Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
File:                     sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json)
Hash identifier:          tu7rxVAa4hhgxXg2bxitpzHjm7meBmXlHQ8K1GL0OyE=
Subject key identifier:   71:37:71:77:2D:DC:FF:7F:F8:F6:3C:CC:D6:EE:C0:FC:47:72:E6:74
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Certificate issuer:       /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial:       02B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
Manifest number:          02AC
Signing time:             Mon 09 Nov 2026 01:39:22 +0000
Manifest this update:     Mon 09 Nov 2026 01:39:21 +0000
Manifest next update:     Mon 16 Nov 2026 01:39:21 +0000
Files and hashes:         1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: +BPpPd7qNMUtsHCzGHyS9+EwsphZiYbLtOMGmiv6uzo=)
                          2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: OlhxfKJnAdWPZRTziNuAAf3u2VarejykN4jtNOABqQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 01:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
        Validity
            Not Before: Nov  9 01:39:21 2026 GMT
            Not After : Nov 16 01:39:21 2026 GMT
        Subject: CN=6af1244a-8274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:20:92:39:4d:95:98:e2:db:92:23:f3:72:
                    b9:73:0e:48:e7:62:eb:01:64:11:93:23:4e:33:91:
                    bd:3f:9c:24:b5:21:72:c7:ca:8c:05:0a:5e:4d:2e:
                    73:2f:7f:fe:28:5b:05:2e:1c:cd:0a:74:9f:1e:4f:
                    50:7b:de:56:f7:4e:50:89:94:d8:b4:42:bb:96:65:
                    0f:94:77:74:4f:e3:11:01:d1:2e:d0:68:99:5b:d4:
                    ec:8e:18:26:42:c5:7c:ab:6c:ae:4c:de:bf:e9:19:
                    e6:7e:d3:47:be:e1:05:63:91:01:33:07:c5:a8:7c:
                    0a:3b:cd:e5:53:64:26:9f:06:21:e7:97:a6:d9:92:
                    c5:14:c0:7c:7e:cc:58:8d:0a:22:ec:9d:03:6d:9c:
                    78:62:35:46:08:a5:0c:da:6d:3f:8d:42:b9:8d:58:
                    cd:8c:1b:b2:e4:87:ea:f4:8e:12:a3:8c:fe:4e:13:
                    89:86:56:81:e9:83:4a:3a:13:ad:73:f9:b7:91:44:
                    f0:24:40:29:85:cb:93:df:d7:50:93:9b:71:b6:dc:
                    d2:14:bf:35:67:be:ad:2b:f5:50:21:59:84:cd:de:
                    d0:b1:d7:86:de:f7:da:21:e9:6d:7d:20:90:ef:4e:
                    0b:a3:ef:e6:20:8c:93:b7:80:6a:f7:76:6c:5a:9e:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:37:71:77:2D:DC:FF:7F:F8:F6:3C:CC:D6:EE:C0:FC:47:72:E6:74
            X509v3 Authority Key Identifier:
                keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:64:51:df:1f:52:4d:20:d7:f6:24:25:e0:03:0b:07:8d:3a:
         69:79:76:ec:e5:4a:33:b6:18:9d:48:64:ef:c5:1d:33:0a:de:
         a9:78:ca:6b:d0:ec:49:cb:9f:c6:a8:da:64:be:ab:6b:87:44:
         23:01:79:1e:5a:48:7c:7b:36:1e:78:bb:f0:ab:27:98:56:77:
         00:fd:91:c4:aa:2b:e6:c3:81:5f:14:1e:c7:8f:dc:27:73:45:
         c3:76:fb:3b:ee:d1:8f:1a:5d:b8:ef:1e:fc:30:2b:ec:ce:b9:
         b4:49:66:23:f2:ca:d3:3b:74:40:03:37:d8:29:c1:6f:1d:b3:
         08:46:be:87:3f:3f:07:c2:47:9e:14:ee:00:4b:81:88:84:e5:
         c8:cf:d8:f8:63:b3:71:71:ff:73:5d:07:38:74:0e:6c:c6:ba:
         1b:39:f0:b0:99:51:85:cb:2f:bf:43:8b:52:f0:9d:13:ae:65:
         01:b3:b5:c9:25:82:30:5e:9f:62:81:44:35:17:57:a6:58:9b:
         9a:41:89:a3:92:71:1a:55:b2:d4:8b:65:e2:94:74:b1:e4:19:
         7a:6a:68:de:17:e2:7c:3f:0d:2d:5a:be:a3:e0:c1:de:1d:ef:
         a4:18:fb:01:4f:6a:95:9d:4c:b2:2c:93:71:08:a8:d1:02:2e:
         48:a4:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:07:13 2026 by rpki-client