Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File:                     TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier:          C5i2+H3KkJIz/usns19I5DdTlmAnFytkJHguzN/MxFk=
Subject key identifier:   24:EA:7C:90:A4:51:78:8C:BE:D7:6C:37:83:CC:78:61:70:31:6B:EC
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number:          0642
Signing time:             Tue 28 Jul 2026 23:19:36 +0000
Manifest this update:     Tue 28 Jul 2026 23:19:36 +0000
Manifest next update:     Tue 04 Aug 2026 23:19:36 +0000
Files and hashes:         1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: 9Xg0ZXj5gHpCNdeLhCtfMRI4cgBAk2OsCH9ugPUKwJs=)
                          2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
                          rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Jul 28 23:19:36 2026 GMT
            Not After : Aug  4 23:19:36 2026 GMT
        Subject: CN=6a693908-b94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:22:68:55:cd:b7:51:75:dc:ba:f6:82:07:
                    43:44:29:26:6e:62:0e:79:df:a4:a4:d5:34:7b:e3:
                    f4:65:f7:77:b7:21:73:64:78:cb:70:23:68:8e:44:
                    ae:84:fd:03:3c:3b:61:80:05:5c:31:54:62:5d:fb:
                    a0:d4:bb:e8:0f:e6:99:fa:24:3e:af:ec:ad:71:20:
                    c6:9d:25:76:18:f8:b2:9b:f2:06:68:23:32:e2:bd:
                    b9:e4:b8:85:a9:da:d2:5a:2e:de:e7:95:6d:9b:c5:
                    28:0a:fe:36:67:bd:99:1a:2b:a8:ae:fb:5a:7d:07:
                    50:7c:1e:84:01:10:48:d5:4b:da:6f:da:ba:f9:c5:
                    db:67:f8:b4:e8:bd:c9:be:af:23:03:3b:d1:dc:fc:
                    99:31:e7:e9:a8:ed:27:8a:50:c0:8c:7c:b8:dd:35:
                    b9:bf:85:75:ca:8a:62:a2:d7:8b:84:2f:84:26:87:
                    87:22:60:45:29:20:4c:ea:8f:ae:70:13:38:59:62:
                    9d:4d:89:83:b6:f0:f8:65:64:95:f9:fb:be:fd:48:
                    ed:87:5f:7d:6b:8e:d8:bc:37:83:92:b1:d8:0d:de:
                    2f:32:71:48:44:43:56:1f:9f:be:c0:86:72:63:ee:
                    22:0b:a3:86:5f:61:92:b1:a1:bd:ff:1c:b8:fa:db:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EA:7C:90:A4:51:78:8C:BE:D7:6C:37:83:CC:78:61:70:31:6B:EC
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:76:cd:ea:a5:7b:cf:70:0c:fc:f5:3d:6d:6f:37:33:1a:
         37:21:36:3b:fb:06:d2:1b:35:e3:29:3a:b2:d8:49:1e:b4:86:
         1a:20:31:4d:8e:6a:4b:5a:d9:3f:a3:38:d1:54:15:0c:63:9d:
         05:47:d2:94:53:1a:62:b7:ca:8f:1a:08:e6:0e:75:66:7b:1e:
         e6:17:7f:19:61:85:3f:a1:85:72:93:c2:c8:45:e3:16:86:bf:
         95:4b:95:b2:8d:63:45:82:2e:fc:88:54:19:fb:ae:67:3e:f9:
         51:53:7d:4b:03:e6:b6:0b:3f:95:0e:6f:35:76:fa:27:ce:83:
         9d:f3:6b:51:c2:cb:4b:1f:13:0f:27:50:09:3e:5e:2e:cc:f1:
         46:5b:5e:b0:cf:32:a8:29:36:46:be:f6:f7:f3:85:ef:24:15:
         91:4c:fa:7c:b2:a5:7e:6b:d5:bb:e0:bd:7d:b3:31:68:35:54:
         37:fa:36:fa:12:74:30:0d:85:55:95:73:25:9b:5b:b1:9f:38:
         96:9a:aa:4e:51:d3:de:2f:57:57:6d:42:47:3f:62:09:4b:fa:
         cb:7c:de:9f:50:df:f2:b2:87:e1:c7:16:b6:5d:8a:8a:90:73:
         33:00:e7:92:96:7a:bf:d8:82:b2:7d:78:86:36:ba:3d:25:24:
         60:61:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:34:59 2026 by rpki-client