Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
File:                     tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json)
Hash identifier:          OSMKOzIAz3bAVXKfvB+51nxK1OH3dSk1A+De9627HrY=
Subject key identifier:   C6:C6:BE:A9:E2:25:16:6E:B5:CD:31:D2:8F:3A:1D:04:EF:4F:DD:F6
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Certificate issuer:       /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial:       04A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
Manifest number:          048A
Signing time:             Tue 21 Jul 2026 00:53:09 +0000
Manifest this update:     Tue 21 Jul 2026 00:53:08 +0000
Manifest next update:     Tue 28 Jul 2026 00:53:08 +0000
Files and hashes:         1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: Jurl1Ni9RFkcx2RHUccARqUORz5K5zdhtOpoqBiwLGM=)
                          2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=)
                          3: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=)
                          4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
                          rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188 (0x4a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
        Validity
            Not Before: Jul 21 00:53:08 2026 GMT
            Not After : Jul 28 00:53:08 2026 GMT
        Subject: CN=6a5ec2f5-2840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:a3:ec:93:0a:52:38:76:d6:0a:b2:0a:cc:
                    b2:45:33:d8:cd:75:fd:1c:8f:fc:3e:d8:76:a8:48:
                    24:bd:69:a2:a8:24:5d:37:37:a2:83:98:1b:e0:ec:
                    eb:7f:b4:d5:24:23:ae:7e:84:eb:38:08:02:09:cf:
                    1e:d9:5c:3e:8c:1e:e8:1c:08:4f:d4:d1:28:0f:f5:
                    4a:78:aa:ed:e0:74:44:7e:77:da:94:44:b0:62:05:
                    84:ae:26:ac:31:3f:a5:5b:ad:65:da:41:fa:53:a0:
                    74:a2:eb:97:d7:cb:1a:93:fd:30:dd:e8:5f:aa:1a:
                    e0:5b:6a:94:b2:e0:ed:d9:a4:8e:6f:ac:fd:9f:5d:
                    35:13:57:a1:cb:8b:98:12:a6:49:51:22:68:f6:3f:
                    b1:72:53:12:ac:53:8f:72:aa:d9:8c:a5:8c:01:4e:
                    13:60:3a:40:66:47:f4:23:a3:50:85:dd:00:a8:01:
                    cf:f3:fa:a6:f7:1d:e2:a2:8e:92:59:d7:40:56:ad:
                    7e:dc:d8:dc:74:bd:ff:98:d2:c8:f9:4c:27:f6:60:
                    40:cc:81:4b:e2:d1:ea:da:b9:96:af:e1:05:f1:70:
                    61:4f:91:0e:91:a7:ca:56:7c:da:fc:27:aa:06:97:
                    1e:c7:01:26:c2:63:30:b8:11:3c:5f:37:24:03:ff:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C6:BE:A9:E2:25:16:6E:B5:CD:31:D2:8F:3A:1D:04:EF:4F:DD:F6
            X509v3 Authority Key Identifier:
                keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:81:12:6f:25:f1:53:5c:aa:79:68:34:de:6c:3b:de:0e:15:
         27:eb:8c:34:f9:8d:a8:57:cf:05:b0:25:12:c9:74:f3:93:84:
         2b:77:44:5f:e1:bd:72:4c:58:60:bc:69:40:fa:75:36:a2:d4:
         9c:ed:75:db:65:76:34:b0:a6:2e:3d:14:50:68:49:44:66:4d:
         06:05:bc:8b:3e:7a:1d:62:5d:30:21:ee:97:0f:b5:9d:d5:bf:
         76:08:97:ed:c7:9a:d5:53:fd:da:e5:45:40:12:17:91:08:5a:
         43:bc:5e:6f:87:25:02:ee:bd:7b:7a:8c:23:a5:a9:4d:e9:48:
         0d:23:e0:63:ca:68:5f:75:4c:ef:84:99:8b:0e:ec:50:27:57:
         53:f5:aa:1e:dd:c6:93:30:40:f2:8b:0f:24:6b:99:50:a2:a9:
         c1:61:6f:77:e4:fd:e0:58:2b:9c:41:d3:5e:85:fc:e3:55:dd:
         6c:0f:b2:50:38:c9:ab:cb:09:c9:27:a5:9b:9c:3b:07:61:fb:
         74:98:8f:6a:97:49:29:ed:09:0d:dd:e7:4b:be:e7:fd:74:78:
         25:cc:3b:05:2b:ce:3b:e5:18:6f:c3:b7:41:7e:58:a0:90:c3:
         38:8c:cb:ae:10:72:3a:4b:b2:32:b5:82:0d:e1:a1:30:b6:e6:
         f9:d5:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:15:53 2026 by rpki-client