Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File:                     TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier:          0dvagK6elmM18CQUbI36mxUpsKuSxU/Gq2RyB3RKp5U=
Subject key identifier:   E2:A1:30:00:76:CE:B4:70:48:3C:82:20:89:0A:37:29:A1:11:3E:C8
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer:       /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number:          024E
Signing time:             Mon 27 Jul 2026 03:57:24 +0000
Manifest this update:     Mon 27 Jul 2026 03:57:23 +0000
Manifest next update:     Mon 03 Aug 2026 03:57:23 +0000
Files and hashes:         1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: K5F2dMBIgM+vcwFP4eeGCh+kDiVolCdJRps7pBj2LDI=)
                          2: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
                          3: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
                          rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
        Validity
            Not Before: Jul 27 03:57:23 2026 GMT
            Not After : Aug  3 03:57:23 2026 GMT
        Subject: CN=6a66d724-e0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:78:4d:c1:69:6b:ea:ce:0a:c6:71:a6:48:50:
                    02:09:5c:68:14:1f:e2:f7:3a:4d:ac:1c:3c:41:03:
                    41:fa:29:02:04:08:85:07:a1:da:c7:93:96:03:16:
                    f3:4c:e7:32:37:06:4d:d0:d2:2a:cc:a9:c9:cd:a0:
                    fd:76:29:e4:75:2a:1d:b2:ce:36:6d:40:c3:76:33:
                    3b:13:43:ad:a1:30:20:aa:4e:eb:b8:68:f6:0f:1f:
                    87:21:83:74:6f:9e:ce:9d:8e:68:b8:a7:84:9c:52:
                    c5:36:43:12:8a:88:01:22:18:11:c9:7b:52:5c:d6:
                    8e:ed:1a:20:bb:8e:ed:13:3d:84:38:cc:b8:5a:64:
                    ba:69:e8:61:10:e5:68:b2:04:91:1d:73:8d:63:32:
                    48:ab:2a:df:ae:6a:c7:e8:ca:45:68:17:0c:11:82:
                    24:b4:dd:98:5b:f8:ec:6d:f1:5a:e1:08:9e:65:0c:
                    c1:cd:0d:4c:3c:64:f1:b7:fe:05:55:fe:ac:c3:1b:
                    6f:a0:13:6f:c4:e7:ce:f0:79:e6:38:de:95:2b:72:
                    53:74:d1:a3:f9:40:5c:3b:72:d5:3c:40:30:1d:3a:
                    10:50:9b:40:f1:77:a0:14:ad:d0:ad:df:ae:e0:08:
                    99:d3:80:0c:8d:50:14:bd:7a:6b:ef:3a:4e:30:18:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:30:00:76:CE:B4:70:48:3C:82:20:89:0A:37:29:A1:11:3E:C8
            X509v3 Authority Key Identifier:
                keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:8a:51:51:c3:b2:f3:8f:6f:f0:0c:3a:21:cf:5a:cd:55:
         16:97:6a:43:f7:18:d0:4f:06:89:cc:7e:23:6f:82:ab:c4:93:
         07:cd:98:12:67:00:ff:7d:84:dc:85:40:e6:86:f1:a5:16:b8:
         f9:cb:b8:f4:cd:62:78:c8:32:d1:1d:2f:4a:a5:2a:9a:3f:df:
         5c:6a:97:7a:c0:91:f6:af:b6:72:4f:c8:45:47:ff:93:e1:ff:
         ef:f9:70:32:8c:fc:c9:66:bf:bb:3f:f1:5c:57:d2:33:3f:b9:
         c3:ad:ec:d2:25:98:da:0c:8c:9b:97:e5:27:84:66:e4:da:26:
         74:3f:5b:d0:fd:1d:3c:65:ee:41:9f:a7:7c:97:5e:11:51:75:
         55:5d:a8:8f:de:df:fb:f8:03:65:10:25:31:40:8b:54:4b:b8:
         7b:ba:ca:8c:85:57:5f:45:c6:86:3f:f8:b3:b9:07:e7:41:d0:
         7d:5c:90:91:48:db:42:33:66:fe:0a:09:dc:da:e4:42:7e:68:
         1e:a5:30:99:09:e6:be:98:1b:a3:b8:8c:32:bb:3a:b6:06:9f:
         bd:80:bb:89:53:9e:70:19:14:2d:88:c6:c9:28:4b:fd:38:c6:
         ac:26:ac:d1:19:69:af:6b:82:d6:d7:32:4d:d6:3e:f4:df:1c:
         cb:d0:b1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:17 2026 by rpki-client