Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
File:                     TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json)
Hash identifier:          pahP+xgaS7AxA2G9w6mWx5Rx+DkTCFk5Jv8ZtCATxw0=
Subject key identifier:   C1:00:4B:D8:E5:16:3B:3D:48:9C:79:9A:DB:1D:29:77:47:1D:53:B1
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Certificate issuer:       /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial:       10DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
Manifest number:          10D0
Signing time:             Sun 20 Sep 2026 17:17:42 +0000
Manifest this update:     Sun 20 Sep 2026 17:17:42 +0000
Manifest next update:     Sun 27 Sep 2026 17:17:42 +0000
Files and hashes:         1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: 4wSmkqe8XHnzKNhgBcvVuxp+Q1wK5cgVq95e0BKtYyY=)
                          2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: U8acwf2BkkT2MWqZuHqyhaYsOZaXmV1y4mf2DIlSMAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
                          rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4319 (0x10df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
        Validity
            Not Before: Sep 20 17:17:42 2026 GMT
            Not After : Sep 27 17:17:42 2026 GMT
        Subject: CN=6ab01536-9ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:00:2f:e6:b0:05:db:43:ab:3d:3c:5e:a5:
                    38:5e:a5:81:e4:a6:b7:f5:08:0b:a2:9e:ab:15:38:
                    f3:05:90:e5:ee:42:ce:e3:39:9a:55:66:2c:30:5d:
                    aa:18:06:91:5f:58:56:8c:6b:58:73:5b:86:40:b3:
                    e1:1f:6f:a8:cc:e5:94:27:1f:95:b5:ce:19:30:35:
                    b9:4d:95:77:cc:e1:e8:ba:d7:85:6c:02:cb:87:bb:
                    fe:f6:22:52:a2:7f:66:3f:1b:66:3c:cd:0d:fd:47:
                    d1:5e:95:86:60:59:da:90:80:f6:eb:3d:29:49:b4:
                    a2:7d:3c:77:08:0c:df:ab:c5:ec:60:2a:ca:71:6a:
                    e1:a1:36:3a:a5:e5:5f:b4:b0:3f:28:1b:6c:12:4e:
                    22:5f:8a:19:d9:e0:c2:9e:19:13:5d:80:78:37:13:
                    fb:72:82:e6:c2:f3:fe:61:46:0d:0e:96:eb:76:23:
                    d5:ce:f3:a3:41:d5:af:e8:6a:ae:91:81:b7:3c:12:
                    4e:88:1c:fc:5c:44:32:a4:d3:50:ba:06:98:48:f1:
                    8e:ed:e5:c2:02:57:64:62:58:5d:77:5a:3f:75:f5:
                    07:97:d0:57:c9:44:71:e3:0e:b6:c0:c1:59:5e:57:
                    2b:fe:93:3f:7c:4c:d3:43:5f:25:fd:fb:90:7b:48:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:00:4B:D8:E5:16:3B:3D:48:9C:79:9A:DB:1D:29:77:47:1D:53:B1
            X509v3 Authority Key Identifier:
                keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:53:e0:bb:c3:a2:bf:f8:59:1c:74:e8:97:81:32:3e:ed:
         bb:ee:83:ec:90:c8:c0:75:57:07:d7:31:a3:f0:c7:56:fe:26:
         6b:0b:c0:ac:13:27:49:cc:4c:0b:f3:f6:e4:93:fb:92:c6:43:
         b4:70:f5:65:56:ca:89:55:6e:ac:24:e3:7f:fa:66:e1:8b:f6:
         01:3c:b2:80:1a:a5:c6:a1:9a:46:2f:cc:06:ba:e7:5e:28:4a:
         e8:2b:61:4d:4a:12:d7:23:46:b1:0d:23:39:2b:11:73:92:71:
         ea:8b:fb:de:80:4d:6b:ab:65:34:4d:ca:c3:94:36:d7:be:c4:
         3a:ff:ea:26:92:6a:1c:8b:95:95:df:df:1a:17:ca:36:14:4a:
         58:04:72:6f:22:3f:6a:dd:2a:c6:e5:2d:c9:4c:7a:22:fa:34:
         7b:26:e7:a4:ef:87:fe:2f:36:4b:5e:95:04:3a:4e:ff:da:d3:
         31:c8:da:e6:9f:ec:b9:06:c7:91:b8:11:5e:6c:aa:55:ef:82:
         bc:a5:20:d7:20:f2:8b:85:f8:a6:e0:a0:e1:07:59:4b:07:af:
         f5:ec:01:9b:79:75:d6:54:74:5e:5e:66:e3:96:60:64:cc:25:
         9a:a2:d2:6b:48:6c:87:b4:0f:e0:0f:da:63:e1:d0:1b:91:85:
         b8:ae:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:18:48 2026 by rpki-client