c8:82:41:33:c4:cf:d9:a9:8c:f6:49:fb:c8:
                    3e:de:58:cd:f7:fe:e7:c8:3f:8f:54:0d:06:0c:f9:
                    ce:fd:55:12:1f:33:b9:54:d6:5d:c4:f6:4f:fc:09:
                    41:61:f8:e6:11:4d:37:9d:d0:15:af:91:e8:35:56:
                    76:40:b0:51:f6:b5:64:0f:21:1c:58:40:ef:ef:a1:
                    9f:64:5a:bc:e5:42:82:93:51:83:f5:e4:40:77:c0:
                    01:bb:56:3a:38:e8:ab:eb:86:3b:2a:6f:cf:82:d1:
                    1f:f1:29:25:1f:6d:1e:ee:ce:1f:dd:35:d8:e2:5c:
                    0b:29:89:95:74:2e:8f:46:5b:34:e0:a3:1a:f5:a9:
                    2d:26:e7:fc:28:b9:b1:33:2e:5f:80:5b:94:3a:ce:
                    fa:c7:d6:70:1e:71:e4:f0:97:70:5f:8d:61:a2:7d:
                    d4:c4:35:0d:92:95:e6:95:c7:48:ab:64:f8:69:e4:
                    46:f6:20:9c:d0:39:23:d1:39:65:3f:3e:8f:b4:4d:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E3:2B:06:E2:8D:4A:BE:22:59:8F:36:7A:F9:67:54:11:63:2B:85
            X509v3 Authority Key Identifier:
                keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:21:99:4d:91:8b:b4:0d:63:2b:11:4d:0d:75:eb:2b:4d:84:
         e8:f0:dc:96:c4:c2:ab:4d:1f:79:dc:12:07:6a:53:01:45:43:
         36:5c:c9:fc:a2:6d:56:6a:03:c2:68:fc:8e:a8:45:2b:a9:0a:
         a8:31:27:88:e9:63:3e:c0:31:a5:28:16:4c:1d:61:23:3f:f7:
         42:d1:2a:bc:d6:a3:df:96:37:4a:73:e3:4e:7f:49:06:e8:c0:
         9b:25:0a:10:d2:ab:e4:49:4f:5b:f6:ad:12:23:c0:ae:76:13:
         84:aa:9a:2c:70:85:df:13:c8:ff:58:a1:0f:d8:ec:8d:63:a3:
         12:48:a2:33:fc:00:8c:86:f8:3d:23:b9:0f:bd:0c:e7:c5:8c:
         18:66:6a:83:1f:9e:97:28:55:64:06:0c:6b:29:9e:07:bb:8c:
         c2:81:b1:7c:b3:d9:87:6d:ff:87:54:ae:98:f9:86:cc:bc:37:
         d5:cb:7d:54:80:c6:f2:91:a9:31:0f:ee:fb:58:02:a0:e3:85:
         74:ef:dd:a3:f0:c8:78:32:0e:7a:af:47:0a:e5:a3:ef:9d:af:
         e9:5f:7e:1a:a8:64:26:4b:4a:9b:05:47:9b:e2:6e:a8:84:74:
         33:b4:3a:6f:9b:d6:a8:1d:2d:98:94:9a:66:44:09:b4:2f:7c:
         d5:49:3b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:47:45 2026 by rpki-client