Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File:                     TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier:          2R1I2mSXAUn7SW6sNTZoZd6BDkIRpuR/aUy9eEpWApw=
Subject key identifier:   03:BC:66:2D:78:1C:57:EA:DE:82:5A:66:9E:14:23:CB:23:31:2D:98
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0AF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number:          0AE5
Signing time:             Tue 28 Jul 2026 19:41:43 +0000
Manifest this update:     Tue 28 Jul 2026 19:41:43 +0000
Manifest next update:     Tue 04 Aug 2026 19:41:43 +0000
Files and hashes:         1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: smZ4BhAolmhaLbuTRwFoeUFoXVNBOQkugXXDF7HL18A=)
                          2: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
                          3: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Jul 28 19:41:43 2026 GMT
            Not After : Aug  4 19:41:43 2026 GMT
        Subject: CN=6a6905f7-2bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:53:9c:6e:ac:03:80:22:b9:11:e0:5f:f1:
                    11:58:55:11:4b:9e:ea:2f:44:81:87:c2:d1:82:b7:
                    a5:19:86:14:e1:88:a8:0b:12:b4:82:04:99:19:b3:
                    de:41:6e:49:6a:b7:f8:ef:bc:f2:97:f3:b5:2b:58:
                    67:c1:3c:bd:13:17:4b:c5:8c:77:2c:b0:6b:aa:96:
                    e5:db:f4:52:4f:51:b5:4b:65:23:c3:d2:e7:61:ef:
                    92:12:76:2a:04:66:5a:2f:d3:ec:00:f6:2b:d5:ff:
                    d7:f8:ed:ab:bc:5e:00:53:78:fd:3a:c3:61:85:b5:
                    5e:d0:69:d2:ae:f1:a9:44:27:b2:7b:4c:88:4d:de:
                    d5:bf:bc:a5:8a:45:6a:f8:51:e0:32:3b:98:12:db:
                    7e:f5:91:52:fe:ee:2d:d6:99:65:63:63:c9:e4:0b:
                    36:3a:d4:9b:00:b1:93:a7:ff:45:b1:dd:0b:45:d1:
                    3e:79:91:67:1c:56:20:6a:b0:74:db:8a:e3:b7:ea:
                    82:c6:e1:31:8f:42:fa:45:e3:1b:69:13:97:1b:25:
                    ed:86:f5:1f:4b:61:d6:64:83:bc:6e:94:fd:73:e8:
                    b8:30:ae:bc:9f:f1:1f:17:89:0d:58:34:3f:e9:51:
                    11:00:7d:29:32:ef:22:9b:62:15:a2:53:0e:d1:54:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:66:2D:78:1C:57:EA:DE:82:5A:66:9E:14:23:CB:23:31:2D:98
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:69:b8:d7:6c:7c:b1:b7:4d:b5:49:ab:85:71:8c:c5:24:ea:
         72:1f:ab:b1:c4:fd:9b:8f:2d:23:1b:27:49:b6:d9:fa:9a:e1:
         26:72:9f:fc:bd:7f:4d:3b:f7:20:56:82:ab:a5:b7:98:fb:9a:
         4c:79:5f:fd:22:dc:b6:8d:b4:b8:86:63:30:a2:14:68:0f:aa:
         9e:d6:2b:91:37:93:28:9d:77:0b:43:74:dc:6e:7f:bc:17:66:
         c0:05:85:3d:50:1c:fe:9c:b8:74:ca:ba:4a:8c:43:cb:38:5a:
         6b:13:a8:1c:99:44:94:ac:37:0f:d1:d1:82:e2:a0:74:03:ba:
         04:d9:75:c3:51:1d:ac:ed:0d:1f:b1:96:fa:62:76:6e:b0:5a:
         46:52:90:2f:d6:eb:84:52:d3:c8:43:ad:9f:36:4c:67:63:73:
         e3:4b:01:cf:61:f4:ff:f9:e4:2b:27:55:76:09:eb:71:01:ac:
         62:ae:59:6d:08:1d:93:70:be:61:17:28:ab:38:da:c8:14:cd:
         5e:66:02:0a:95:16:08:3e:3d:4c:bb:b5:cd:e9:c9:99:17:52:
         00:6e:d5:ba:4f:92:86:27:07:ee:20:9a:f6:83:0a:8d:4f:60:
         18:64:1d:29:90:3f:a6:c8:51:54:50:a3:9e:d6:27:4b:0f:2d:
         00:f5:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:53 2026 by rpki-client