Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
File:                     tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json)
Hash identifier:          Y+r8eY2807jB8CSFmgEZQvLyDyjr/4MaqEOLiXATREw=
Subject key identifier:   C5:B4:B9:2B:BF:11:57:42:BE:4C:D9:8B:50:7C:1D:08:24:82:99:EC
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Certificate issuer:       /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
Manifest number:          0285
Signing time:             Wed 29 Jul 2026 03:05:51 +0000
Manifest this update:     Wed 29 Jul 2026 03:05:51 +0000
Manifest next update:     Wed 05 Aug 2026 03:05:51 +0000
Files and hashes:         1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: eR4EMphbK3g+Oh9V7S/W7riA8Smhr5FafxJU2ZNjsWY=)
                          2: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=)
                          3: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: WJy0DDE3R4DJLfi+G/eV3lsb3PxP1zjDf/s8mlf+RmM=)
                          4: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
                          rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
        Validity
            Not Before: Jul 29 03:05:51 2026 GMT
            Not After : Aug  5 03:05:51 2026 GMT
        Subject: CN=6a696e0f-1f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:fb:a6:70:61:fb:19:92:e9:9f:d3:96:d7:
                    ab:f3:65:2e:a5:48:a2:68:d3:34:65:89:a8:bc:e5:
                    e2:c1:e2:db:71:d1:cd:48:9f:95:fe:86:22:60:f9:
                    33:2c:d9:2c:56:31:7c:64:17:91:0c:78:76:da:c7:
                    27:b0:36:d8:b6:30:90:4e:c6:00:61:9b:fd:b9:42:
                    8c:6a:e6:78:d3:95:15:ec:fd:1b:e6:76:6d:8e:1d:
                    c8:b9:6e:b2:22:2a:0a:77:56:6b:89:b8:e2:a8:7a:
                    f0:c1:9f:0b:23:90:bc:66:61:8b:80:c1:11:52:59:
                    71:4d:00:cc:2b:88:d9:11:25:64:c7:9b:4a:7f:e9:
                    53:5f:7c:c8:15:22:31:db:8e:b9:62:3b:78:91:d9:
                    c1:a8:ab:d6:ce:16:3f:0c:5e:1a:04:e8:fe:fa:45:
                    1f:ab:0f:bf:4a:e5:32:af:4d:00:37:0e:3f:07:52:
                    a1:50:3b:67:3b:f7:d4:f4:98:67:be:8e:6e:0e:d8:
                    54:21:d7:60:4e:3a:2b:29:a2:f5:03:3e:1c:13:5b:
                    2c:9b:34:5b:cc:c3:19:ef:6c:fb:98:f3:ce:55:ef:
                    03:3f:55:49:61:e8:04:93:fb:ed:e1:b1:3c:9c:f6:
                    3c:1b:5d:19:56:74:59:4b:b6:7b:28:75:eb:c5:fe:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B4:B9:2B:BF:11:57:42:BE:4C:D9:8B:50:7C:1D:08:24:82:99:EC
            X509v3 Authority Key Identifier:
                keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:fb:37:c6:5f:49:39:74:91:88:f8:07:6e:08:1d:55:e3:
         e0:72:3d:14:b8:c9:1f:7c:8e:a0:f7:9a:08:11:e3:b5:b5:d4:
         89:40:23:f8:cd:37:12:ee:8d:d9:16:dd:90:f6:40:72:df:e1:
         98:eb:d8:77:d5:4d:2f:a5:73:c4:25:51:69:84:b4:2e:11:c6:
         20:87:6e:4b:42:aa:b2:83:3c:72:39:6d:56:e2:d2:36:34:63:
         26:ec:13:c5:ce:63:e0:71:6d:90:0a:de:9b:64:99:dc:fa:59:
         84:de:be:47:0a:c6:cb:f4:ba:b3:ab:fe:7d:be:82:1d:5b:0c:
         f7:8c:df:e3:96:2e:94:72:98:5b:ac:fc:6b:86:5b:e8:04:1d:
         16:5f:90:88:d9:f9:6a:b6:7b:0f:08:ea:3f:10:20:56:31:6e:
         94:98:1e:34:98:18:be:a3:62:0e:77:b3:4d:89:c4:2e:d9:f5:
         26:6f:5c:de:e3:fc:3a:98:54:2f:6b:4b:b9:21:c8:de:ee:60:
         82:22:a4:5a:84:7e:84:5c:d4:8c:3c:12:5a:da:aa:6a:c2:b7:
         6c:ab:0e:80:82:8b:f8:3c:ee:69:a1:d7:58:33:db:15:0a:d8:
         ee:b6:70:d8:d9:f8:c0:4f:47:55:ec:86:14:13:fc:d3:0d:f0:
         b4:b1:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:17 2026 by rpki-client