Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
File:                     TmFCvWGz61iXzgHo1FcR2lDc9WU.mft (raw, json)
Hash identifier:          vBuSPLdhCgoxTgmr2CuU8jisLGkmzSUS8f+Uw89s40M=
Subject key identifier:   F8:65:FD:26:CC:4D:FA:79:D9:22:2C:F7:F1:3E:73:3C:55:2A:DD:D1
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Certificate issuer:       /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial:       0AEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
Manifest number:          1AE7
Signing time:             Tue 28 Jul 2026 17:33:57 +0000
Manifest this update:     Tue 28 Jul 2026 17:33:57 +0000
Manifest next update:     Tue 04 Aug 2026 17:33:57 +0000
Files and hashes:         1: TmFCvWGz61iXzgHo1FcR2lDc9WU.crl (hash: MFGuF2lxRSX+tpmnU1sgK6eARbzexFkMnPE+BPpQdF0=)
                          2: 339E038C223B11EF8750653DC4F9AE02.roa (hash: WglSFimwBIxRaonVvtON24BGZwGg55rZ2VzaZUYH4UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
                          rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2796 (0xaec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
        Validity
            Not Before: Jul 28 17:33:57 2026 GMT
            Not After : Aug  4 17:33:57 2026 GMT
        Subject: CN=6a68e805-4565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:f9:c4:5b:f8:74:2b:c1:f7:da:0c:2c:b5:
                    46:b3:03:0e:6d:39:32:3c:a4:a0:a5:b3:1c:03:87:
                    eb:5a:fb:3c:4c:f3:81:1c:b9:fc:23:a4:a2:cb:c9:
                    38:82:37:e9:34:b0:84:68:59:c5:f6:35:17:59:c8:
                    8e:e3:3c:f2:27:aa:02:54:55:6e:f6:11:e1:37:24:
                    42:76:3c:ee:b6:a4:95:90:38:a1:e9:24:ce:48:13:
                    4b:04:82:45:dd:e9:7f:da:41:5d:38:51:66:d5:b0:
                    bf:0b:28:ba:ca:4b:9e:f2:e2:a8:a5:d1:f4:38:8e:
                    1c:9c:9b:16:76:14:0e:54:b7:74:3a:88:5d:b9:ae:
                    57:1d:c6:25:cf:bb:f6:93:3e:6e:d1:80:d0:e1:d2:
                    00:ee:d9:fe:ce:25:47:4b:8d:2a:d3:3a:18:0a:a2:
                    d1:6f:5f:58:8b:69:aa:e6:5b:ec:cd:f2:e5:9c:8f:
                    7d:5c:d1:4b:29:f7:b1:49:82:35:14:29:c2:9a:e5:
                    cf:dc:9f:7f:00:d5:a9:68:95:54:c4:4b:f0:26:17:
                    70:9c:d1:3f:c5:57:d0:53:00:aa:44:8e:b3:90:af:
                    41:f1:44:93:28:64:27:16:f7:f2:2e:6d:56:b8:cc:
                    cd:21:ae:3c:04:e3:a0:24:f2:2e:c5:58:11:a8:f3:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:FD:26:CC:4D:FA:79:D9:22:2C:F7:F1:3E:73:3C:55:2A:DD:D1
            X509v3 Authority Key Identifier:
                keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cf:45:89:57:13:7a:a4:a3:94:c3:f7:a2:aa:b3:21:42:0d:
         88:8f:e0:5b:02:7b:1f:4a:65:51:f4:0e:d5:7f:6d:7d:72:7f:
         78:a4:60:9d:d4:84:5b:3d:18:53:32:01:58:b7:ff:37:4f:42:
         d4:76:42:77:8d:85:be:f7:7a:08:e6:ca:04:c0:7d:32:c1:17:
         0a:11:6f:a0:d9:fd:77:9d:22:ec:ce:4a:f1:1e:d4:df:e3:e4:
         4a:7c:d2:47:ab:19:4b:89:e8:7c:0c:b9:19:85:00:61:50:a1:
         11:5a:39:a3:0c:13:27:58:9d:92:b4:7a:d2:2c:d2:8e:ee:63:
         70:7b:4d:12:9f:d5:65:ec:2b:07:57:7a:f7:12:d5:17:69:11:
         b6:8a:04:49:3d:31:4d:b6:1b:dc:f7:0d:da:1c:4a:3b:78:ef:
         40:e0:35:b8:67:db:ef:66:76:02:a3:a8:ab:ae:6b:56:00:2e:
         8b:8e:8c:8f:15:79:29:38:9e:aa:c3:b2:74:ab:08:8e:d2:24:
         08:1b:27:e5:3c:4d:86:ed:15:d0:0e:e2:75:26:66:3a:2c:33:
         45:9a:4e:ff:b7:c0:12:0d:06:a8:2d:11:a3:60:f1:5e:92:92:
         4d:87:8a:a5:ec:e0:d3:3b:b2:33:6d:1d:e0:13:57:60:ae:7e:
         79:c1:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:23:33 2026 by rpki-client