Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
File:                     tSBT1BwEGQhTHAz26tfzlryctl4.mft (raw, json)
Hash identifier:          26HoR323abZwk0wLaCT0+ITS4AIUUI++pLhIl6I+ork=
Subject key identifier:   42:B5:87:08:72:0D:8D:5A:2A:F6:BC:14:A2:E3:21:4C:A0:99:F1:D6
Authority key identifier: B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E
Certificate issuer:       /CN=A91CD883/serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
Manifest number:          59
Signing time:             Sun 11 Oct 2026 08:45:32 +0000
Manifest this update:     Sun 11 Oct 2026 08:45:31 +0000
Manifest next update:     Sun 18 Oct 2026 08:45:31 +0000
Files and hashes:         1: tSBT1BwEGQhTHAz26tfzlryctl4.crl (hash: jDr2NFSPsTLDDGvTRsvP6p63KXaIOPuGQaRJ6JCYHjE=)
                          2: 17D6C97C3D7D11F1864FF013BB833773.roa (hash: GGmxmbtP7l6hq2pSZ0GpfnYrJImoQ0VE16XaMS6Xk4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.crl
                          rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD883, serialNumber=B52053D41C041908531C0CF6EAD7F396BC9CB65E
        Validity
            Not Before: Oct 11 08:45:31 2026 GMT
            Not After : Oct 18 08:45:31 2026 GMT
        Subject: CN=6acb4cac-2570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:16:72:64:a5:84:7a:e5:57:7e:ca:aa:75:
                    b6:e1:d7:17:da:8d:d6:90:e9:af:b2:89:23:db:e5:
                    b7:60:f5:ee:6a:28:be:b9:ef:f2:6d:81:d6:5b:c2:
                    e6:1f:ce:30:c8:2e:78:f2:15:7b:bc:bd:f2:b6:46:
                    6b:9e:b8:05:1e:a2:da:c0:bc:3d:2e:71:c8:75:51:
                    24:8b:4c:c8:27:cc:04:57:ed:06:55:63:cb:27:71:
                    9a:8f:88:e4:4c:7b:66:34:b3:39:31:7c:38:f3:e3:
                    cc:15:26:38:de:45:d6:61:3b:d5:0f:46:b4:84:60:
                    68:be:dd:24:b9:af:9f:80:67:86:5b:9b:2e:b0:9f:
                    8e:cd:a2:66:0b:39:11:9b:91:de:03:c2:11:73:57:
                    03:b5:ff:99:28:6d:c8:5b:c1:32:6e:d2:37:f3:9b:
                    7e:cf:88:88:81:c5:41:f8:cd:eb:20:91:30:42:75:
                    58:a9:6d:c4:48:7a:eb:af:70:43:92:ff:9e:20:cb:
                    01:46:d6:19:9e:d1:70:8d:b4:08:e6:65:9a:26:b5:
                    24:3b:ae:ad:d7:21:ae:8f:b4:83:60:b4:93:23:ce:
                    e9:c4:a3:99:a4:52:be:67:2b:b7:cf:e0:31:f4:f7:
                    c6:0c:a6:94:f9:bd:77:42:10:ec:08:c8:f2:7e:55:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B5:87:08:72:0D:8D:5A:2A:F6:BC:14:A2:E3:21:4C:A0:99:F1:D6
            X509v3 Authority Key Identifier:
                keyid:B5:20:53:D4:1C:04:19:08:53:1C:0C:F6:EA:D7:F3:96:BC:9C:B6:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSBT1BwEGQhTHAz26tfzlryctl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD883/85B50CB03D5A11F1A8C898C8A8833773/tSBT1BwEGQhTHAz26tfzlryctl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:52:be:80:59:ef:4d:f9:06:bd:91:1a:ac:01:8b:24:e3:7a:
         3a:e6:11:d1:20:a0:e9:c4:8c:94:72:5a:ca:e2:69:30:3f:b4:
         90:c1:5b:bd:9f:be:56:73:52:ed:be:5b:e6:f8:d8:44:40:05:
         a7:ed:54:d4:d3:8b:f9:c9:8d:78:b4:87:0a:64:81:46:f1:1a:
         69:d2:bc:91:65:5f:62:b6:54:eb:be:59:7e:9c:cd:ad:a9:07:
         bb:b7:ed:18:64:6a:be:bc:cf:13:c3:d6:4e:54:69:7d:23:35:
         6d:f5:bc:43:a2:a8:58:a0:14:cc:9b:36:52:90:68:df:eb:77:
         6c:d6:49:f0:16:63:71:92:cf:6b:69:a4:45:66:b5:d5:01:f0:
         3f:68:b4:85:19:23:86:d9:ac:14:0b:01:5b:04:a3:f2:cf:8f:
         1b:96:8c:30:89:b3:5b:c2:b4:26:ba:56:84:f3:70:d4:89:29:
         0e:ab:e1:eb:aa:93:54:06:8f:1f:8f:51:03:07:be:03:7a:5d:
         6e:c9:96:18:5e:31:bb:ab:3d:33:c4:0e:c1:84:84:bc:1f:d2:
         52:b2:47:a7:1a:11:bb:f9:c1:e1:47:1f:8f:d1:3c:98:3c:5b:
         48:ae:b2:e0:a3:9e:48:19:b9:30:4b:30:b2:14:58:4b:94:43:
         fe:cd:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:58:49 2026 by rpki-client