Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File:                     tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier:          RjCOCdQPi9r8wTSeBQ5ih01N30ByzUwdNujNZMC1gd0=
Subject key identifier:   2D:36:55:EB:6D:4C:4C:A8:1E:EB:A5:2B:F5:F4:84:7A:A2:B8:F5:87
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer:       /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial:       135E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number:          1354
Signing time:             Mon 20 Jul 2026 17:08:00 +0000
Manifest this update:     Mon 20 Jul 2026 17:07:59 +0000
Manifest next update:     Mon 27 Jul 2026 17:07:59 +0000
Files and hashes:         1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: zwWs231WzD6E8vd3/uzmCndlEKmhGzEqa1leQB4ipbI=)
                          2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: 9goWELW0trcqEqqFWMwPmGOCRkrjj1+FxG/eq2UNrIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 17:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4958 (0x135e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
        Validity
            Not Before: Jul 20 17:07:59 2026 GMT
            Not After : Jul 27 17:07:59 2026 GMT
        Subject: CN=6a5e55f0-08a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:d8:4a:d8:b0:d7:0f:58:62:e2:17:02:14:
                    76:55:26:a6:33:75:ca:ec:d9:2a:be:af:b3:5b:ae:
                    e1:80:9e:c2:3a:61:14:20:b2:44:fe:04:6d:c8:97:
                    ac:55:4f:e9:aa:dd:77:d7:57:e5:a5:b0:88:55:39:
                    d5:7a:36:87:f7:1f:f7:55:4d:34:e7:bb:0b:0f:20:
                    9f:ec:f5:f9:2a:dd:8c:65:93:5b:3a:98:1a:80:75:
                    a6:ca:f6:da:a0:f2:b5:1d:8a:c7:0c:2b:26:0d:3b:
                    04:c9:ce:62:d9:6e:e5:32:10:39:24:a1:7f:fc:d2:
                    86:d7:3f:c4:1b:3e:64:15:02:70:b7:dc:22:08:74:
                    6f:cc:7e:31:01:b6:23:4c:8a:72:ee:e3:8d:6c:4a:
                    f6:71:1f:88:e1:64:a3:52:39:8b:bb:fb:71:53:a1:
                    9a:a5:bf:b2:f6:d0:b5:8d:73:4a:6c:b4:e1:7b:71:
                    43:44:7b:fc:05:4b:80:de:28:df:4b:fd:82:e5:fb:
                    f3:d8:7b:33:2c:d7:a9:70:85:39:3c:aa:6d:a9:c2:
                    34:75:74:46:2a:15:b0:e3:83:ad:dc:c3:a0:a2:f8:
                    29:f8:80:f9:de:43:9b:80:89:0b:a7:fb:63:2f:e2:
                    b3:4e:56:a0:26:2d:05:61:19:09:cf:fa:26:ec:29:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:36:55:EB:6D:4C:4C:A8:1E:EB:A5:2B:F5:F4:84:7A:A2:B8:F5:87
            X509v3 Authority Key Identifier:
                keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b4:1b:64:46:ca:9a:8b:90:30:88:2f:50:f6:e6:8b:a3:22:
         1d:ef:54:8e:27:84:f2:e6:71:1b:9c:63:6d:40:b7:11:b4:6f:
         03:69:24:de:4b:d4:bd:56:56:05:33:da:56:30:74:a8:00:eb:
         fc:f4:d0:aa:05:49:bc:fc:3d:4a:f9:60:b8:be:a5:6a:fc:7e:
         49:f9:75:0c:53:bd:80:7a:4c:2d:77:a0:21:92:8b:11:1e:75:
         2e:5f:33:6c:79:17:f7:63:8e:ee:05:ff:b3:ae:ec:4e:36:4c:
         d0:8f:54:c1:81:b5:89:57:74:dd:bc:ab:d4:c0:ae:a5:a9:11:
         72:1e:3d:69:80:d3:8a:46:9e:f2:af:32:bc:80:10:d2:0b:34:
         a9:42:3d:a5:7e:c9:e3:01:80:44:a8:44:23:3e:01:a6:c4:c5:
         50:6a:93:a5:34:ef:fa:b8:49:de:57:4a:66:05:3d:1c:19:20:
         1f:83:6b:40:b0:1f:66:f7:25:6e:58:e5:53:17:05:22:ba:33:
         06:a2:56:cf:58:de:ed:85:88:b2:c7:88:a1:5e:7c:f7:44:61:
         ce:cb:f6:e2:02:9f:44:97:16:b4:25:02:be:af:ff:2c:74:53:
         f6:b1:e8:e9:f9:ce:7a:b8:f7:50:2e:c8:ad:50:64:f1:7f:b1:
         f1:c8:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:45:52 2026 by rpki-client