Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File:                     Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier:          ZRlyG4LzuXwY2K9/fAH1KChYe3FF1QEVB+H8Wl+sP2c=
Subject key identifier:   50:CF:8C:E5:F9:F7:31:F2:3D:9F:98:E8:2E:08:18:D1:5E:4D:F6:46
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer:       /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number:          0114
Signing time:             Sat 17 Oct 2026 06:39:10 +0000
Manifest this update:     Sat 17 Oct 2026 06:39:09 +0000
Manifest next update:     Sat 24 Oct 2026 06:39:09 +0000
Files and hashes:         1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: X/pOw0gFrt/BteU/KvM9D13Gf42VhFyMIoZU8J1UhG0=)
                          2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
        Validity
            Not Before: Oct 17 06:39:09 2026 GMT
            Not After : Oct 24 06:39:09 2026 GMT
        Subject: CN=6ad3180d-8359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:43:e7:8a:c5:8e:2b:76:b0:0f:23:ed:3d:
                    c2:cf:15:56:09:0d:b7:4e:6d:9d:ce:2e:19:d1:83:
                    09:26:e0:6d:a4:95:47:9c:ae:16:8f:63:23:86:0e:
                    c2:b5:db:dc:79:6f:6b:a5:44:17:c4:1a:ca:77:eb:
                    d6:1f:cc:bb:a2:f1:53:bb:ca:a2:6e:65:f2:05:4e:
                    6f:a7:97:41:50:1e:58:78:71:35:05:71:1b:48:00:
                    74:2e:35:6a:39:a2:61:cd:b1:1c:55:e1:a0:57:ad:
                    70:ef:b7:15:d9:1a:ef:9c:5d:71:c9:0c:8e:55:ac:
                    23:c7:5f:51:95:26:68:d4:f6:4c:bf:7e:ae:8e:f6:
                    25:e0:c9:16:3e:27:ff:2f:f9:c2:86:25:d2:ee:a7:
                    0e:01:99:53:9e:22:91:3f:d6:e8:cb:46:f8:35:80:
                    04:86:67:ee:f5:f1:75:aa:da:88:7c:b2:1b:e1:c1:
                    a3:5d:90:fa:0e:2b:c8:ba:23:17:86:80:89:36:63:
                    eb:cf:59:ad:77:2d:f6:2f:8d:f7:4e:81:55:04:36:
                    d2:24:e0:5a:ad:f7:96:dd:2f:ff:05:78:b5:3f:4a:
                    f1:5b:72:bc:37:f0:a7:a7:bc:cd:71:39:50:4e:28:
                    cc:66:54:f4:03:aa:c3:e0:f3:0f:d9:49:e3:8c:02:
                    cc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CF:8C:E5:F9:F7:31:F2:3D:9F:98:E8:2E:08:18:D1:5E:4D:F6:46
            X509v3 Authority Key Identifier:
                keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:87:66:ba:99:ef:22:3c:9a:52:19:d2:c3:5e:c0:1b:d2:2a:
         cb:c1:ad:d6:90:5d:92:e4:a4:68:b9:6c:7f:e4:b2:54:f4:18:
         76:4a:7c:2a:38:85:e0:26:d6:9d:3d:ff:f2:5a:e4:c0:23:f0:
         8b:fc:e0:4c:c9:2a:f8:6f:5e:c5:b4:47:ef:a8:57:28:5e:3f:
         f7:01:58:7a:8f:b1:04:1c:00:49:35:39:75:a5:f3:e1:85:83:
         23:6b:19:27:11:e7:eb:ea:4a:74:a5:2f:c0:f0:1c:06:ed:a0:
         64:96:ab:f4:21:d0:29:58:85:e8:df:68:f9:43:16:01:ca:0a:
         80:32:02:a2:5b:29:1c:35:44:2d:dc:53:f4:ed:82:5e:c9:45:
         ff:1d:15:99:4a:bf:d6:f1:01:27:e2:e6:c1:f8:b9:35:6c:2c:
         33:f0:95:0c:eb:36:f0:90:0d:37:36:5a:2a:0f:92:c5:f7:d7:
         47:81:9b:da:a0:0c:e4:a2:e5:ec:6b:18:2b:69:9d:37:9e:0b:
         be:32:b6:9a:7e:6b:d6:26:09:7f:12:db:55:c9:30:a3:a3:9b:
         a3:ea:04:f9:08:e2:95:b0:27:15:7d:e2:a0:59:82:b8:ee:81:
         f2:a2:d8:eb:b5:2a:bd:0d:21:2f:8f:76:49:c8:c9:db:d6:fc:
         8e:d8:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 13:07:58 2026 by rpki-client