Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
File:                     Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json)
Hash identifier:          zOUHSHXxkYMKLux6PC0hUCTvyWPrDJF+tGDmM9xdbb8=
Subject key identifier:   BD:7A:59:A4:72:CB:65:BF:8A:F9:90:47:F3:6D:1F:7E:3D:4E:13:E4
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1AD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
Manifest number:          1AAE
Signing time:             Tue 28 Jul 2026 16:24:58 +0000
Manifest this update:     Tue 28 Jul 2026 16:24:58 +0000
Manifest next update:     Tue 04 Aug 2026 16:24:58 +0000
Files and hashes:         1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: CVnzE9UAazIRcQ5DCXp+GDNFCIpxgWZcNKBcfvjrM08=)
                          2: 1F34B5C0250011F1A608795FB9833773.roa (hash: g5vttMWt0+XQbj5GazBAdpSevdiy5U6hlhse6ij41HQ=)
                          3: 185EA954250011F192DC095DB9833773.roa (hash: 2AaTMthNI8//OFxx2zubXvRWC7z2s1zUcn+OTlBk4TE=)
                          4: 17751640250011F192DC095DB9833773.roa (hash: DBHQ67/774/B2H1i6/aJzjKS/WICHCleCoK8CNyi6t8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6865 (0x1ad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Jul 28 16:24:58 2026 GMT
            Not After : Aug  4 16:24:58 2026 GMT
        Subject: CN=6a68d7da-dae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:be:a4:ef:7f:9f:31:50:32:ef:e5:69:8f:
                    9d:b4:6d:45:63:38:89:8a:09:24:2a:cd:87:44:4f:
                    31:75:c8:d2:d4:ce:e5:b9:2a:87:05:ab:f5:0e:c8:
                    d4:3f:14:1b:70:15:3c:50:1c:01:e4:74:01:36:e3:
                    48:05:cb:52:8e:7f:b2:ed:42:3e:dd:51:61:42:ad:
                    01:26:36:2a:0f:d8:58:ef:9b:ff:ac:b3:41:e3:9a:
                    2c:16:32:51:3d:51:62:42:5c:f1:c4:b7:66:97:8a:
                    3c:bf:e8:5e:1e:5b:2d:0a:89:f8:7d:06:f9:6b:a6:
                    c4:11:5f:68:82:26:c6:54:95:11:58:a3:aa:08:22:
                    25:40:8f:23:13:99:05:25:02:1f:fc:ce:fa:a3:f6:
                    78:b8:85:20:41:ba:da:2e:31:ae:19:04:79:2e:ba:
                    a3:5e:7d:d5:35:6a:08:e7:8f:09:8a:fc:68:14:bb:
                    89:5c:8d:6f:c4:73:23:c0:bc:05:2d:77:4b:65:18:
                    82:3f:55:d0:b6:b3:02:74:e1:af:d8:a4:97:ad:0d:
                    30:33:78:30:3d:9d:e4:59:eb:01:2a:4c:0a:ed:d3:
                    a9:27:4b:65:f1:6e:b3:68:69:36:f8:48:eb:0c:42:
                    b1:8f:27:da:a0:c5:6e:9f:5f:45:bb:98:99:29:50:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7A:59:A4:72:CB:65:BF:8A:F9:90:47:F3:6D:1F:7E:3D:4E:13:E4
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:ca:4d:81:d9:e7:6d:d6:e7:42:4d:c8:4c:bc:2f:6f:ee:
         4d:f9:ef:c6:41:2e:43:d9:ec:cb:68:87:ff:9f:e6:e5:de:c5:
         67:bd:70:0b:c2:14:95:1e:28:6a:43:97:c2:1b:9e:3f:a8:73:
         18:b7:15:cf:ef:84:6e:df:a0:01:1c:be:fb:6c:ed:72:8a:ab:
         6d:c9:51:0e:3f:9d:4f:cb:ed:3f:d3:e5:29:e2:cf:24:13:29:
         02:d1:d2:f1:86:51:ea:95:4b:ee:fc:0c:06:6f:92:e5:79:0c:
         12:04:7b:0c:e6:fb:83:05:93:c8:d0:2c:95:05:c8:84:68:2f:
         3c:b7:e4:a3:e3:0e:ee:91:26:49:2d:13:ad:7d:33:0a:36:03:
         c9:99:08:eb:86:0d:5c:a6:3d:46:e2:a2:8e:53:1d:5a:bf:cd:
         68:ed:12:d3:b8:57:e7:d1:d0:b2:99:76:7f:c2:bb:a4:70:e2:
         15:ab:0f:71:b9:56:58:3a:cf:bf:cf:c8:96:a7:4c:f3:48:27:
         48:98:29:83:1f:13:76:49:8b:4a:a0:90:73:ac:79:28:a6:ff:
         a9:06:cc:34:aa:70:2e:db:47:e4:a5:ce:dc:7d:05:d4:93:f3:
         92:32:91:63:2e:ca:09:14:55:4e:ec:59:be:71:ec:99:a1:4c:
         77:6a:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:35 2026 by rpki-client