Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File:                     tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier:          iohCllkVV1zZZd1i2LfDP7PmyiL362tx2Av68PLvDRo=
Subject key identifier:   06:4E:92:AC:C7:AF:A4:9E:98:5E:23:83:3C:CD:7A:A0:73:4F:EC:48
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer:       /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number:          0298
Signing time:             Mon 27 Jul 2026 03:06:00 +0000
Manifest this update:     Mon 27 Jul 2026 03:05:59 +0000
Manifest next update:     Mon 03 Aug 2026 03:05:59 +0000
Files and hashes:         1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: fS3PXiUFTK98RehyY7NXSZPqIHLq6A3VZL29c9RNKYY=)
                          2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
                          rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
        Validity
            Not Before: Jul 27 03:05:59 2026 GMT
            Not After : Aug  3 03:05:59 2026 GMT
        Subject: CN=6a66cb18-3141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:6d:88:07:68:89:ed:e1:89:af:65:b5:28:
                    82:a9:e3:31:c9:e8:45:ee:c3:4f:30:c2:cd:89:d7:
                    60:de:cd:6c:02:57:62:f3:16:bd:97:92:59:bd:81:
                    2a:db:6a:8a:6c:06:97:0c:63:24:2f:a9:b7:57:66:
                    36:70:21:10:2c:1a:8b:23:d8:57:69:5f:85:7d:e4:
                    88:42:7b:e5:1f:e2:71:28:b2:9d:ce:37:8d:14:70:
                    ba:54:ef:ac:c8:0e:d9:d4:8a:4d:3e:97:08:9c:99:
                    db:ba:42:9f:b4:ed:59:df:56:5e:a9:f4:b9:55:8a:
                    a2:ff:57:6e:58:ea:85:0c:c9:52:19:37:f0:99:76:
                    c7:25:38:62:de:af:6e:2a:1a:55:fc:97:b1:e7:b2:
                    0c:34:87:27:85:b1:e5:86:b9:dd:c5:20:86:1e:0a:
                    e0:61:32:6f:47:61:65:3b:3f:ea:d6:ed:34:e5:e7:
                    31:76:ed:9c:5a:e8:90:1e:e4:09:47:ff:a6:58:d7:
                    01:b9:42:46:84:ed:5e:58:85:93:70:f1:24:39:89:
                    f0:1d:e3:e5:70:02:f9:f0:0a:45:e8:9d:53:4b:74:
                    87:8c:c0:88:34:a6:23:12:47:98:3d:76:2e:fb:1a:
                    37:0d:9d:da:69:ea:1f:9d:f7:e4:18:19:f6:2f:ea:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:92:AC:C7:AF:A4:9E:98:5E:23:83:3C:CD:7A:A0:73:4F:EC:48
            X509v3 Authority Key Identifier:
                keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:dc:be:18:f1:f0:94:8c:e1:c4:80:27:2a:37:f5:fb:09:
         a3:10:15:6a:62:b7:f5:be:18:7a:2a:65:9a:fc:74:77:ce:ce:
         a1:75:d3:77:f0:e8:cb:9f:34:07:8f:50:30:8f:99:69:52:ee:
         31:16:7a:12:3c:d4:22:8a:fa:63:74:0c:b0:bc:f4:99:bb:de:
         7b:d7:1e:aa:d9:15:de:63:e8:ed:a3:0f:66:eb:d5:af:14:4d:
         4c:f5:f4:67:9e:b0:6d:08:a6:75:2b:be:94:56:8c:be:50:bb:
         a2:0a:bf:16:89:64:39:0e:f4:0d:56:93:6f:71:fa:d1:34:ed:
         71:83:86:62:2c:b6:6e:b8:d4:26:81:8f:56:d4:79:d5:90:3e:
         bf:2f:17:c9:b5:cc:88:38:bd:22:98:15:8a:aa:b5:b1:c2:c0:
         b7:4f:8e:45:47:94:14:de:f6:db:04:f8:27:97:88:03:a4:8f:
         b6:b3:5c:ce:f8:ee:04:3c:36:8f:f9:26:33:26:b8:70:e0:f1:
         cf:e8:b5:3e:52:ec:53:02:19:ce:62:4f:00:d4:77:81:6b:bd:
         f8:57:34:d9:f7:32:26:55:ff:e9:72:c5:de:c6:91:99:99:f1:
         de:f0:ea:c2:87:c0:cd:9a:80:78:cb:72:49:88:51:66:de:93:
         5c:b6:5a:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ2NEQxMTAvBgNVBAUTKEI0QjE4QTI1M0ZCNjI5MzQzNzExNjYzNUREREQxOTk0
MjhCNjhENUIwHhcNMjYwNzI3MDMwNTU5WhcNMjYwODAzMDMwNTU5WjAYMRYwFAYD
VQQDEw02YTY2Y2IxOC0zMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXZtiAdoie3hia9ltSiCqeMxyehF7sNPMMLNiddg3s1sAldi8xa9l5JZvYEq
22qKbAaXDGMkL6m3V2Y2cCEQLBqLI9hXaV+FfeSIQnvlH+JxKLKdzjeNFHC6VO+s
yA7Z1IpNPpcInJnbukKftO1Z31ZeqfS5VYqi/1duWOqFDMlSGTfwmXbHJThi3q9u
KhpV/Jex57IMNIcnhbHlhrndxSCGHgrgYTJvR2FlOz/q1u005ecxdu2cWuiQHuQJ
R/+mWNcBuUJGhO1eWIWTcPEkOYnwHePlcAL58ApF6J1TS3SHjMCINKYjEkeYPXYu
+xo3DZ3aaeofnffkGBn2L+qhrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZOkqzH
r6SemF4jgzzNeqBzT+xIMB8GA1UdIwQYMBaAFLSxiiU/tik0NxFmNd3dGZQoto1b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDY0RC8zNzA3ODZDODk5
OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQtMktUUTNFV1kxM2QwWmxDaTJq
VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMR0tKVC0yS1RRM0VXWTEzZDBabENpMmpWcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDY0RC8zNzA3ODZDODk5OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQtMktU
UTNFV1kxM2QwWmxDaTJqVnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYO7cvhjx8JSM4cSAJyo39fsJoxAVamK39b4Yeiplmvx0d87OoXXTd/Doy580
B49QMI+ZaVLuMRZ6EjzUIor6Y3QMsLz0mbvee9ceqtkV3mPo7aMPZuvVrxRNTPX0
Z56wbQimdSu+lFaMvlC7ogq/FolkOQ70DVaTb3H60TTtcYOGYiy2brjUJoGPVtR5
1ZA+vy8XybXMiDi9IpgViqq1scLAt0+ORUeUFN722wT4J5eIA6SPtrNczvjuBDw2
j/kmMya4cODxz+i1PlLsUwIZzmJPANR3gWu9+Fc02fcyJlX/6XLF3saRmZnx3vDq
wofAzZqAeMtySYhRZt6TXLZa1g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:40 2026 by rpki-client