Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
File:                     tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json)
Hash identifier:          3XTwvzaLHriY36Kx9JoHpLYQ7CLA2F4lGNoLSYGI7Lc=
Subject key identifier:   97:12:04:28:6A:90:B5:4F:5D:8B:6F:FC:45:4C:4E:03:E6:C1:B3:5E
Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Certificate issuer:       /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Certificate serial:       1379
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
Manifest number:          136F
Signing time:             Tue 28 Jul 2026 17:04:03 +0000
Manifest this update:     Tue 28 Jul 2026 17:04:03 +0000
Manifest next update:     Tue 04 Aug 2026 17:04:03 +0000
Files and hashes:         1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: wUqOAFRx6wmQTZZMJ+jpG4hrmyw02nTlwS++Kb6HV+k=)
                          2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: p96Pk01HnxFF2EIL/xWnzPT9gE4H/ULfnQINm3EmY2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
                          rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4985 (0x1379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
        Validity
            Not Before: Jul 28 17:04:03 2026 GMT
            Not After : Aug  4 17:04:03 2026 GMT
        Subject: CN=6a68e103-b071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:04:ef:bb:dc:b1:4d:a3:d1:0f:3e:53:56:
                    21:1e:90:de:1d:14:7e:1b:38:82:db:cb:35:75:b8:
                    7b:89:29:36:ff:c7:98:6a:0b:59:5d:ad:16:c9:90:
                    73:3a:73:b9:4a:c3:9b:ae:07:17:a3:ce:22:12:20:
                    4d:61:1f:dc:b1:d7:38:05:e8:9b:da:c3:ee:00:11:
                    f1:ba:46:a1:b6:47:a7:13:a2:d7:d8:ec:34:f8:43:
                    42:fa:ab:af:48:fa:07:d1:a0:ea:c9:d7:02:d9:0e:
                    2d:8f:12:fa:42:ac:92:b0:a4:68:b0:0c:77:25:93:
                    5b:d1:f8:bd:c6:50:52:df:19:23:a8:1f:91:38:24:
                    96:0d:c4:10:c5:b1:e9:18:6d:01:03:ed:c3:33:76:
                    ab:f9:cd:f6:b2:5d:b8:ae:2a:b4:e5:c4:60:6d:ac:
                    e4:1c:ed:08:f9:3b:31:06:91:d2:c3:98:34:7f:fd:
                    05:89:09:23:b3:d1:1e:7c:18:32:1e:f7:d2:6a:ee:
                    e4:0e:0b:5b:51:98:46:43:ed:fd:ec:7c:a4:5e:9a:
                    ab:b0:e4:e1:cd:48:a9:d7:8c:72:cd:d3:00:9c:ac:
                    4b:de:73:57:96:90:7e:6e:d0:24:9a:11:40:53:d0:
                    74:a8:e7:e4:0e:f4:9a:80:85:61:e4:70:5e:5b:8c:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:12:04:28:6A:90:B5:4F:5D:8B:6F:FC:45:4C:4E:03:E6:C1:B3:5E
            X509v3 Authority Key Identifier:
                keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:16:05:5a:a1:a4:1b:94:9a:d5:4f:32:ec:60:a0:dd:a2:
         70:d6:a8:1c:e3:cd:8c:f9:41:09:f5:4e:ac:a6:65:50:a6:db:
         42:2b:24:b9:e6:00:fb:a4:60:c9:e6:84:7d:fa:43:0e:d9:d3:
         d7:37:99:34:a1:2a:2f:b9:bf:7c:da:6e:12:6d:de:90:6d:84:
         c1:e7:1b:54:50:8a:32:44:f2:cf:75:9f:6a:b6:71:aa:8c:d2:
         dc:36:73:94:e8:ef:62:68:37:4e:b0:0c:e1:fd:87:57:9d:8c:
         b4:f2:63:f6:1a:e2:9a:5d:7d:d3:65:ca:1e:3a:46:71:ec:e4:
         21:d5:d8:f4:38:d9:28:3e:71:74:45:0e:dd:b2:bf:66:44:30:
         7d:c2:fd:59:b2:40:38:7b:c0:22:3a:80:90:fe:c6:a8:0a:8e:
         fe:05:17:f8:e5:70:13:23:08:1a:a5:4e:2c:81:7a:62:b2:21:
         0c:6a:2e:90:4e:d2:fc:4e:fd:00:20:27:a8:35:93:e1:82:79:
         8d:5d:be:fe:c1:12:0d:32:6a:1e:a7:20:ad:2c:82:37:00:a5:
         b3:3d:da:e8:d1:47:f2:a8:a8:15:15:ab:0d:02:43:be:d4:ba:
         52:fb:eb:ac:11:03:cc:e4:46:e5:8b:7b:cb:b8:3f:8a:2f:c8:
         ec:7b:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:31 2026 by rpki-client