Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File:                     THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier:          zmLfbBq+kCMVFpuQVhqHAZMSOMoRqsV+H8Re8YIuWK8=
Subject key identifier:   EE:96:30:89:52:2A:CD:99:73:CD:BB:3C:35:8D:3D:91:7B:78:A7:89
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer:       /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number:          A4
Signing time:             Mon 27 Jul 2026 09:22:36 +0000
Manifest this update:     Mon 27 Jul 2026 09:22:35 +0000
Manifest next update:     Mon 03 Aug 2026 09:22:35 +0000
Files and hashes:         1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: wzY4fjsjbagXEYi4M4urAJX/+INrhmQ+d1fZBY2/onk=)
                          2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
                          rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
        Validity
            Not Before: Jul 27 09:22:35 2026 GMT
            Not After : Aug  3 09:22:35 2026 GMT
        Subject: CN=6a67235c-dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:25:ee:8a:67:b2:03:27:e0:d4:e5:55:85:
                    61:1b:46:40:41:75:35:86:58:41:15:5f:f3:5d:9c:
                    86:88:33:0d:c4:35:16:8e:09:92:33:d4:e7:5b:d1:
                    fa:9a:fa:53:19:75:b8:41:ff:61:b4:9f:37:ad:3c:
                    fd:5f:74:45:19:39:f0:93:80:9f:db:bb:52:d9:04:
                    78:5d:3c:c0:8d:a6:ac:ef:77:d2:b2:bf:97:1d:ee:
                    b9:a1:03:ed:87:ff:f8:01:67:d8:ff:3e:29:a2:14:
                    ad:04:f3:1c:0e:24:dc:55:36:8a:fa:25:b5:5e:db:
                    b6:66:0b:e9:ec:8d:66:85:93:80:18:29:72:15:5b:
                    56:67:c2:cf:63:b1:62:3d:fb:86:ae:b7:23:c2:8b:
                    5b:5b:bb:5d:c6:be:f7:37:d0:ca:32:48:04:4e:1b:
                    fb:44:d8:0e:11:4c:02:a5:e1:52:71:29:82:d1:29:
                    9e:25:28:c0:2b:13:12:e0:d0:59:f2:4a:a5:a8:a5:
                    ca:f2:3f:33:9f:eb:b6:7e:01:a7:3e:ff:58:72:06:
                    c5:df:3e:2c:db:f8:7a:b7:c0:78:72:4f:f9:60:81:
                    25:78:59:74:12:35:1b:cc:a9:5e:1e:ba:ad:f7:12:
                    28:cf:c1:4d:95:bd:0e:53:b2:9d:68:51:47:ee:95:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:96:30:89:52:2A:CD:99:73:CD:BB:3C:35:8D:3D:91:7B:78:A7:89
            X509v3 Authority Key Identifier:
                keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b0:0e:dc:35:46:24:76:a8:7d:28:b1:f1:b5:16:6b:ad:2d:
         1e:7f:9a:42:d1:c8:6b:0c:fb:27:73:16:fa:f0:c6:c4:88:6c:
         ec:4f:d8:5e:f5:3c:d2:68:17:6a:70:d2:0e:8c:95:db:7a:91:
         c1:f5:3f:e1:dd:fa:2f:42:c3:ab:47:2c:b0:6f:ac:17:b9:c1:
         27:fd:d2:19:95:90:1f:8a:3a:fe:49:f7:f4:1f:43:fd:7a:25:
         18:6b:82:a4:ff:a5:05:41:8c:2e:ab:f8:13:45:85:5c:cc:67:
         22:da:55:ae:7a:5e:d8:75:a5:65:1d:69:b2:7a:9b:6f:f3:dc:
         f2:ec:f0:fd:f5:24:0c:15:62:aa:82:72:13:8a:63:70:5e:4e:
         c5:9b:96:08:88:15:c4:9d:4b:da:9d:a5:7e:22:80:0e:f6:43:
         8f:50:a4:0b:70:44:30:1a:f5:f4:4b:6a:c1:2e:c5:38:72:c4:
         fa:fd:15:00:15:63:2f:09:c1:e0:32:21:97:3d:58:30:3a:85:
         a3:40:5a:27:1f:f8:b9:1d:ca:09:0f:69:62:de:00:bc:8d:95:
         02:40:44:0e:ff:64:3d:57:29:04:ea:c8:7e:64:b2:70:b9:ce:
         6c:3a:b6:3e:27:0b:8a:93:41:80:a6:4c:c9:b1:e7:5b:1a:28:
         63:f9:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:49 2026 by rpki-client