Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File:                     TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier:          j+RF3LznvRf/QxzKd7tWJywJwGrPh4E8b3fumrj9Cwc=
Subject key identifier:   81:94:65:AA:6D:D2:81:51:22:0D:4E:40:9E:26:13:70:21:ED:33:26
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer:       /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial:       03E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number:          03DF
Signing time:             Mon 27 Jul 2026 01:36:32 +0000
Manifest this update:     Mon 27 Jul 2026 01:36:31 +0000
Manifest next update:     Mon 03 Aug 2026 01:36:31 +0000
Files and hashes:         1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: HSXj+BNHVhcmYEjFUJdBgPQObVqQpBd9RrBtAlYISU8=)
                          2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
                          rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
        Validity
            Not Before: Jul 27 01:36:31 2026 GMT
            Not After : Aug  3 01:36:31 2026 GMT
        Subject: CN=6a66b61f-a3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:9e:88:d2:84:f0:fb:a0:5b:ce:67:b4:ec:
                    d5:ab:1c:a4:e6:a5:99:49:d3:f3:97:f7:d0:f6:05:
                    1c:c6:c5:b3:a2:19:ca:7d:d2:b2:12:67:1e:40:2c:
                    1c:2c:42:8a:cf:56:0f:20:c7:22:b6:16:17:46:e9:
                    db:5e:88:a9:6f:39:d5:55:aa:8c:2b:76:d2:b7:53:
                    e6:8f:43:04:31:14:dc:f1:18:66:c0:32:b5:e3:ac:
                    86:92:44:c3:9f:16:5c:1c:f1:5f:84:55:06:71:f8:
                    02:fe:91:de:55:25:c5:7a:4f:ae:39:d3:c0:07:fe:
                    74:f0:76:e3:33:53:85:43:74:7c:9a:7b:32:75:34:
                    bb:20:d9:71:ef:5b:b6:a3:5b:06:43:3e:85:f5:a7:
                    0f:e4:a5:5f:1d:8b:a8:30:ce:1d:e4:06:c1:1d:ec:
                    ab:9c:f3:46:f9:81:47:e2:9a:9b:47:82:a7:c3:22:
                    17:8f:e9:1d:10:b4:2d:14:81:de:93:8e:36:ed:f6:
                    a8:80:34:9a:43:da:88:3d:a5:e7:09:43:72:a0:88:
                    e3:cf:45:bb:1f:10:1c:83:f7:4b:63:05:00:7c:4e:
                    35:59:fe:76:c1:10:e4:93:6c:01:58:27:0d:8c:37:
                    94:65:33:d1:15:3b:48:41:78:a2:5f:56:3d:50:c3:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:94:65:AA:6D:D2:81:51:22:0D:4E:40:9E:26:13:70:21:ED:33:26
            X509v3 Authority Key Identifier:
                keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:4d:60:a9:5c:30:d2:f6:83:a9:9d:6b:6d:76:68:4f:d3:
         28:9d:96:dd:b2:cb:89:b1:9a:7e:bb:9d:23:5e:9f:b2:a7:3d:
         6a:a3:c2:97:07:07:98:1c:a8:1c:dc:da:bc:20:b1:ae:43:4d:
         67:5b:2d:7d:8b:50:65:63:71:fd:2a:81:ee:38:13:e1:5a:b3:
         4a:ff:0f:e4:75:2a:84:de:cc:94:d9:9a:16:21:67:8f:2d:da:
         bd:89:78:f8:c8:94:6e:51:7a:fa:1d:b4:b6:61:d9:62:c3:90:
         d8:14:41:ea:53:80:4e:00:57:d8:9a:71:31:e0:25:16:b4:67:
         8d:ac:85:92:fd:00:f4:80:57:81:a6:eb:33:65:a2:08:6d:81:
         0a:1d:8c:cb:2c:fc:6a:b2:43:3d:c8:63:bb:25:ec:79:44:26:
         d3:19:ce:ce:4b:0f:31:e8:a7:67:8a:ac:f7:b7:a5:8a:0a:69:
         22:c3:ce:2d:0f:5f:f1:4a:d4:c8:27:bc:d2:f5:b1:c0:2b:32:
         a0:ce:45:01:69:ef:8a:9e:66:be:f9:c3:ec:da:5f:4f:cd:97:
         5f:cc:96:25:1c:a0:11:c4:7e:98:5f:ff:e9:e0:c8:2d:d1:0e:
         fd:e1:77:d5:a4:fb:54:36:63:43:4e:fe:8c:40:7f:f3:67:ec:
         0b:19:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:44 2026 by rpki-client