Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File:                     TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier:          WQKoHsEyf6hRobiNAIyLmHPaONgKAo7pZ8JyjkNR3+s=
Subject key identifier:   44:F2:37:D9:7B:C4:3E:55:20:07:C3:6B:EF:24:6A:B3:9F:5F:3C:D2
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer:       /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number:          019B
Signing time:             Wed 29 Jul 2026 05:31:16 +0000
Manifest this update:     Wed 29 Jul 2026 05:31:15 +0000
Manifest next update:     Wed 05 Aug 2026 05:31:15 +0000
Files and hashes:         1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: 7ppF1jn714jQEFBQ75q8NHXu/nOFCYzUD2HFDcpKOG8=)
                          2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
        Validity
            Not Before: Jul 29 05:31:15 2026 GMT
            Not After : Aug  5 05:31:15 2026 GMT
        Subject: CN=6a699024-d72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:a8:dd:dd:9e:5b:26:a4:03:5d:43:23:ff:
                    e3:c6:06:6b:06:04:d1:9f:e7:5e:f9:ff:4b:aa:90:
                    7b:28:7e:2a:bb:b1:04:1e:b3:8f:71:81:21:b7:1f:
                    08:01:62:d5:af:88:7d:ee:32:0f:65:de:b6:da:7b:
                    b3:be:c3:d5:ab:3e:94:f0:bf:1e:37:79:d7:d6:45:
                    56:39:2f:8c:e1:9f:a5:04:a6:17:65:1d:cb:77:b7:
                    3c:f9:42:b6:db:2b:0b:a7:50:87:0c:16:a0:15:b4:
                    aa:aa:8f:a8:24:cb:21:e4:68:ab:ae:3f:3a:c1:a9:
                    03:4a:87:68:3b:04:e0:e8:98:f1:4f:be:d1:bb:40:
                    25:8d:a1:40:5f:96:39:58:13:a2:3f:42:5c:71:6e:
                    d6:b6:c6:53:b5:58:14:d3:d4:14:53:9e:7d:d7:4f:
                    16:58:9d:e2:ad:ca:80:35:30:a7:26:bc:44:42:97:
                    d7:bc:24:5c:9e:f6:d3:6e:62:08:3a:60:31:66:db:
                    a5:99:ff:b8:24:38:2e:6f:be:2c:ce:95:d5:b6:0a:
                    06:4c:ee:ba:9b:86:8f:86:8a:d3:51:12:72:de:b0:
                    63:7c:cb:c1:69:f0:46:7d:48:cd:1b:75:5e:be:c4:
                    4f:5b:3c:35:4b:14:6c:8d:6d:58:dc:02:2f:8e:50:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:37:D9:7B:C4:3E:55:20:07:C3:6B:EF:24:6A:B3:9F:5F:3C:D2
            X509v3 Authority Key Identifier:
                keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:92:0e:43:c3:a0:80:29:85:9a:d0:1c:86:5d:90:93:0a:
         a0:7c:50:9d:40:68:b6:1f:2c:87:03:73:5d:41:d8:b8:2e:55:
         93:b0:7c:e2:d8:25:e5:63:98:93:85:17:0e:77:5c:ca:a5:9a:
         3b:44:36:48:c9:77:38:2e:82:56:de:7d:f3:fe:da:c5:c3:21:
         f4:99:d7:74:25:a7:7b:61:ef:4d:b2:da:e8:12:c6:e1:54:ba:
         c1:12:41:47:ea:65:33:5b:3d:c1:40:00:2d:df:52:a9:97:94:
         43:dd:9c:6a:c8:9e:06:35:03:2a:64:03:3b:99:5f:27:4a:49:
         01:c5:cd:d2:7a:25:fa:51:fc:f3:ba:a9:8b:81:dd:76:90:89:
         a4:d3:7c:54:fa:56:8b:a8:ed:eb:11:fa:86:a0:8f:25:dc:f3:
         f5:cc:09:85:8b:7f:34:77:d6:e9:f7:22:6f:05:e4:98:16:00:
         18:1e:b1:78:81:de:46:a8:83:53:d3:a5:5c:fe:87:63:42:b6:
         7f:5b:8e:cc:a7:84:dc:6f:bd:1e:72:c8:6f:35:89:6b:79:c1:
         16:c5:04:09:97:bd:8e:c6:8b:c3:93:29:e8:1c:b1:c2:ae:52:
         b2:29:de:60:06:56:8b:3c:2a:f0:d1:43:86:b7:de:ba:08:36:
         6b:9c:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:17:22 2026 by rpki-client