Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File:                     TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier:          9yucHhEGmkN5YjNzkxMuQrCV0NBiIc29em5xKps7Bxc=
Subject key identifier:   18:36:99:2A:EC:26:1E:A3:2C:8A:07:9C:0C:E5:BB:17:2A:16:16:17
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer:       /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number:          024C
Signing time:             Wed 29 Jul 2026 03:23:17 +0000
Manifest this update:     Wed 29 Jul 2026 03:23:16 +0000
Manifest next update:     Wed 05 Aug 2026 03:23:16 +0000
Files and hashes:         1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: y9ecRelRGL7OQX7eV5FpbxQOI23mjVEbgMmBkShiSyU=)
                          2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
                          rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
        Validity
            Not Before: Jul 29 03:23:16 2026 GMT
            Not After : Aug  5 03:23:16 2026 GMT
        Subject: CN=6a697225-e09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:c7:9e:cd:55:f4:93:d4:97:3e:d7:0e:80:
                    32:00:01:6c:d9:1d:0a:25:4d:93:23:08:1f:96:d2:
                    36:46:7e:59:c7:c9:49:b8:25:a3:ef:91:64:19:d8:
                    86:03:a2:fa:9d:76:3f:1d:71:86:e9:ec:5e:26:0f:
                    86:85:2e:01:8e:37:a6:0c:72:24:bc:ea:58:52:ef:
                    08:00:86:eb:60:d9:7e:5a:48:5f:60:f9:d0:b1:39:
                    d7:06:ff:36:71:18:77:67:5f:3d:84:70:4a:b3:06:
                    ea:ac:b9:62:55:c6:45:e4:8c:52:22:2c:e5:34:95:
                    da:fc:c3:a0:ad:c2:81:9e:b2:97:53:72:75:20:cd:
                    fa:6a:d4:3a:6a:e4:f9:6c:08:2f:76:c8:d3:44:a5:
                    5e:b2:47:18:9a:c3:76:c9:41:d6:33:51:a4:5a:9d:
                    1e:45:48:f4:55:49:29:2c:ad:15:f9:ea:52:3b:50:
                    68:2d:e8:27:71:0c:e8:8b:4c:87:5b:ec:fc:3f:cb:
                    06:9b:48:68:dd:f6:e1:66:be:8d:9c:25:69:8b:ba:
                    77:0d:76:44:c6:fa:8f:27:5c:1b:69:2c:ef:12:72:
                    ea:27:e2:6a:c4:1f:19:d5:46:ee:e1:58:3c:bc:18:
                    1c:c6:4e:7a:df:5c:32:68:00:68:ac:40:b6:37:0f:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:99:2A:EC:26:1E:A3:2C:8A:07:9C:0C:E5:BB:17:2A:16:16:17
            X509v3 Authority Key Identifier:
                keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:fc:c8:51:71:65:9d:7e:22:35:5d:76:d4:54:15:8f:2b:
         5b:c1:4f:6a:6c:aa:bf:7e:75:05:5f:4c:00:28:43:eb:58:f1:
         ea:93:3f:88:c4:9f:26:b8:e5:84:b2:1f:2c:e3:0e:b4:49:3e:
         4b:aa:8a:ed:37:32:ad:c9:9d:cf:42:f4:30:6b:b8:84:2b:fb:
         9b:f8:fb:60:3e:53:b6:8d:cc:eb:f5:05:4a:b9:fa:cf:80:81:
         ce:10:88:47:3a:62:71:8c:e0:89:37:a5:1e:1b:3c:0b:a9:6d:
         fc:89:9a:5c:9b:72:30:aa:75:57:35:ce:04:51:17:e5:05:f9:
         45:15:04:c7:aa:68:f4:ca:f2:01:a2:c9:f1:65:a4:0d:d9:75:
         87:86:b4:76:3b:99:59:58:ce:4d:ca:52:58:d5:e6:49:f5:8c:
         9f:9a:b5:e7:46:1a:8f:40:68:ae:b1:af:84:85:fe:fc:89:39:
         ec:39:4a:58:fd:63:73:ae:79:5a:13:be:10:12:19:1c:5c:a4:
         85:3a:e5:77:0c:58:bc:22:6a:77:cf:e4:2a:28:82:5e:0e:a4:
         62:33:65:28:27:ef:6a:ba:2d:88:ad:4d:62:c6:47:66:76:5e:
         28:bc:35:b4:e5:f1:46:4b:ce:eb:cc:25:22:c3:e7:07:ff:b9:
         d8:fe:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:38 2026 by rpki-client