Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File:                     TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier:          MAejZ01MJ4a/BxbdkzfEV8fhe+LnOmUSHndOpBE1E00=
Subject key identifier:   9B:E7:04:57:6F:77:53:B3:00:13:72:5E:E2:CE:5E:A8:B3:22:44:1F
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer:       /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number:          012D
Signing time:             Mon 21 Sep 2026 05:45:26 +0000
Manifest this update:     Mon 21 Sep 2026 05:45:26 +0000
Manifest next update:     Mon 28 Sep 2026 05:45:26 +0000
Files and hashes:         1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: AzjpefBJXjGCWPeM9Sq31i/M0sLI68JrhXwB8G8xSgo=)
                          2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: QELUJCqdGaWJJ9WqA0a4XotSJPr5/ZmoQUlhz9HUAP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
        Validity
            Not Before: Sep 21 05:45:26 2026 GMT
            Not After : Sep 28 05:45:26 2026 GMT
        Subject: CN=6ab0c476-ff38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:bf:53:54:fd:f1:13:50:ea:27:c5:7a:55:
                    c4:fc:af:43:e7:53:8b:5c:22:91:12:6b:59:8c:20:
                    1e:12:9b:da:52:69:68:b9:f3:ef:90:09:00:1b:ea:
                    9f:1e:41:65:be:18:2c:fc:48:2e:28:4b:8a:a5:14:
                    03:02:f1:3f:c6:44:06:e4:5e:c9:4b:6c:cf:c8:5f:
                    c0:af:42:94:c3:c1:b7:44:01:d7:9e:6c:90:27:f9:
                    16:41:5d:6f:31:28:e1:19:df:1a:9a:e7:f0:7e:24:
                    44:56:ce:c5:c2:84:ee:7a:86:b9:11:85:df:b2:22:
                    c3:7f:cf:b9:29:19:f5:8f:a3:82:28:dd:7c:29:c7:
                    fc:27:ec:c3:12:6f:8e:43:8a:df:23:e4:78:e5:8e:
                    5f:63:27:69:72:d1:50:b6:e9:f5:19:f2:bd:ef:bc:
                    f0:4a:4d:93:e6:50:3c:ec:05:17:17:c0:50:97:dc:
                    1d:92:9f:ce:bf:90:98:37:af:63:1d:7b:f1:38:7d:
                    e3:25:f8:05:e8:be:48:f4:85:97:5a:fb:2b:23:cc:
                    a4:ab:12:aa:a0:b8:77:58:26:a9:b3:b2:78:14:69:
                    22:04:68:e0:a1:a9:2d:3a:03:b5:b9:9e:d1:3b:c2:
                    d7:b2:5a:ed:fd:2b:54:63:f2:6f:dc:3a:43:1f:9e:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:04:57:6F:77:53:B3:00:13:72:5E:E2:CE:5E:A8:B3:22:44:1F
            X509v3 Authority Key Identifier:
                keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:34:eb:bb:c4:e8:a0:69:0d:0d:42:a8:5b:54:91:1b:1a:
         93:16:a6:8c:74:aa:ae:19:79:3d:5f:96:c1:3d:37:76:98:c6:
         72:da:d8:63:83:3a:19:ff:25:b2:2c:f0:d4:cd:b3:3f:d1:9f:
         fe:4d:e9:4a:f9:28:20:2c:2e:d8:cb:eb:47:46:0e:15:95:38:
         dd:04:dc:18:4a:60:ca:6e:24:9e:8c:dc:87:bc:7c:84:3f:86:
         92:af:90:bf:05:19:b9:96:ab:ab:96:c8:13:93:b8:07:60:5f:
         e6:8c:3a:97:41:8e:10:f5:24:5b:dc:b1:48:78:2e:bb:57:62:
         dd:b0:d4:e4:6e:55:37:b6:00:03:47:48:e4:0a:d5:e8:8d:5d:
         62:ef:7c:ce:4d:6a:c4:a5:27:92:f5:2a:2a:6b:d2:f9:6b:ec:
         e7:df:53:75:02:43:23:5b:e1:37:c6:f7:b7:93:77:b1:c6:2f:
         89:00:18:ac:31:58:78:c9:a8:fa:2c:d8:d5:1a:21:ba:32:ec:
         f2:54:e1:90:8d:3f:a4:ba:5a:a1:f6:f4:bc:d0:da:ac:a5:20:
         d5:63:b4:6e:9e:75:05:9e:db:88:ee:21:1f:60:19:59:8d:3a:
         f4:61:12:40:e1:60:a0:e9:b7:69:8c:46:03:2c:84:d4:70:3b:
         bf:30:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:58:06 2026 by rpki-client