Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File:                     Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier:          VWlHew1tXyk7rGEe1BmgHja+RBvFZ30IcudiDPCwUJc=
Subject key identifier:   CF:70:8C:C1:55:53:9B:A9:DF:0C:BA:31:73:74:67:32:94:56:E3:8D
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       0343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number:          0329
Signing time:             Wed 29 Jul 2026 01:57:08 +0000
Manifest this update:     Wed 29 Jul 2026 01:57:07 +0000
Manifest next update:     Wed 05 Aug 2026 01:57:07 +0000
Files and hashes:         1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: R/KM+7lQylWCxKfaPNOBUgG3m3ysB/pcSxp1LiYsmK0=)
                          2: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
                          3: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
                          4: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
                          5: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Jul 29 01:57:07 2026 GMT
            Not After : Aug  5 01:57:07 2026 GMT
        Subject: CN=6a695df3-4fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:ea:24:da:54:a4:8c:4e:5b:a2:6f:e1:c7:
                    b0:fa:e5:c4:ad:d9:9e:d3:c5:49:b6:de:fe:07:ab:
                    e9:3c:f7:52:ec:73:43:5b:b3:1f:15:20:51:37:00:
                    2d:32:4f:b2:b6:1e:6b:e7:f0:b4:3c:68:3d:19:74:
                    f5:12:72:88:8d:57:aa:7b:f2:57:33:05:2c:98:8b:
                    95:ba:41:b3:83:3b:51:b3:ee:7b:12:ff:de:b6:78:
                    13:9b:b6:0e:e7:75:dc:0e:c2:8f:51:fc:f2:23:e9:
                    60:f1:cd:df:34:b2:45:72:ed:f8:56:84:b1:fc:87:
                    c4:0e:4f:ab:5e:bf:8a:a7:9d:86:21:a9:77:40:d0:
                    bc:0d:5f:77:de:52:c8:75:b4:8e:90:58:4d:15:c5:
                    43:c0:4d:78:b7:21:18:9a:ff:33:79:02:da:bd:c3:
                    10:5a:57:1a:83:1f:a7:89:e6:7b:9b:64:e4:8a:8e:
                    88:c2:ba:16:38:d6:47:84:14:72:92:30:80:54:e2:
                    f0:ee:6d:ed:3e:35:e3:55:a9:ef:1d:89:70:51:fe:
                    c3:c9:80:a1:30:0e:e9:7d:45:af:d0:5a:71:ed:e9:
                    52:c7:18:fc:ad:e4:15:1d:2a:3f:ee:c9:44:5d:9d:
                    12:27:49:08:99:f6:d0:8b:cb:c1:e9:64:ce:6c:d9:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:70:8C:C1:55:53:9B:A9:DF:0C:BA:31:73:74:67:32:94:56:E3:8D
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:54:1e:59:1f:12:4a:ec:d2:03:e3:2b:cb:09:da:9b:c2:
         02:55:19:d9:6c:21:d7:a9:21:3f:ae:69:99:2a:87:20:31:3e:
         a6:f2:89:52:e1:45:90:be:ba:7f:c2:87:2b:a6:89:5f:b1:3a:
         d7:11:15:37:50:13:94:58:8a:fc:fb:cb:f4:8e:fb:d6:61:af:
         ac:20:79:83:9c:a8:ab:78:da:8e:8a:60:a0:56:3d:77:c2:7a:
         12:54:e1:6c:62:ac:7c:a0:61:ff:14:aa:9f:0f:3d:23:2e:57:
         e3:a4:c1:64:30:8a:3e:82:0e:04:ac:f1:0f:9d:a4:24:c7:9c:
         a5:d1:c3:81:74:40:98:41:fd:f4:2c:a9:64:be:50:6d:f1:ba:
         4b:b7:18:c9:7e:99:7c:7b:2e:99:1c:f7:ec:e9:cc:d8:9a:74:
         2e:0e:0a:45:08:4f:ed:54:b9:37:44:d6:be:03:5a:26:02:bf:
         ce:34:9e:c9:e4:6c:50:77:44:c4:e4:02:44:74:25:9b:47:8a:
         36:a5:9a:d5:03:b7:38:27:f5:79:c8:d1:04:89:14:d6:96:11:
         de:2c:ff:7d:a6:69:82:e5:b1:98:09:08:fd:2d:c4:38:68:e2:
         62:f7:68:63:5d:f6:7d:7c:6f:63:75:71:ec:70:c0:6f:99:b6:
         12:d2:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:35 2026 by rpki-client