Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File:                     TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier:          0UR0ZTkq7Risgc5gZTM2AsMhGlT2RF7y9Muj/zdnUzA=
Subject key identifier:   3D:70:8D:87:FB:45:5F:C1:A6:C2:FC:2D:38:3D:55:55:24:70:DF:7B
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer:       /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number:          B5
Signing time:             Tue 21 Jul 2026 08:48:06 +0000
Manifest this update:     Tue 21 Jul 2026 08:48:05 +0000
Manifest next update:     Tue 28 Jul 2026 08:48:05 +0000
Files and hashes:         1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: l+GgedWxQ4u4so9EyL0x2eBR3zhnl7m7awzWabdU7oA=)
                          2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
        Validity
            Not Before: Jul 21 08:48:05 2026 GMT
            Not After : Jul 28 08:48:05 2026 GMT
        Subject: CN=6a5f3246-7dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:4d:2f:aa:60:f9:72:8b:2f:de:ef:6e:c0:
                    20:37:7f:31:da:8b:ab:93:30:9c:f2:c4:7c:ba:94:
                    33:e5:65:af:61:b7:52:fd:e2:19:5e:5d:9c:f2:b7:
                    7a:53:b8:43:81:92:f4:9f:c5:f4:2d:19:25:d3:da:
                    86:f9:9c:20:0d:09:fb:e6:50:ac:aa:81:31:01:4f:
                    8d:cb:7a:37:b3:f5:96:1b:94:b3:5f:79:2c:44:95:
                    02:99:8a:ea:c4:df:d5:a5:06:8e:ed:26:8a:07:b4:
                    04:59:98:f2:ec:ba:d5:5a:65:14:b7:1c:1e:8b:0e:
                    ee:44:1a:39:a1:e6:b3:e2:5c:32:42:44:92:d4:b5:
                    75:16:e5:8b:5a:22:bd:8c:e0:e7:29:f9:37:3f:fb:
                    5e:bc:6a:89:dd:ad:dc:8e:10:01:21:72:84:ea:8d:
                    a7:1a:9b:32:c9:43:f4:b5:13:94:af:bd:a7:a2:59:
                    7c:cc:89:a1:73:3c:61:94:05:01:98:88:46:8a:9e:
                    2f:93:db:3a:21:5b:06:8e:15:55:3f:79:5f:59:68:
                    e4:06:48:46:06:7f:e4:c0:b7:f9:6c:60:be:1f:1c:
                    dc:56:69:90:e1:b8:5b:c8:70:c7:eb:3d:bf:97:73:
                    33:7e:9c:dc:d6:e4:6c:df:79:2a:d8:96:8a:cf:cc:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:70:8D:87:FB:45:5F:C1:A6:C2:FC:2D:38:3D:55:55:24:70:DF:7B
            X509v3 Authority Key Identifier:
                keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:8d:44:59:c5:56:32:36:0f:d8:c2:fe:37:b8:a2:36:d9:
         a7:3b:1d:93:5d:e9:27:0a:ca:0c:03:2e:69:57:cb:a7:35:7f:
         73:7c:ce:1a:bf:2b:01:5c:ce:1e:91:27:56:9f:90:48:c3:47:
         13:1a:09:02:a4:7d:d2:ed:0e:fe:df:5e:7b:53:69:f1:7d:ac:
         4a:63:91:a1:81:48:2f:31:2b:fc:cf:c6:80:0c:21:f3:71:16:
         1f:69:92:64:58:d5:d0:27:9a:e4:7e:3e:7d:8c:d7:4b:b0:c6:
         27:8c:b9:42:62:3c:2e:59:13:2f:27:12:55:0e:bf:e7:05:79:
         f1:11:55:86:07:8c:f3:f6:17:72:8d:f5:6f:33:d9:49:b3:12:
         06:f4:a3:1c:e1:13:69:01:72:74:a4:e3:9d:cf:d3:50:7b:66:
         6b:f9:2b:9e:b0:c2:03:70:09:ca:b5:8b:1f:de:cb:05:fd:e0:
         4e:6c:9f:6d:eb:32:9f:e3:c2:fc:ef:0a:97:4e:af:88:dc:7e:
         ce:69:f8:19:b4:dc:66:1c:b9:e3:44:5b:1c:e2:47:b3:2d:fe:
         a1:89:14:53:81:fe:91:e4:36:0f:be:0a:13:80:cc:90:a2:16:
         36:40:11:74:16:3b:e4:04:e8:fc:e0:6e:d2:0b:23:ee:74:f9:
         17:76:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:27 2026 by rpki-client