Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File:                     TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier:          UblIN0xAutxC2L5viJtauSK0AylNbjnkFMb8T5nR9IA=
Subject key identifier:   B5:91:F9:1F:C5:58:5C:FB:61:39:C3:95:5E:59:E0:EB:71:EA:80:68
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number:          0123
Signing time:             Mon 21 Sep 2026 05:59:12 +0000
Manifest this update:     Mon 21 Sep 2026 05:59:11 +0000
Manifest next update:     Mon 28 Sep 2026 05:59:11 +0000
Files and hashes:         1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: D36E71IGQmAf3OVBArQ4RIJK9Q6IaSaNiBOCS255Aqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: Sep 21 05:59:11 2026 GMT
            Not After : Sep 28 05:59:11 2026 GMT
        Subject: CN=6ab0c7af-51c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:ee:ba:a1:a2:6f:0b:98:74:f7:0f:0d:33:
                    5f:4d:37:b4:25:89:cd:06:86:29:7f:67:f6:60:df:
                    27:27:2c:e7:90:2a:6c:24:3c:e2:7f:43:c3:f4:15:
                    cd:93:38:19:e7:d7:93:cf:3e:d8:08:bc:00:10:99:
                    68:68:e4:c0:64:e0:e4:87:dc:73:02:80:ad:d8:36:
                    41:21:20:35:f0:6f:b5:0e:46:73:c0:6b:a7:45:93:
                    6a:e1:a5:6e:b9:e9:28:4f:f7:07:6e:b8:c1:fc:0c:
                    a3:a6:19:00:a1:9c:63:f3:2b:3a:9a:5c:eb:4e:bc:
                    39:e9:fc:af:0f:b6:54:aa:4d:31:51:53:a1:a5:87:
                    e5:84:90:1d:25:14:73:b8:4c:18:86:36:ec:11:af:
                    f2:1f:ff:df:fd:5e:19:b3:44:fd:f8:85:dd:82:c5:
                    45:ad:1f:a2:6a:36:c5:0a:d3:4e:41:f1:b5:ea:06:
                    23:79:6c:b3:a6:15:0c:07:15:3c:1b:d2:65:36:53:
                    b5:44:a4:83:fe:5b:ef:65:22:02:6c:61:02:9e:51:
                    62:d4:6e:a8:0d:05:2b:a6:6f:2d:50:c9:c0:84:fb:
                    5a:8f:c0:f8:93:da:ce:68:13:2b:ea:ec:49:c8:53:
                    5d:45:f1:cc:6f:61:77:7f:a8:68:88:ad:78:7f:95:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:F9:1F:C5:58:5C:FB:61:39:C3:95:5E:59:E0:EB:71:EA:80:68
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:3a:7a:0c:10:59:ec:db:53:a2:71:6a:31:d5:62:02:a7:81:
         3d:0b:71:ff:ff:06:ec:1c:ea:f5:30:ef:40:f5:f8:2e:92:33:
         fa:47:95:44:3b:c3:93:7e:66:91:d8:20:b7:bf:1e:68:c1:ec:
         df:63:2f:47:0d:7b:5d:8e:9d:8f:5d:84:0f:36:65:10:ce:0f:
         9c:20:61:65:ff:d8:18:03:77:1d:09:50:ad:df:ca:e5:c4:f2:
         97:4a:31:dc:c8:1a:c2:95:d7:c7:06:70:32:e3:2f:b9:2b:2a:
         cd:80:da:62:85:cb:3d:79:21:4b:7a:11:43:09:40:fb:64:cd:
         5c:fa:61:40:cc:6e:af:3e:04:24:14:b7:38:2f:1c:ff:ee:db:
         35:40:d8:d1:87:71:de:50:f8:51:86:5c:07:e2:ef:6c:d2:ed:
         0f:78:2d:14:60:89:a9:72:23:40:5b:dd:bb:78:ab:ad:8a:1d:
         dc:0d:7e:76:4a:a7:21:ee:ed:0c:61:08:34:a6:48:4f:57:6a:
         c1:74:3b:de:24:24:2a:d4:b4:92:91:7b:0e:a2:7c:1f:29:7b:
         46:a1:90:cc:da:83:65:14:60:19:ad:b1:21:a4:04:ce:1d:2c:
         c1:ec:88:e3:33:87:e7:7b:48:84:2f:83:40:04:8e:b1:ce:cc:
         a5:65:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:01:56 2026 by rpki-client