Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File:                     Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier:          LoqpZSyrgO76FhSMvSQQheAFg3wYz3W1CRDU7mLbarU=
Subject key identifier:   E1:DC:84:A7:DB:56:82:54:24:1A:BA:4E:60:E4:3E:6F:7F:89:56:D0
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer:       /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number:          EA
Signing time:             Mon 27 Jul 2026 08:32:19 +0000
Manifest this update:     Mon 27 Jul 2026 08:32:18 +0000
Manifest next update:     Mon 03 Aug 2026 08:32:18 +0000
Files and hashes:         1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: Jzilr4alS/EQ0lVWdK9iaZInRcZuMfS6GbwGjI0BC9Y=)
                          2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
        Validity
            Not Before: Jul 27 08:32:18 2026 GMT
            Not After : Aug  3 08:32:18 2026 GMT
        Subject: CN=6a671792-66ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:b4:0b:bd:b2:e6:9e:db:aa:45:75:8e:62:
                    b0:c5:59:18:99:e6:13:c8:82:69:e7:75:ca:9e:48:
                    2e:a1:b5:8a:0e:1a:2e:43:ec:ce:7a:27:92:bb:de:
                    95:c0:04:9f:1e:30:c5:ab:db:54:1e:12:8e:ed:88:
                    9a:15:d5:cc:3f:9b:32:40:ef:b4:9a:f1:d7:3e:47:
                    de:a9:af:1b:5d:dd:27:20:4a:50:ec:7d:3c:b8:25:
                    0d:07:16:af:c3:4e:54:ca:95:ee:4f:17:fd:1a:71:
                    ca:bf:28:89:4d:99:15:fd:b5:0f:2d:19:d9:e6:dc:
                    45:6d:f1:be:7b:fe:44:eb:dc:3e:af:4e:f8:35:92:
                    fe:db:8c:68:9b:f8:6a:4a:8e:24:2d:d1:dc:86:8e:
                    ae:cc:1f:16:10:83:7f:cc:19:5b:64:3e:5f:d3:c1:
                    59:b6:fa:36:6d:e1:03:2b:81:3f:60:e1:22:48:dc:
                    58:0e:b1:70:ce:25:91:29:d4:5a:68:5f:13:2e:30:
                    90:8c:a0:4c:44:1d:40:80:f4:ef:12:9b:88:76:48:
                    a1:0c:59:bc:ba:92:1f:fb:ad:aa:1e:9e:59:11:56:
                    02:cd:4d:ab:f1:0b:67:18:e0:35:66:ea:4f:eb:e5:
                    a0:06:9f:6b:e2:77:f7:72:96:c4:c2:15:45:fb:68:
                    6e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:84:A7:DB:56:82:54:24:1A:BA:4E:60:E4:3E:6F:7F:89:56:D0
            X509v3 Authority Key Identifier:
                keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2b:97:8d:14:13:2f:25:c8:1d:1f:cb:58:b3:ba:8c:fc:1c:
         8a:99:9a:62:c5:3b:ce:73:7d:65:9a:e3:f4:94:dd:30:0b:cd:
         cc:01:76:e3:e1:cb:3c:a8:9b:56:0c:73:c0:00:59:2f:d3:ae:
         a3:2f:10:db:63:d5:1c:98:dd:06:7d:6e:e2:20:32:1a:7c:94:
         cf:bc:f9:1c:24:fb:8c:e1:65:ab:ef:fa:cc:26:ec:80:ee:ef:
         5b:ff:95:9a:cd:05:6a:94:3f:3a:0e:81:15:15:14:99:35:b7:
         9f:1d:d2:e8:d6:46:17:d9:da:87:97:b6:00:cc:33:4f:16:6e:
         94:25:08:f3:0b:b3:91:c6:8e:31:14:89:49:7a:5f:df:73:59:
         dd:de:94:6b:23:97:90:04:97:6c:6a:0b:b3:d4:7d:4a:9b:17:
         41:a3:79:f3:db:11:91:bc:1b:09:f3:cd:ab:e7:ed:93:58:47:
         9c:50:cc:5a:4a:ce:5c:55:43:e9:5a:1d:78:5c:7f:44:25:ad:
         95:bd:75:51:04:52:8b:04:f2:36:19:63:2a:64:81:fe:d8:1c:
         7e:c9:8e:24:ae:7c:93:4a:58:95:97:2a:af:e5:fb:87:f2:08:
         9b:58:08:84:9c:b7:59:b9:55:09:60:92:8f:d3:ad:03:9b:30:
         92:a3:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:26 2026 by rpki-client