Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File:                     TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier:          cKQnruCu18CzETudkc+jChi2mV0eb8GEXVDlB3+EQnY=
Subject key identifier:   FA:59:36:69:0D:BB:3E:84:10:25:C7:6B:60:76:E2:F3:54:23:68:5A
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer:       /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number:          B8
Signing time:             Mon 27 Jul 2026 09:11:11 +0000
Manifest this update:     Mon 27 Jul 2026 09:11:10 +0000
Manifest next update:     Mon 03 Aug 2026 09:11:10 +0000
Files and hashes:         1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: jNJEC5L/9sAnjXZmHufD2LjEEq8vQhMtVXHb4IJShZQ=)
                          2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
        Validity
            Not Before: Jul 27 09:11:10 2026 GMT
            Not After : Aug  3 09:11:10 2026 GMT
        Subject: CN=6a6720af-122e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:72:7a:84:66:06:a2:be:df:a9:0c:c2:b9:
                    ab:d4:eb:7c:fa:d3:97:2f:ba:92:05:89:a2:a0:d5:
                    a5:98:f3:40:71:d1:cf:88:0c:b3:c9:c5:ed:52:a0:
                    2f:ef:20:37:79:31:76:2f:63:f7:e2:f0:0c:50:08:
                    10:37:8c:0d:bf:5c:36:b8:f9:7f:02:0b:a6:00:55:
                    9c:b1:07:4f:a9:f2:18:89:f9:ee:a9:49:9f:5f:24:
                    e5:b5:54:2d:bc:a4:b8:fb:5a:99:b1:27:14:28:49:
                    1c:19:2e:a9:39:54:d7:4a:d7:85:eb:b4:74:4a:a3:
                    a2:c4:6b:4c:29:dc:36:8b:50:9f:71:d7:8e:f2:ca:
                    76:0f:85:5f:9e:34:21:cc:13:3b:7f:57:93:8f:30:
                    05:39:9e:f7:f5:29:1b:a0:fe:35:b3:35:84:61:5a:
                    d4:f4:fb:a3:00:0d:00:d3:57:6b:7f:71:4d:6b:94:
                    84:b6:26:55:70:91:9e:82:07:c7:9f:99:5e:ec:49:
                    4c:04:fd:8d:8f:ce:4e:32:75:c9:e4:6f:84:15:75:
                    d5:7b:ae:4d:a6:3e:05:95:6a:a4:48:df:63:c7:ae:
                    b8:d3:5a:bf:cc:a9:74:3a:c5:b1:ca:6a:62:f3:78:
                    2a:3e:60:77:e2:b0:49:40:f1:49:0b:27:37:b3:9c:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:36:69:0D:BB:3E:84:10:25:C7:6B:60:76:E2:F3:54:23:68:5A
            X509v3 Authority Key Identifier:
                keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:77:27:06:8c:53:b2:58:6a:0c:e2:44:ed:cc:ad:b0:fb:15:
         ef:b8:b6:d3:7a:21:53:13:f6:04:07:33:91:fe:eb:c0:87:46:
         3a:6b:95:fa:d4:a3:d7:8e:ba:2c:60:db:1d:3e:fb:63:55:c7:
         62:9b:ac:c1:92:ed:35:83:0d:b9:8a:89:55:1e:be:c3:13:3f:
         65:96:71:d3:dc:70:23:05:a2:52:cd:3a:55:b8:ce:66:9a:5f:
         43:03:63:b4:89:22:2c:f1:20:de:39:ea:b5:ae:4d:94:10:92:
         be:ea:14:f1:87:c9:1a:d9:26:16:8e:d5:5f:70:47:36:52:78:
         b6:4b:86:70:08:2b:27:f3:c5:f1:fb:b1:d0:3a:4b:8c:da:da:
         3a:60:57:0b:8f:d7:8f:66:d3:39:00:75:61:cc:ba:ff:7c:8d:
         1e:7a:57:8c:40:b6:94:83:80:3b:8a:71:e2:49:38:3c:76:6e:
         c5:5f:aa:dc:49:b7:30:d7:e4:b4:98:39:72:37:0d:d4:02:66:
         56:a8:5f:45:e5:b7:5d:15:98:2a:fe:f3:39:74:a6:ad:3b:4e:
         2f:bb:a2:dd:d5:b7:01:62:f8:67:b5:a6:df:da:39:6a:fa:6c:
         8a:34:52:8a:e4:79:3e:9f:0d:07:8d:4f:20:c5:72:b2:c5:b2:
         48:c9:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:33 2026 by rpki-client