Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File:                     Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier:          A/obGehDHrlrzUXY4aTrCByQLt+LYOvCgJW1qCa+yQc=
Subject key identifier:   13:8F:17:22:10:F7:67:BB:C7:C6:25:68:3E:76:DF:E4:5F:86:24:C9
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       08B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number:          08AF
Signing time:             Tue 04 Aug 2026 20:48:13 +0000
Manifest this update:     Tue 04 Aug 2026 20:48:12 +0000
Manifest next update:     Tue 11 Aug 2026 20:48:12 +0000
Files and hashes:         1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: JeNLfjvVfHHZTdH9pKXiTqYxykAt7KMorF6rL18S29o=)
                          2: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=)
                          3: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 20:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Aug  4 20:48:12 2026 GMT
            Not After : Aug 11 20:48:12 2026 GMT
        Subject: CN=6a72500d-01d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:31:16:8d:98:ab:f1:00:a6:cc:47:0e:73:
                    d3:11:88:9e:ea:f7:8d:32:73:ed:8a:e0:7f:a4:88:
                    7f:72:37:ae:8c:bc:2e:80:84:a3:1b:af:25:73:8d:
                    f8:fd:ba:07:4f:61:d5:53:2a:1b:6d:35:47:ab:46:
                    5c:a5:7b:a0:e3:61:2a:3a:eb:8c:e9:7d:9d:1e:cc:
                    53:42:75:9e:e0:da:c6:d1:6a:6f:da:06:1e:e0:55:
                    d2:60:84:7d:15:78:c8:d8:6a:f0:5b:bf:8f:31:c4:
                    7b:63:f8:77:04:49:c8:b4:07:95:dc:84:79:78:77:
                    6a:a0:62:56:fe:91:9e:3c:5d:5d:5c:15:57:2d:1e:
                    9b:dc:20:f6:8b:97:a5:39:0b:a8:7d:11:86:9b:dd:
                    11:66:0d:e7:24:b2:dd:b1:6f:78:c2:98:e6:94:5b:
                    90:19:1e:de:53:5d:d2:66:60:ca:10:29:71:97:1b:
                    44:8d:ad:ad:0e:08:5c:39:04:63:2f:ed:65:c7:a1:
                    79:31:0e:62:f9:9f:08:88:cd:01:d1:60:a7:e5:22:
                    0c:fd:d0:36:3a:2a:b3:43:13:a8:7d:7a:81:9e:a2:
                    24:42:3d:96:77:f5:79:5e:27:fc:88:27:cf:71:bb:
                    91:e4:1d:3a:8a:05:fc:e8:9f:db:87:8e:63:d5:f2:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:17:22:10:F7:67:BB:C7:C6:25:68:3E:76:DF:E4:5F:86:24:C9
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a2:ba:29:44:21:3d:9b:b9:c4:57:8c:32:e4:a2:7d:0b:7f:
         e1:8c:26:20:3c:af:39:ae:b3:e9:9c:23:93:66:80:d1:45:ea:
         58:62:25:00:4e:98:e3:79:00:56:64:bb:d7:77:52:82:c8:1d:
         ee:62:4f:88:53:e2:0c:4c:3d:87:25:9d:b5:7b:65:af:ac:e4:
         01:b5:ad:2b:43:ef:3f:68:3c:11:47:cd:0a:cc:01:89:86:62:
         c1:b0:42:e6:f7:e7:ae:d2:51:35:bd:54:70:91:7b:de:ef:94:
         be:c7:35:94:2e:be:9a:b6:20:5c:b0:db:e7:f1:47:62:00:e4:
         f7:13:11:08:89:83:86:f0:1c:f3:b7:c6:1e:37:e8:e0:17:48:
         13:b2:8a:f5:c0:d8:32:0f:fc:3c:81:46:c1:2f:3a:2e:95:12:
         07:04:ed:c0:54:f2:88:9f:38:8f:f7:a5:8a:80:6d:48:7e:60:
         73:a1:8c:e8:fa:f1:79:3c:47:dc:73:1c:bc:cd:90:04:4c:61:
         e5:ad:63:8d:21:67:29:e7:64:28:10:d4:d2:4e:97:f6:b2:96:
         4c:ff:6b:87:5a:82:a7:d1:bc:36:e6:bb:da:aa:06:e7:70:a9:
         8d:74:47:8b:76:29:7f:a4:76:5c:c8:0d:65:be:94:dc:5d:a2:
         ea:2c:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:13:09 2026 by rpki-client