Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
File:                     tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json)
Hash identifier:          P7LSqYIsISKj5veyIJsQIZQuN4X8DlJPeOO/DzDMgDM=
Subject key identifier:   AC:D4:FB:4E:4D:1E:FE:37:26:D7:6D:6C:40:87:66:5A:75:33:22:6B
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Certificate issuer:       /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
Manifest number:          0872
Signing time:             Mon 20 Jul 2026 21:19:50 +0000
Manifest this update:     Mon 20 Jul 2026 21:19:49 +0000
Manifest next update:     Mon 27 Jul 2026 21:19:49 +0000
Files and hashes:         1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: HkytrEKzwnc79TJCOeDo4r9Y/KUP6YZ6pK95f5/jjPE=)
                          2: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: BTeoFCLWLpJ86fj7WEbev+ObD3ksVZlkHRSpsEYdtlo=)
                          3: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: Q+M0wOPGgg1Hskurs4am6L9I8fPJGpOHtrzr/zGhOeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
        Validity
            Not Before: Jul 20 21:19:49 2026 GMT
            Not After : Jul 27 21:19:49 2026 GMT
        Subject: CN=6a5e90f5-ef25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:d6:88:77:87:22:08:ec:7b:69:2e:94:16:
                    97:81:c6:10:7a:6e:cd:4b:d8:f9:af:1c:f8:a4:aa:
                    9e:0d:fc:ef:d7:94:42:26:f0:14:ba:6b:7f:d9:46:
                    78:cb:5e:76:5a:bb:2e:2f:9f:a4:c0:27:09:6d:43:
                    b7:78:1f:9f:72:79:b7:92:27:70:c6:65:d8:ec:e3:
                    df:34:42:27:17:6b:fc:1c:f8:88:7f:af:c9:49:b4:
                    37:7c:5f:71:16:c0:ad:25:37:f4:00:d3:64:22:03:
                    1f:f6:56:c2:e1:a9:45:68:1c:3d:07:cb:46:96:9b:
                    8b:1b:ac:66:02:29:f4:b9:d4:a9:d0:6f:cc:04:31:
                    5c:0c:a8:9d:1f:10:37:56:d7:ae:fb:2f:a2:2f:54:
                    83:b9:02:3e:31:44:ca:00:94:11:d4:ef:43:e9:53:
                    ea:d2:e9:1a:e1:2b:09:f8:7a:17:e6:94:24:fe:43:
                    e1:e5:2c:30:49:ac:7c:b9:d6:1d:02:5c:4f:b5:e9:
                    66:ee:79:5d:1a:d6:93:01:93:a3:2e:d4:36:0f:d7:
                    c8:81:1b:96:81:4f:5e:d0:71:b0:50:43:b8:07:c8:
                    40:f2:0d:60:1d:39:1e:c0:4f:f9:67:f8:b0:c7:5e:
                    82:81:b9:31:8d:74:81:a5:55:95:e3:1d:20:a6:26:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:FB:4E:4D:1E:FE:37:26:D7:6D:6C:40:87:66:5A:75:33:22:6B
            X509v3 Authority Key Identifier:
                keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b8:70:1e:b3:83:75:8b:c6:79:89:2e:36:af:12:9f:02:b5:
         d2:48:4f:f2:99:6b:86:ff:4c:a5:e9:62:67:9e:0c:06:1d:58:
         65:7b:73:05:cc:38:e8:87:76:ef:11:e2:57:ab:87:e5:05:e2:
         26:2a:63:82:51:f5:7d:27:11:69:f4:b1:7d:9e:f2:15:59:dc:
         1a:a7:b0:63:0e:45:cf:cc:c6:a6:e1:15:ea:3f:ea:65:89:f9:
         14:af:22:06:d0:75:67:52:48:e9:2e:72:3d:64:78:e9:04:6c:
         3a:aa:e1:c0:db:8d:a8:7f:5b:70:48:0b:cb:fc:b0:8d:c0:a2:
         7d:d7:28:de:11:ae:84:d2:fd:ca:ba:8b:b5:58:c3:d4:33:c9:
         58:ea:e3:25:33:f8:4c:93:9e:ca:78:32:9d:de:2d:5e:23:27:
         68:55:0c:30:1c:01:2c:c5:48:d8:b5:20:c8:eb:f7:9a:57:16:
         59:c4:4e:99:b8:7b:75:df:48:8c:b1:81:bb:90:2e:e3:9a:fc:
         37:a7:fb:44:37:60:5e:c7:70:eb:c5:39:c6:c8:1f:44:ef:78:
         52:2e:46:de:43:d5:b8:e1:7f:19:e9:91:42:a6:44:28:ea:11:
         8d:51:3c:5f:9a:72:d3:0a:52:02:0d:0d:e0:51:d9:c4:ba:a6:
         eb:f6:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:16:09 2026 by rpki-client