Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File:                     TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier:          Dvr4mQK+cOB6YbKv9CakEqjozFfofDgbtWDGYX7E7NE=
Subject key identifier:   60:45:16:C2:3D:FF:D5:00:F6:13:DF:C1:C8:A8:A0:34:FA:3A:F5:33
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number:          0232
Signing time:             Wed 19 Aug 2026 03:12:41 +0000
Manifest this update:     Wed 19 Aug 2026 03:12:40 +0000
Manifest next update:     Wed 26 Aug 2026 03:12:40 +0000
Files and hashes:         1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: 8ZfYZ6HTpDeawDg2X8w9ZA6TzfgM9VrIqzobEbrK2BY=)
                          2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: /o/M5zRY3Fu8e1PxNzRFdI9nWHaoBX6amhL9kkTo5kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: Aug 19 03:12:40 2026 GMT
            Not After : Aug 26 03:12:40 2026 GMT
        Subject: CN=6a851f28-8a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:8e:20:25:12:eb:20:7d:e9:8b:74:6c:43:
                    a1:1d:db:2f:65:4f:84:11:59:0c:c0:11:a1:c3:92:
                    48:b4:b5:65:85:75:37:c9:68:1b:d4:94:30:d8:ac:
                    20:73:34:a7:06:02:19:fb:71:74:d8:20:e4:84:35:
                    37:ae:83:1a:4c:27:e6:63:b5:25:01:b0:fc:08:fc:
                    a9:6f:bb:76:4c:f6:36:4f:21:74:f2:76:d1:76:aa:
                    cf:7b:b3:4e:af:74:c1:7d:2a:18:69:c7:70:d0:93:
                    79:47:79:0f:75:9e:ca:0e:7b:70:a3:46:38:8f:2c:
                    75:d5:63:f6:b5:7b:d5:d9:f5:b3:87:5a:f5:fc:5c:
                    9b:de:05:82:11:32:65:ac:c2:f3:aa:20:98:ed:8e:
                    da:b6:2d:45:d2:2c:2c:47:0d:34:87:00:6c:d9:0c:
                    87:43:78:10:b3:5b:4c:46:41:06:da:ed:30:9a:d8:
                    fb:47:87:91:43:23:11:7e:fb:b5:55:54:69:5b:53:
                    a5:f8:ae:29:b0:40:53:df:9b:92:3a:a5:f4:50:d7:
                    b8:f3:32:49:9d:1f:f8:ed:6d:d4:a8:4f:e0:aa:e5:
                    12:1b:60:49:f0:a2:cc:17:eb:87:c5:be:98:06:5c:
                    3c:91:23:30:9d:4e:79:70:10:e2:00:4e:23:7c:28:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:45:16:C2:3D:FF:D5:00:F6:13:DF:C1:C8:A8:A0:34:FA:3A:F5:33
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c5:94:bd:35:cb:fd:c2:13:58:23:30:b2:46:5d:2c:f4:63:
         74:9e:14:c2:57:94:60:f6:a9:fa:24:16:be:20:4f:3a:7d:9c:
         44:38:73:ac:9f:77:3c:af:7d:71:a9:fa:0f:b2:a8:2a:ec:74:
         ba:bb:dc:e2:9e:ce:d3:3f:c9:75:71:e0:af:b1:39:85:27:94:
         07:a9:f6:91:44:0d:6f:ef:9e:a6:7a:d6:b1:c6:39:3a:4e:d3:
         ab:59:88:ab:aa:cb:c4:b1:0b:89:9f:95:33:d9:80:10:f4:90:
         7b:ce:82:ea:02:c3:17:62:e3:af:1f:15:c3:0b:f8:29:60:8c:
         5d:67:7e:1a:a2:5c:1b:6a:c8:27:a4:65:36:0c:74:29:f6:dc:
         ff:f3:fd:e2:b3:31:f2:84:76:10:39:61:d2:c7:11:11:fd:af:
         c1:4f:45:34:ce:50:65:e9:c8:62:0b:26:35:86:7e:00:48:6e:
         3f:8a:6d:2c:bb:4a:33:53:91:b3:31:b9:5f:b4:65:e1:b0:30:
         6d:15:65:e0:8f:27:3d:b3:f2:85:93:3d:9e:d0:65:4d:39:c3:
         4e:0c:30:49:b9:8f:1a:70:e8:5b:ec:81:e0:ba:72:01:ea:b4:
         5b:77:54:1f:28:38:28:8c:d4:1c:f1:6f:5a:d0:fb:8f:ef:ac:
         dd:e8:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:07 2026 by rpki-client