Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
File:                     TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json)
Hash identifier:          hQnN0cvMM1DBguStwCQ6xBtl2r6yFn5rgE3H63Whuvg=
Subject key identifier:   9E:A4:83:E7:64:88:AF:4C:7F:0D:D7:A1:19:E1:9A:35:BE:AB:CF:28
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Certificate issuer:       /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
Manifest number:          0248
Signing time:             Mon 27 Jul 2026 03:55:43 +0000
Manifest this update:     Mon 27 Jul 2026 03:55:42 +0000
Manifest next update:     Mon 03 Aug 2026 03:55:42 +0000
Files and hashes:         1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: wMf+W7jZSZ82nuX6i/E7ZBotsbbJZov0UMvRE+jtGEI=)
                          2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: P4LCaX2qP/BKspd2PRKRAgneO72VBMSnJqp0JvaJ48M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
                          rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
        Validity
            Not Before: Jul 27 03:55:42 2026 GMT
            Not After : Aug  3 03:55:42 2026 GMT
        Subject: CN=6a66d6bf-4887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5b:06:d3:95:73:e9:55:99:7e:98:2b:55:57:
                    a9:40:9c:3b:12:7f:59:f0:76:57:99:45:e5:2e:16:
                    82:f5:d0:01:52:23:3a:eb:2c:fa:b8:b3:e7:6b:b1:
                    7d:56:54:e6:ef:aa:41:6f:59:7a:83:c2:e9:7c:0c:
                    8e:d5:65:2d:87:ca:22:75:26:4b:1a:a0:9d:03:6c:
                    29:ef:ac:9f:7d:80:ad:37:aa:f3:99:99:99:c2:37:
                    c1:a8:31:cd:fc:a8:11:bf:6b:4c:99:09:55:9b:33:
                    54:7a:4d:4e:a1:9a:22:47:ac:7c:01:97:c0:1d:91:
                    18:7f:29:ad:08:13:75:65:79:48:09:c0:e1:fd:56:
                    22:52:2b:72:9d:bc:af:96:f3:5c:f3:6b:82:3a:c2:
                    d1:7b:be:a4:3c:72:8e:e3:01:a0:69:62:dd:2c:69:
                    5c:64:10:ae:7a:0f:43:4c:be:07:fe:eb:23:1c:c3:
                    52:e3:59:8a:11:8a:f1:dd:07:6b:ff:63:6c:3e:46:
                    98:0d:a2:04:d3:26:a2:92:7f:40:0f:04:ac:82:7d:
                    c3:fb:35:0e:37:0c:cc:b7:5c:43:43:62:52:a0:fb:
                    50:d6:51:b8:31:c4:5c:44:26:3d:b2:5b:5c:a4:f4:
                    42:34:4e:cf:d9:02:18:e1:bc:04:da:ff:8c:2b:f6:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:83:E7:64:88:AF:4C:7F:0D:D7:A1:19:E1:9A:35:BE:AB:CF:28
            X509v3 Authority Key Identifier:
                keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:78:ee:49:02:63:0f:a2:e8:61:69:65:96:51:5d:91:3a:d2:
         8b:24:ba:f3:40:9a:37:88:78:e3:23:ec:4d:7e:15:8e:3b:91:
         0b:b7:cd:52:96:d0:bb:ee:c7:00:e1:64:26:ad:87:8b:63:25:
         8b:31:4a:7f:80:80:53:93:00:82:ff:9a:34:90:69:c4:e7:47:
         15:df:14:17:1a:a5:f5:3e:19:d5:fb:77:a9:25:f7:10:83:6a:
         d8:5a:3b:19:c0:2a:74:3b:1c:ec:83:3f:2e:aa:d5:6d:bb:59:
         6d:90:4b:67:67:a3:02:d4:54:8a:cf:4c:b7:a0:f7:4c:2d:63:
         24:57:2b:2b:8b:3a:fa:ab:61:b1:f0:00:2e:a7:38:99:c8:8c:
         73:3c:55:93:cb:ba:68:9f:91:a1:6f:a2:27:9e:e7:80:b9:8e:
         8d:71:15:0d:29:36:64:d7:c4:10:fc:a7:ad:2b:61:6c:fa:e1:
         e2:d6:fb:59:7f:27:ac:34:80:24:25:3e:79:c4:32:14:05:d7:
         3d:59:6b:39:09:09:9a:01:97:68:d2:0c:04:c3:21:62:01:cc:
         d2:11:45:d7:ce:ce:27:88:71:3e:72:dc:75:bb:ca:56:3e:2e:
         84:4f:88:0f:05:5f:83:5c:d7:56:52:13:59:f9:52:14:e6:d5:
         b2:d1:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:25 2026 by rpki-client