Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File:                     tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier:          7IxOrK20KRoZu9fx1rI6Q6YjIShGMhZYfNZiTBP8LKs=
Subject key identifier:   B8:DC:5D:08:5A:E3:4C:33:2F:DC:63:F7:B5:51:04:E5:23:A4:B0:62
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer:       /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number:          0137
Signing time:             Wed 29 Jul 2026 06:51:19 +0000
Manifest this update:     Wed 29 Jul 2026 06:51:19 +0000
Manifest next update:     Wed 05 Aug 2026 06:51:19 +0000
Files and hashes:         1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: 1XQzZQFPnxBospg5AbtGvudqLLTKf8Qp3eA42K/lWE4=)
                          2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
                          rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
        Validity
            Not Before: Jul 29 06:51:19 2026 GMT
            Not After : Aug  5 06:51:19 2026 GMT
        Subject: CN=6a69a2e7-7c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:9c:24:9f:66:cb:de:55:46:2d:05:91:6d:
                    10:6b:2f:0c:5e:4b:8a:dc:07:2d:34:46:90:43:c5:
                    3a:33:61:bc:20:f6:28:f4:7a:75:9e:bd:11:e1:02:
                    d1:99:45:dd:4c:e6:23:07:f3:81:db:fa:60:eb:37:
                    9a:ce:06:d6:f9:ad:4b:37:00:a3:61:18:db:73:98:
                    6b:36:c2:5e:53:62:52:83:0d:9b:2e:8d:b3:bc:12:
                    cd:0e:10:45:c3:4e:ac:78:d9:97:6b:ed:3e:89:60:
                    8e:44:79:62:9a:4a:38:22:25:54:01:fb:3b:27:9a:
                    30:84:7e:98:5f:bc:c0:99:18:85:26:b5:62:23:02:
                    92:e4:8c:6e:55:21:63:90:83:24:96:80:03:d1:fc:
                    4a:fb:1a:eb:22:cc:5e:5b:d8:71:63:1e:d5:5f:4c:
                    f0:aa:2e:5e:cc:a6:5d:8e:8f:45:d0:25:b8:15:b9:
                    0b:3a:f5:50:05:54:79:9c:43:bc:af:ce:24:5e:36:
                    f1:d7:1e:f0:d4:58:c2:a3:e4:42:bb:89:59:7f:36:
                    b7:f7:10:77:f5:ee:81:84:b1:26:7c:41:16:bf:7e:
                    5e:b1:17:03:7f:cb:b1:3c:6b:3f:a0:1c:c6:1c:39:
                    e9:74:da:c8:0d:b2:76:8c:7d:63:7b:0a:b1:05:1b:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:5D:08:5A:E3:4C:33:2F:DC:63:F7:B5:51:04:E5:23:A4:B0:62
            X509v3 Authority Key Identifier:
                keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:11:75:d7:33:6f:92:aa:8a:9f:b2:87:e7:60:72:8c:df:
         e6:a4:b8:8f:eb:2f:56:df:7b:2e:c4:26:81:04:6d:ba:88:ae:
         f8:1c:14:1f:80:28:d6:65:1b:28:9e:40:52:3d:bd:da:42:82:
         9f:d9:97:94:80:7c:8e:0b:f7:ee:6d:05:2f:85:39:ac:b3:c3:
         dc:c0:61:58:a1:2b:27:dc:ea:d5:e9:d6:93:be:42:7d:f7:4f:
         4d:3e:77:85:dc:75:8a:7f:12:b2:dd:42:b8:1a:4a:f5:73:91:
         94:23:2c:27:1e:9c:96:84:43:49:73:54:ba:92:34:44:e8:4f:
         f5:7f:46:ef:7f:5a:4e:65:1f:01:5a:8a:bf:ff:8a:33:74:c8:
         fe:42:91:20:01:27:75:9f:81:d5:92:b2:8f:b9:c5:bd:54:aa:
         72:11:d0:91:ff:c7:49:61:cc:40:46:97:22:2b:33:d9:56:8a:
         c2:e5:06:96:08:eb:0e:f8:6f:dd:15:63:dd:70:7c:d6:ba:8e:
         17:1f:50:d6:37:c9:3b:5d:8b:bb:8e:79:47:20:3e:3e:f8:a4:
         20:ef:8b:8a:17:6b:30:ac:6f:ca:0d:90:48:21:00:68:72:18:
         39:b7:63:eb:3e:ae:cf:5d:57:d3:ac:ef:4a:c8:2b:ab:03:c8:
         da:88:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:58 2026 by rpki-client