Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB564/C4B138B87A4911F197FB326885A30FBC/TlmrBgGC1prglt54vNBOB-wRK2g.mft
File:                     TlmrBgGC1prglt54vNBOB-wRK2g.mft (raw, json)
Hash identifier:          oz/qKAH3Fk7vzsNzSwvUBlo/xPt1n2SwyELB+4WNmCI=
Subject key identifier:   5F:4E:10:FA:10:23:42:02:0E:08:10:63:FA:7E:B5:70:41:16:8A:54
Authority key identifier: 4E:59:AB:06:01:82:D6:9A:E0:96:DE:78:BC:D0:4E:07:EC:11:2B:68
Certificate issuer:       /CN=A91EB564/serialNumber=4E59AB060182D69AE096DE78BCD04E07EC112B68
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TlmrBgGC1prglt54vNBOB-wRK2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB564/C4B138B87A4911F197FB326885A30FBC/TlmrBgGC1prglt54vNBOB-wRK2g.mft
Manifest number:          0B
Signing time:             Mon 27 Jul 2026 11:32:40 +0000
Manifest this update:     Mon 27 Jul 2026 11:32:39 +0000
Manifest next update:     Mon 03 Aug 2026 11:32:39 +0000
Files and hashes:         1: TlmrBgGC1prglt54vNBOB-wRK2g.crl (hash: INXNzAYmZk+QhQPaCVfA2u+ZQccgDoKBYilYlIRxsVA=)
                          2: 90C76E0E7A4A11F1B8163F0086A30FBC.roa (hash: fCv7g5sI6QBAJjsmgpCilWc2txq7fioW7ApD1MdkHnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB564/C4B138B87A4911F197FB326885A30FBC/TlmrBgGC1prglt54vNBOB-wRK2g.crl
                          rsync://rpki.apnic.net/member_repository/A91EB564/C4B138B87A4911F197FB326885A30FBC/TlmrBgGC1prglt54vNBOB-wRK2g.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TlmrBgGC1prglt54vNBOB-wRK2g.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB564, serialNumber=4E59AB060182D69AE096DE78BCD04E07EC112B68
        Validity
            Not Before: Jul 27 11:32:39 2026 GMT
            Not After : Aug  3 11:32:39 2026 GMT
        Subject: CN=6a6741d8-9adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:ef:7e:63:33:1e:95:60:94:09:4a:6b:2b:
                    9a:8d:c3:28:98:bc:d5:55:e6:10:bd:45:34:50:06:
                    14:50:de:dd:16:a2:6e:ce:18:6e:63:a5:49:38:0b:
                    f8:a2:cf:a8:09:a5:06:99:f6:68:c3:3c:8e:c3:bc:
                    ba:2e:0b:d2:30:c1:55:17:78:38:2a:fd:82:e3:cb:
                    89:a2:28:5d:a2:d2:07:51:81:75:56:1a:61:9d:78:
                    ec:aa:3f:e2:27:43:b2:e5:a9:0e:10:54:36:a3:a6:
                    35:f0:0a:99:b9:8d:9e:da:c5:d7:44:b5:fb:43:2d:
                    b4:42:da:76:a6:6b:32:dc:88:8a:4f:ea:f9:aa:b1:
                    2c:e2:4a:a7:38:6f:32:83:58:5f:1d:4c:da:76:fc:
                    fa:7a:22:1c:0a:b9:6e:7e:32:06:48:91:87:4d:0b:
                    0c:fa:ea:67:97:81:03:b5:39:41:b4:a4:36:c5:b7:
                    4b:df:2a:8c:aa:81:48:07:68:3c:da:41:40:c2:f4:
                    0b:7a:4e:d1:01:28:7a:23:db:9b:5e:c3:ca:9a:d8:
                    c2:b3:80:76:3c:33:75:1c:4c:b8:04:a0:13:8a:57:
                    b7:0e:cc:e0:7d:9a:55:7f:0f:24:99:3f:da:fa:f9:
                    09:1b:b5:73:78:95:ac:be:15:fd:8e:55:9d:4c:fe:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:10:FA:10:23:42:02:0E:08:10:63:FA:7E:B5:70:41:16:8A:54
            X509v3 Authority Key Identifier:
                keyid:4E:59:AB:06:01:82:D6:9A:E0:96:DE:78:BC:D0:4E:07:EC:11:2B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB564/C4B138B87A4911F197FB326885A30FBC/TlmrBgGC1prglt54vNBOB-wRK2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TlmrBgGC1prglt54vNBOB-wRK2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/C4B138B87A4911F197FB326885A30FBC/TlmrBgGC1prglt54vNBOB-wRK2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:71:43:8f:a7:c7:aa:7e:de:e0:d8:1f:8e:37:ce:cf:33:52:
         23:f7:06:57:98:e4:e7:31:59:76:a1:1e:44:4c:99:ca:33:66:
         04:81:79:7b:4c:97:1c:c9:49:29:b3:a9:c7:4b:57:00:4d:a5:
         e5:1f:60:f2:31:ba:50:91:1d:ed:4b:ca:57:cb:c8:07:d0:e1:
         a8:2a:fa:ef:63:7f:72:13:1f:43:bf:2c:32:b9:52:e5:bf:63:
         64:34:ee:fc:22:04:a6:25:23:9a:3e:ef:a1:47:8e:77:4d:c7:
         f3:fd:06:8b:c4:93:a2:43:2e:b8:dd:0b:16:50:df:da:15:14:
         d6:59:e9:4c:e3:a4:22:51:fd:71:44:da:60:83:3a:df:45:99:
         a7:b7:9c:79:b1:8d:b1:d1:f4:d4:f7:73:44:33:c6:db:88:85:
         44:4a:c8:d4:5a:85:67:23:55:66:80:d1:1e:11:26:34:54:43:
         f4:13:81:62:ef:53:b8:87:65:37:fc:a7:83:31:b3:8b:95:70:
         dc:33:f2:83:e2:b0:71:89:37:c1:62:9c:37:05:1a:f2:44:cc:
         1b:83:40:6d:c5:2b:85:6d:13:12:4f:84:76:bc:06:19:02:3b:
         e5:93:99:62:82:29:da:2b:c5:8a:ae:c8:60:bb:02:1c:1e:57:
         70:68:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:49 2026 by rpki-client