Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File:                     TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier:          s5UGpjjAAr7hXSeV9UUG6p/l1U6zZJxoNFS0F6OegZ8=
Subject key identifier:   83:D8:13:B4:9E:15:C5:AC:65:2C:99:9E:CC:8D:14:EF:B0:D5:66:39
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer:       /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number:          66
Signing time:             Mon 27 Jul 2026 10:18:38 +0000
Manifest this update:     Mon 27 Jul 2026 10:18:38 +0000
Manifest next update:     Mon 03 Aug 2026 10:18:38 +0000
Files and hashes:         1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: PwRZ/5LP3xz7fMDzNsx/FXTcpcSV0l9gfBsERsmiaMw=)
                          2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
        Validity
            Not Before: Jul 27 10:18:38 2026 GMT
            Not After : Aug  3 10:18:38 2026 GMT
        Subject: CN=6a67307e-69e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:94:33:f3:c8:bd:0a:15:2d:28:9b:fc:85:
                    e5:cf:49:68:08:07:66:25:50:8b:79:60:b1:5d:16:
                    0d:ae:a7:b6:a1:dd:a8:f4:5c:6a:5a:26:9e:d9:9b:
                    98:e3:9f:da:53:60:05:32:b6:55:36:2c:24:d7:a0:
                    a9:5a:cf:66:44:ee:26:5e:41:91:dd:cb:cb:a9:b7:
                    02:c0:64:46:f5:9c:52:82:68:9a:85:d1:3e:e2:4d:
                    b3:e3:bc:af:30:4f:0b:6b:32:16:ae:f0:b0:af:5c:
                    89:9f:75:19:cd:f7:1d:c0:85:2c:77:5f:d0:9c:9a:
                    f4:7e:10:ab:58:88:0a:0f:4f:78:d8:e5:61:af:6d:
                    cd:31:49:28:4e:ba:4c:f4:07:67:c6:32:5f:ca:8c:
                    d0:33:fa:31:43:9b:76:78:b4:6e:ed:86:67:0a:bf:
                    48:ca:f0:07:4a:fe:1f:9f:c4:ad:a8:bf:3c:0b:e1:
                    b2:71:55:5c:87:37:c9:1f:93:8f:42:6d:cc:81:b4:
                    50:0b:31:a2:13:0e:eb:5c:55:5b:05:8c:01:ee:ac:
                    cf:f3:7c:94:92:52:d7:2d:cc:98:ff:de:30:69:26:
                    c2:e7:fc:ad:55:0e:aa:db:b1:c8:96:33:b7:b7:19:
                    f0:ed:21:53:a5:3b:46:06:ef:1e:29:d4:0b:a0:89:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D8:13:B4:9E:15:C5:AC:65:2C:99:9E:CC:8D:14:EF:B0:D5:66:39
            X509v3 Authority Key Identifier:
                keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:72:55:fc:4e:a9:9c:f3:b7:88:b3:97:ed:2f:84:86:60:a3:
         7a:4b:bf:f1:e8:c0:41:3f:08:63:2d:29:cd:e8:59:1a:b1:db:
         28:c7:bd:c1:10:4e:41:2a:ca:06:cf:75:ba:0f:95:52:88:04:
         02:5b:85:5f:94:37:ec:1b:f8:8d:0c:72:47:01:5b:55:a1:d4:
         1a:7c:51:a7:01:60:a0:bc:35:cc:f2:c6:14:2e:09:f5:82:94:
         f0:1c:20:e7:eb:7c:1f:23:18:7b:9d:09:d3:81:75:09:ca:e4:
         37:6d:22:f6:d9:b0:56:69:52:23:3d:98:cc:9e:b5:cd:79:02:
         ab:72:49:13:f5:96:bc:fc:d4:e9:9f:07:61:22:19:1e:c4:a2:
         44:fe:28:39:1f:b2:5b:22:55:30:ee:d0:d4:4c:73:ae:29:a1:
         e3:e0:d0:19:ca:af:d5:8f:02:65:50:33:97:71:2d:ba:51:c5:
         4e:e0:20:69:f6:40:ff:c7:cb:1c:42:39:85:32:5e:ff:0b:cc:
         d8:26:fc:d0:d9:1e:20:16:b2:07:72:6c:42:48:1d:cf:e9:1e:
         b7:56:1d:0a:16:13:ad:0d:ef:64:d3:6b:55:5d:74:87:55:6b:
         3e:cd:1d:e9:4f:12:ac:5e:05:f2:85:e1:eb:f9:03:c5:c0:c2:
         9c:0e:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:44 2026 by rpki-client