Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
File:                     TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json)
Hash identifier:          61+pzEbCBS3hiUtTOlkblXmHTb5/yZU35Asd+C9W4NQ=
Subject key identifier:   2F:9E:21:0A:C7:73:34:B4:7D:78:BE:E9:20:D8:01:04:97:B2:9C:2E
Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
Certificate issuer:       /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Certificate serial:       1025
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
Manifest number:          1018
Signing time:             Tue 28 Jul 2026 17:33:40 +0000
Manifest this update:     Tue 28 Jul 2026 17:33:39 +0000
Manifest next update:     Tue 04 Aug 2026 17:33:39 +0000
Files and hashes:         1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: y8hbCVhZCzGkwahgCSQheo/HhXxzsDuCrNV3kJBsavs=)
                          2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: vIYlDs8E7x8tmtwgfqy6xQ1CQ25/qx1eb5H0P0MwlIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4133 (0x1025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
        Validity
            Not Before: Jul 28 17:33:39 2026 GMT
            Not After : Aug  4 17:33:39 2026 GMT
        Subject: CN=6a68e7f4-db16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:99:37:46:45:af:c3:0e:be:cf:0f:c6:b1:
                    5e:6a:06:ac:5e:e1:29:a6:ff:91:b0:25:7e:76:c5:
                    79:a7:f3:4e:b9:a7:9b:69:59:5f:9f:b8:2b:19:1b:
                    e9:95:57:08:d4:e2:80:d1:9b:ae:60:d4:04:5e:4b:
                    cb:35:eb:08:79:a2:04:8e:84:05:c5:2d:6f:f1:79:
                    0b:46:de:0d:81:01:2b:10:34:9b:7f:11:ae:17:ed:
                    06:2e:1b:8b:f3:07:f9:c8:65:f2:c1:dc:16:51:c9:
                    27:0f:3f:22:f7:08:21:f5:77:34:37:e5:31:8e:41:
                    9d:c2:0f:fb:f3:dd:79:f7:82:71:2c:cb:81:1c:75:
                    c6:e7:c1:35:4b:a6:9e:40:ea:2b:33:e2:4a:bb:51:
                    15:8f:77:eb:3f:5b:88:0c:45:7c:ad:59:78:65:24:
                    07:08:d6:dd:74:a0:5d:cc:0f:d4:ae:e3:61:c3:d1:
                    21:bd:e4:82:a7:d3:9e:68:d1:47:7d:9f:20:eb:7f:
                    cb:98:40:9c:17:a7:a2:3a:17:e2:4a:46:1d:07:9f:
                    95:00:82:12:8b:67:3b:10:d7:24:9e:ed:6d:d6:bf:
                    03:21:92:ae:6a:d6:20:12:a6:f6:c1:c8:22:fc:2f:
                    4a:01:33:26:7e:19:51:3e:52:71:32:8d:dc:8f:6f:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9E:21:0A:C7:73:34:B4:7D:78:BE:E9:20:D8:01:04:97:B2:9C:2E
            X509v3 Authority Key Identifier:
                keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:c5:f5:67:71:c3:b3:6a:a5:65:63:25:78:b4:68:c4:f5:
         ae:88:8d:c2:80:4b:41:81:13:3d:b7:0a:55:26:de:4f:96:91:
         50:31:92:c9:fc:b3:af:2b:fe:b6:2d:d4:85:01:fa:63:71:84:
         3b:b6:50:b7:a3:e0:27:57:87:1c:6b:05:af:9d:be:f4:c2:c9:
         93:40:d0:5f:54:96:79:b0:03:3b:b3:bf:81:da:d5:f1:da:aa:
         cb:18:63:7a:77:33:d6:24:a9:22:e7:8d:ff:0b:38:8a:7b:cf:
         5b:c6:cf:b7:d5:61:80:1d:41:0d:60:d9:45:01:25:fe:b2:a0:
         af:ea:43:3b:8b:f8:75:56:31:e9:34:6e:5b:bb:87:be:ea:79:
         25:a1:3c:61:91:85:d3:de:81:4b:79:c6:0e:85:d2:39:63:b9:
         15:fa:dd:da:18:5c:0e:da:d1:d6:b1:b4:27:99:8d:f5:d6:e5:
         ab:45:89:cb:02:63:3a:68:15:75:12:ce:33:c7:d7:dc:3c:0e:
         73:ec:6a:91:78:b9:3d:79:ef:8a:fa:0e:82:1c:88:fd:d9:90:
         79:42:9a:a6:02:43:3d:cb:0f:33:1e:c5:00:4e:ba:63:9a:55:
         62:7b:20:01:fb:61:f7:e3:ff:79:30:2e:85:78:c2:41:00:24:
         41:a9:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:43 2026 by rpki-client