Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
File:                     tw3qbHe56OzOWDkTKBnvkTc_xSc.mft (raw, json)
Hash identifier:          494sz5Qhzz7ypU8i1LbsxY0xa+Cq21ZcXWjnPbHnO6E=
Subject key identifier:   F4:29:28:D8:26:0C:98:4C:5F:E0:CA:66:9B:0A:2D:A0:AA:BA:EB:57
Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
Certificate issuer:       /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
Manifest number:          01AD
Signing time:             Wed 19 Aug 2026 04:41:19 +0000
Manifest this update:     Wed 19 Aug 2026 04:41:19 +0000
Manifest next update:     Wed 26 Aug 2026 04:41:19 +0000
Files and hashes:         1: tw3qbHe56OzOWDkTKBnvkTc_xSc.crl (hash: aelRjUYbF9J4UkQMmWxtkrrIxP04c7uJWyGhz0zbxB4=)
                          2: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (hash: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
                          rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
        Validity
            Not Before: Aug 19 04:41:19 2026 GMT
            Not After : Aug 26 04:41:19 2026 GMT
        Subject: CN=6a8533ef-2e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:47:98:b3:11:64:f9:20:dd:90:e4:bf:af:
                    4d:f4:5b:f3:9c:91:c0:94:c4:e5:43:9e:31:21:06:
                    44:06:7d:ae:33:c4:9c:ff:22:5c:dd:35:16:fb:48:
                    86:16:21:f4:08:72:1f:57:9d:3c:87:71:78:b3:92:
                    f5:c4:5c:2d:f0:95:bb:34:94:15:17:01:67:9a:e1:
                    6b:b4:52:4f:06:36:83:81:a7:7e:c0:cc:95:7a:23:
                    54:a3:b1:0b:a8:a6:17:2a:b5:5f:33:37:06:42:f5:
                    43:96:52:e5:d5:4f:eb:3a:7d:6e:03:d1:8d:3e:64:
                    0b:64:a5:e7:56:20:22:24:ed:fd:b3:5d:fe:d5:0c:
                    79:f3:65:cc:01:2d:f5:44:68:75:2c:b8:d0:23:9f:
                    e6:c3:ac:a1:af:32:f0:e5:e3:74:ab:1c:a1:51:1e:
                    43:f3:92:dc:c5:43:99:58:39:1b:c6:63:4c:93:92:
                    7d:9d:0f:dd:b5:1b:41:fe:f7:62:0a:66:02:ac:6a:
                    ed:ff:6a:82:9e:38:36:a7:0c:c4:07:b5:a8:4a:ba:
                    80:f4:b2:e7:c4:4a:75:8a:7b:09:c9:8f:79:18:85:
                    94:18:a0:31:09:65:6d:41:23:35:81:ae:38:25:db:
                    df:b4:83:bf:c3:b7:ce:14:67:4a:b2:7e:1c:85:7f:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:29:28:D8:26:0C:98:4C:5F:E0:CA:66:9B:0A:2D:A0:AA:BA:EB:57
            X509v3 Authority Key Identifier:
                keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:cb:aa:07:8b:fd:70:0b:3d:5f:2b:0a:1e:c0:b6:9d:a9:e0:
         cc:7e:0b:ca:c9:bd:b9:55:de:5c:3d:26:84:d8:1f:f0:88:1b:
         54:97:fa:65:43:aa:4a:df:db:35:9c:72:39:b8:6c:48:ef:73:
         c4:d7:be:a3:9f:62:a4:76:f9:53:0b:ca:e7:6b:72:38:e4:28:
         e8:45:df:70:a7:27:6e:c2:5f:50:d5:81:72:0d:7a:2a:5d:e8:
         93:d9:27:ef:70:72:27:9f:53:25:67:34:56:32:2d:fd:b8:28:
         b4:ee:2b:42:d0:36:21:ba:1e:55:c3:e2:ca:f6:4d:0f:39:c8:
         d9:66:b8:8d:ef:e6:26:ce:24:07:87:d5:af:75:0a:c5:b5:35:
         5d:d8:a2:c1:22:1d:62:c5:c9:43:0d:5d:92:e9:4a:24:4d:82:
         82:b4:eb:32:f6:d3:97:12:f3:14:0e:ef:5e:54:b0:d6:e2:d3:
         67:67:b2:35:a0:53:83:1f:ba:6c:de:af:36:73:4b:2e:07:cf:
         2c:1c:bf:92:c7:5d:5a:66:a6:4b:e0:de:e2:a5:7b:a9:e0:56:
         a6:91:af:3d:c7:89:d8:06:00:2b:c6:80:9d:f3:60:08:36:c0:
         bf:c2:65:ec:40:f4:86:30:b6:a8:8f:50:85:0a:e6:c3:9f:4c:
         b2:1b:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:59 2026 by rpki-client