Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
File:                     tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json)
Hash identifier:          /sz7bPoeXWvwScKRHlcO3eH64lO7Sim6gqzQCkM1HuU=
Subject key identifier:   CD:17:D7:8E:DC:BB:89:4A:85:0F:5B:5D:11:C9:DB:B0:B5:81:F2:07
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Certificate issuer:       /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
Manifest number:          048E
Signing time:             Wed 29 Jul 2026 00:43:20 +0000
Manifest this update:     Wed 29 Jul 2026 00:43:19 +0000
Manifest next update:     Wed 05 Aug 2026 00:43:19 +0000
Files and hashes:         1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: jZZGYydGuMnmZN3GtCz5guBnl0d5Yq9qiPAyG3sWt+w=)
                          2: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=)
                          3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=)
                          4: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
                          rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
        Validity
            Not Before: Jul 29 00:43:19 2026 GMT
            Not After : Aug  5 00:43:19 2026 GMT
        Subject: CN=6a694ca7-d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:e2:ae:0c:e6:8f:f2:3a:1d:ae:fd:cc:7e:
                    ff:ff:ea:34:3f:d8:19:6c:23:e1:9e:14:5b:f8:94:
                    23:43:36:6f:c8:3f:bf:6e:15:db:5e:56:da:ac:e8:
                    0f:45:4d:eb:19:78:9b:de:6b:5c:26:ce:fe:1d:4c:
                    2e:19:ba:46:72:ed:fd:3c:ba:17:a6:69:6b:9c:e6:
                    6d:68:97:e7:88:c1:31:b5:49:c4:b6:17:bf:88:02:
                    3a:e4:a2:cc:de:97:1e:d2:63:ca:31:50:93:42:e6:
                    5b:c9:d0:b4:e5:58:b2:de:b8:ba:a2:9e:37:c8:a7:
                    76:af:7e:87:89:be:61:f7:89:c5:d1:10:42:74:6e:
                    1d:fa:88:6f:8a:be:d4:24:84:83:06:30:34:21:40:
                    61:69:71:86:9e:85:fc:c4:b7:7d:85:20:0b:9f:b8:
                    4f:97:e6:b4:83:e3:22:11:e7:3e:54:43:45:39:95:
                    dd:7b:1d:39:26:be:e0:80:7c:bf:c0:61:e9:56:1f:
                    37:7e:83:db:33:ff:ef:be:00:de:63:6b:02:6c:2b:
                    b7:e7:84:c2:ff:61:43:59:96:6f:97:01:5e:4a:53:
                    63:fa:7a:40:e6:98:15:dc:15:b2:76:07:33:2a:20:
                    79:94:a6:cf:8b:31:d0:c9:77:e6:54:14:45:55:cd:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:D7:8E:DC:BB:89:4A:85:0F:5B:5D:11:C9:DB:B0:B5:81:F2:07
            X509v3 Authority Key Identifier:
                keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:dc:5b:9f:94:ac:8e:b1:4c:58:2c:55:9e:66:e7:1c:a8:b1:
         86:d5:d4:b9:a1:8f:b1:56:49:d4:9c:6b:b1:f8:f5:bf:0c:a5:
         4f:04:e2:6b:ab:31:0e:c8:90:3f:82:29:d3:08:1f:91:fc:50:
         24:b0:f7:77:be:3f:40:d7:2f:80:42:89:cd:3e:4e:f8:14:1f:
         bf:70:17:6f:50:f6:0a:16:dd:55:b5:f5:03:c3:e3:79:db:49:
         4c:f5:a5:11:40:6d:b8:0f:8b:57:f5:db:5e:03:69:e9:12:ae:
         4a:a2:2a:d8:6c:6a:f6:25:89:e4:00:63:90:38:c2:d9:b5:28:
         db:fb:b9:69:f6:21:dd:e6:92:6b:c9:78:e6:44:5c:7e:26:27:
         a3:f2:b6:69:e8:12:b1:40:95:41:82:ac:4d:86:08:26:00:b3:
         f8:a4:df:97:f5:cc:ab:7c:86:75:45:f2:83:89:aa:2c:8a:15:
         27:14:8d:40:6e:4c:7e:1f:76:a0:91:04:23:5e:b1:a9:d4:6a:
         94:53:c2:49:e4:58:4e:ac:43:c7:6c:5e:d2:53:5d:aa:db:5c:
         38:f7:16:89:58:e4:2a:fa:cf:51:42:37:d8:72:eb:51:64:55:
         f2:02:49:64:38:33:b5:ca:e2:ce:1e:4e:bc:69:01:40:5f:10:
         a9:5b:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:58 2026 by rpki-client