Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File:                     TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier:          m1WBamnGa73bAmzTUNom7ytvPUNR5mvBgyd6E7a1ldc=
Subject key identifier:   1C:77:F5:83:63:89:BF:1F:94:D1:B5:66:FE:78:91:B5:9E:50:90:66
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0B01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number:          0AF4
Signing time:             Wed 26 Aug 2026 19:18:34 +0000
Manifest this update:     Wed 26 Aug 2026 19:18:33 +0000
Manifest next update:     Wed 02 Sep 2026 19:18:33 +0000
Files and hashes:         1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: fRxKogHtgi7NFYIVdZJ4sSmgQ5rTfFO+lFhcpyoybRY=)
                          2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
                          3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2817 (0xb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Aug 26 19:18:33 2026 GMT
            Not After : Sep  2 19:18:33 2026 GMT
        Subject: CN=6a8f3c09-c31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:f6:26:03:04:00:c8:95:3f:bb:04:8e:19:
                    18:be:0a:c2:87:32:86:48:34:21:2b:aa:1e:a6:f8:
                    5f:a0:90:70:19:07:08:ab:f8:50:d7:51:80:b2:89:
                    d3:9a:9c:89:d8:54:c2:ea:54:96:21:82:73:69:35:
                    a8:78:35:f4:3f:b4:2e:73:3f:cd:70:55:5d:e8:ca:
                    50:57:c3:8c:95:89:10:b4:c1:a6:52:11:ca:48:d8:
                    67:a3:29:35:ef:ee:22:de:c9:23:0b:69:9b:b4:88:
                    a5:4f:87:69:2b:d0:55:2f:d5:1e:f4:b8:22:61:87:
                    00:27:cf:78:d5:16:fd:3e:d2:c9:d8:bc:34:d5:96:
                    bb:2d:09:ac:80:72:69:57:f0:4b:ee:cd:85:e3:b4:
                    8e:ba:bd:ea:41:45:95:e9:d5:7b:6c:50:43:89:69:
                    5b:58:8e:40:74:66:0d:7f:f7:85:fc:35:05:dc:ad:
                    3d:01:5e:95:7b:cc:ad:ab:ff:5a:89:e6:a6:86:19:
                    0f:0e:64:58:3b:04:14:b1:6f:6c:24:72:63:b8:2d:
                    76:37:32:51:b8:a1:fb:16:9c:40:1f:f5:fa:10:c7:
                    f4:9d:50:f0:50:f2:a1:93:e6:81:d6:10:2a:24:87:
                    80:e3:58:22:ad:14:19:35:32:1d:f1:ae:b4:3b:15:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:F5:83:63:89:BF:1F:94:D1:B5:66:FE:78:91:B5:9E:50:90:66
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:b4:af:f3:41:7a:10:46:1e:7c:2f:48:72:04:7a:31:45:
         8b:ef:c7:0b:0f:f2:1a:d3:38:4d:59:31:f9:be:47:e4:d0:c6:
         47:78:43:ed:06:91:e1:70:58:89:22:f3:fe:b7:e8:48:fe:c6:
         a6:0e:d9:f2:81:e3:57:5d:b1:a9:20:d1:78:39:59:5a:54:62:
         a7:ec:cd:11:98:6f:81:fd:ae:88:04:be:90:af:39:5b:d4:9b:
         5d:89:d6:1f:92:47:d2:af:f2:bb:3a:a1:ee:f4:a4:0e:05:d0:
         b7:8f:f1:4e:4d:45:4e:e1:fc:63:81:95:f4:37:43:e5:d9:a7:
         ff:ca:72:62:1d:f6:14:da:8c:f2:d6:19:c5:54:11:d2:c8:db:
         ba:be:87:63:00:61:5c:ab:dd:d6:6c:fc:1c:81:0e:a9:b4:97:
         3b:79:c7:5d:97:68:a0:44:ae:18:53:20:a5:62:8a:42:65:a2:
         59:71:c4:b2:44:31:18:11:73:72:48:c4:cd:26:8b:18:64:ea:
         2d:67:0f:78:93:c3:85:e2:09:17:30:24:c1:4d:24:1d:eb:6e:
         cd:6b:2c:0a:d3:75:6f:5f:c4:e8:16:51:74:66:4c:ef:10:a2:
         1b:6e:85:e0:52:ca:a4:15:3d:84:ff:c7:38:4a:85:56:f3:d6:
         32:3c:cd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:42 2026 by rpki-client