Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
File:                     TSeYiynlKyZQPcq8BBqz9h8kEFE.mft (raw, json)
Hash identifier:          3Uiix+qHyesSqOMnx4QoyVdPbFt3VspfAn3TOd8Or9Q=
Subject key identifier:   07:D4:06:62:1A:E1:A0:B6:FC:79:C4:6A:5F:95:A2:6B:45:A6:52:71
Authority key identifier: 4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51
Certificate issuer:       /CN=A91383D8/serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
Certificate serial:       0696
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
Manifest number:          068C
Signing time:             Sun 26 Jul 2026 23:21:01 +0000
Manifest this update:     Sun 26 Jul 2026 23:21:01 +0000
Manifest next update:     Sun 02 Aug 2026 23:21:01 +0000
Files and hashes:         1: TSeYiynlKyZQPcq8BBqz9h8kEFE.crl (hash: n3fX/GNVGGkdYAX0sN48cTR9acNl4gi3aotbmA14C9I=)
                          2: F14DD31CCA2D11EB8B7FE060C4F9AE02.roa (hash: Nrmd7NWpAtHSdSpUs2jBjOHf/M47LqTf8bE66Iiywz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl
                          rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383D8, serialNumber=4D27988B29E52B26503DCABC041AB3F61F241051
        Validity
            Not Before: Jul 26 23:21:01 2026 GMT
            Not After : Aug  2 23:21:01 2026 GMT
        Subject: CN=6a66965d-02d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:11:d9:92:8a:b5:d8:d3:f8:77:4e:c9:7d:
                    6f:b2:97:95:ba:cf:e9:4a:54:0e:4c:4d:05:e1:2e:
                    89:3b:a4:e8:61:bb:47:f9:8f:c7:4b:10:21:91:83:
                    3d:00:81:49:0d:5f:78:cf:c9:bc:48:dd:6f:13:5d:
                    c5:8a:7c:b4:66:46:c9:2d:c8:74:40:0a:7e:45:12:
                    53:ed:91:6c:e8:33:4b:44:1b:e8:99:4a:cf:9d:56:
                    a5:4c:a0:f5:66:6c:11:68:24:b2:c9:1a:8f:10:93:
                    f1:cf:b6:c1:93:2a:91:44:54:d9:d8:57:17:4e:6a:
                    38:5e:d6:2a:f3:02:7d:c0:2f:1b:db:43:62:7d:ae:
                    20:1f:15:d8:37:49:90:1f:aa:0a:08:cf:70:e7:6a:
                    1b:76:ff:08:ac:86:15:d2:34:cf:d0:c6:bf:a4:df:
                    7a:e8:af:16:a9:df:a7:09:3e:02:b6:af:9a:5a:26:
                    a4:8a:02:6f:cb:45:2e:d2:ff:41:00:57:2a:37:da:
                    28:80:e8:bf:c6:69:40:bb:af:91:4c:da:84:a2:dc:
                    c3:60:84:64:21:b9:52:69:2d:40:63:e1:90:1a:5d:
                    76:d8:d0:b8:22:10:f2:ec:b4:ed:b6:61:f6:9c:be:
                    44:70:2f:b5:17:8f:ae:18:8a:34:f0:b2:19:8c:dc:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:06:62:1A:E1:A0:B6:FC:79:C4:6A:5F:95:A2:6B:45:A6:52:71
            X509v3 Authority Key Identifier:
                keyid:4D:27:98:8B:29:E5:2B:26:50:3D:CA:BC:04:1A:B3:F6:1F:24:10:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSeYiynlKyZQPcq8BBqz9h8kEFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383D8/09CC360CCA2B11EBADF5455EC4F9AE02/TSeYiynlKyZQPcq8BBqz9h8kEFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:ab:5f:d4:9f:e1:52:8e:57:04:43:80:52:56:b6:f3:58:
         dc:ba:c4:96:67:12:f2:06:ee:5e:72:06:3a:18:71:14:9f:c2:
         08:97:a5:e0:31:50:f1:b7:f4:5e:3f:a2:4b:af:71:ac:d7:fe:
         6c:51:ef:86:06:6d:cb:e8:d4:81:c4:06:03:5a:33:7a:62:b4:
         ea:c4:8f:1f:f2:f0:4e:5d:68:74:bf:50:0d:0c:d7:f8:40:4d:
         3d:05:9d:10:aa:9a:b1:ea:f6:cb:ca:8d:da:81:47:c1:c7:d6:
         a7:4d:14:63:b1:f1:dd:b3:e7:ca:f3:a5:c3:04:df:ab:e3:19:
         2e:35:f9:d7:1f:cb:b2:c2:52:29:49:c4:25:69:a2:86:2e:fc:
         3c:70:c0:7a:1b:cd:65:c5:32:2d:0c:de:bb:97:90:43:3e:a3:
         8a:6b:7b:81:e7:e5:1e:4a:7a:60:ed:78:6b:60:97:89:b3:ff:
         9e:b7:ef:33:d2:95:bb:da:94:a1:59:1b:38:bb:d9:91:62:24:
         c9:5f:bb:66:e2:84:53:ae:2b:f8:bf:0e:0f:8d:2b:3b:e7:b8:
         91:d7:1b:71:b7:7b:f9:02:56:ec:33:84:31:82:2c:53:fc:d8:
         23:c5:9f:44:f4:fe:c0:a1:c9:ff:02:26:d5:17:63:e1:3e:50:
         53:a3:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:08 2026 by rpki-client