Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft
File:                     TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft (raw, json)
Hash identifier:          eLOhgbc99Vb2Q32CDBUQE17h+EXk9T6il0qDz8d6lic=
Subject key identifier:   72:AB:04:60:62:4E:1C:42:87:02:9D:62:E3:E2:05:59:16:2B:84:DA
Authority key identifier: 4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8
Certificate issuer:       /CN=A9129FB7/serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft
Manifest number:          10
Signing time:             Fri 17 Jul 2026 10:25:49 +0000
Manifest this update:     Fri 17 Jul 2026 10:25:49 +0000
Manifest next update:     Fri 24 Jul 2026 10:25:49 +0000
Files and hashes:         1: TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl (hash: z/WFm9ipvFRGzAlDT77tuEwT5T3u1m7prTf28jV9NmI=)
                          2: C524767269FD11F1BAFBB65F6847A888.roa (hash: ygqljUs8p8UwgEQzC1Y+C3YKpEUTVGsqmNq6WUEwm9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl
                          rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129FB7, serialNumber=4C625310E83C40D732DDB03847858763D48BDDD8
        Validity
            Not Before: Jul 17 10:25:49 2026 GMT
            Not After : Jul 24 10:25:49 2026 GMT
        Subject: CN=6a5a032d-02fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:e8:0a:ad:0b:1a:d9:c7:b9:52:eb:72:dd:
                    2c:98:bc:2f:1c:85:47:6a:f4:c7:fb:a2:ec:2a:8a:
                    29:27:08:72:88:b3:00:87:6b:ac:32:18:ed:4a:32:
                    66:6d:0d:e6:9e:3a:29:cf:a6:90:6b:ec:6e:1e:f2:
                    80:02:6b:46:ba:e4:a7:bb:b2:88:59:22:87:20:da:
                    35:e9:ae:8c:c5:9d:4a:bd:d9:5c:4b:4a:d2:7b:b2:
                    65:36:5b:be:da:f8:de:3c:ff:d0:54:e9:69:a1:d0:
                    0f:53:ba:e4:54:fa:74:8b:b5:ea:8b:15:1f:28:38:
                    e0:52:c4:d8:38:52:47:b2:4b:6b:31:da:bc:de:7f:
                    6d:dc:d2:bb:56:1b:5c:73:dd:35:59:bd:be:5f:a1:
                    77:42:39:b4:73:6e:9b:24:97:bb:f7:bd:8b:bd:39:
                    21:97:32:c8:87:00:90:52:ad:cd:b5:ea:b1:87:9c:
                    76:22:ee:52:fa:fb:54:e3:18:ec:ad:4d:62:30:ee:
                    1c:ec:a2:fd:1c:9c:44:57:3d:3e:8c:ac:59:fc:cd:
                    66:2b:3d:e6:d4:e1:49:3f:d8:4d:84:84:da:78:99:
                    42:b3:a0:46:0a:4f:8b:fc:fa:67:da:23:50:77:9d:
                    85:65:04:30:b6:54:1c:b7:d9:6d:60:73:be:85:a6:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AB:04:60:62:4E:1C:42:87:02:9D:62:E3:E2:05:59:16:2B:84:DA
            X509v3 Authority Key Identifier:
                keyid:4C:62:53:10:E8:3C:40:D7:32:DD:B0:38:47:85:87:63:D4:8B:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TGJTEOg8QNcy3bA4R4WHY9SL3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5410DC5C69FB11F1813F12BD6747A888/TGJTEOg8QNcy3bA4R4WHY9SL3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1a:f0:96:f1:10:5f:d4:9f:9f:c4:a8:d6:ea:c5:42:a0:0c:
         45:0f:35:a7:e9:e5:c0:e2:eb:60:9c:54:c0:14:df:00:15:8b:
         20:6a:31:79:82:86:aa:5b:00:61:bd:ff:16:82:04:78:0f:ca:
         a6:17:63:81:31:a3:96:72:61:85:76:e1:1a:4e:fd:37:42:15:
         ea:eb:75:0d:3a:a9:89:54:7f:f8:fe:86:07:70:12:2a:cc:90:
         ef:18:ab:42:6a:03:34:9f:cd:4e:27:c5:d0:1e:62:43:38:76:
         15:8a:86:ee:80:54:72:41:dc:db:56:00:f9:b5:8a:f9:65:4e:
         d7:53:dc:95:2c:af:70:b9:09:1e:22:09:07:61:1d:c2:84:b0:
         4c:fe:45:be:f3:18:86:ce:ee:b3:44:5a:a2:f5:9c:d8:94:26:
         13:07:d9:7d:89:91:21:dd:52:45:49:38:21:ae:df:7a:c1:69:
         22:c0:01:dc:84:d1:9b:77:f7:65:5f:d8:eb:9e:6a:1f:74:c6:
         54:01:a8:d7:a8:85:69:2c:8d:c6:6a:cc:6c:13:31:ca:6e:b7:
         f9:0d:62:af:c5:50:1a:08:29:8c:5b:9b:76:04:aa:e9:31:38:
         66:64:5f:18:2b:39:ba:69:f9:d6:c1:e3:3d:6d:e4:bb:ee:54:
         3f:4e:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:39 2026 by rpki-client