Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File:                     TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier:          pNb+qImldFsGEzh6roBr1G7ZYTjlirggcShyXF8ndmk=
Subject key identifier:   CD:8C:51:3B:4C:91:E4:49:14:82:CC:70:70:DE:77:AE:64:90:29:BF
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer:       /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial:       0BFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number:          0BE8
Signing time:             Tue 18 Aug 2026 19:16:00 +0000
Manifest this update:     Tue 18 Aug 2026 19:16:00 +0000
Manifest next update:     Tue 25 Aug 2026 19:16:00 +0000
Files and hashes:         1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: X6KbBD5PlPkzt1SIW5DrK6RdLzrerfEk7ZCdWuyplgM=)
                          2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: 1Rl4AWS27tXktsB4oZ9/cQrbDdYUzTGKNR1jiXI3rWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
                          rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3071 (0xbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
        Validity
            Not Before: Aug 18 19:16:00 2026 GMT
            Not After : Aug 25 19:16:00 2026 GMT
        Subject: CN=6a84af70-51a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:9b:ce:6a:d7:65:d6:e4:c7:4b:ac:18:0d:
                    79:93:17:99:85:18:cc:f0:f3:00:38:a1:92:05:ad:
                    25:8b:1f:7e:cc:7a:d2:7f:e4:ce:d7:b4:56:e2:66:
                    45:92:8f:be:d4:7d:a2:f0:ef:c8:ef:a4:31:0d:56:
                    2d:e8:f7:90:92:51:84:64:fa:8a:c8:47:80:e5:3e:
                    35:12:43:71:74:d1:fa:c5:08:fd:ed:60:63:af:6f:
                    a3:da:02:d6:3b:f5:c8:45:ad:4c:79:bd:aa:9f:2e:
                    bc:63:bb:75:56:69:72:ed:8d:dc:12:ee:43:2a:9f:
                    03:e0:4e:cc:53:8c:bc:ea:56:ca:d9:e0:94:f0:61:
                    6e:a8:cc:b9:2e:80:ef:f2:04:c0:f5:d8:32:39:9b:
                    54:62:7d:df:ca:40:ea:2c:06:7f:93:7e:c4:48:4c:
                    0b:2f:c7:cc:0a:03:d3:07:ae:25:29:e9:de:31:42:
                    cc:41:4b:9e:c6:10:e0:fb:b0:36:ce:41:f3:82:28:
                    8d:ac:44:54:5c:fb:a2:7d:20:6d:a6:30:7a:e4:3d:
                    f2:1b:cc:c4:89:48:c3:9c:5a:d5:58:0e:e5:21:d9:
                    ad:fa:23:a6:6e:38:11:cb:1a:71:a8:25:fd:71:9d:
                    c6:f4:82:58:19:56:40:a7:51:8e:a6:17:4f:0d:23:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:51:3B:4C:91:E4:49:14:82:CC:70:70:DE:77:AE:64:90:29:BF
            X509v3 Authority Key Identifier:
                keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:50:8e:43:be:c2:f4:47:16:37:77:b4:52:9e:54:28:2d:55:
         13:2a:49:de:c2:50:55:1c:3e:e6:39:3e:4c:c1:1c:d6:8f:1c:
         e6:0e:fc:02:5e:d1:ee:dc:31:96:2e:77:35:45:84:bd:6f:37:
         1c:6e:c3:8a:11:ba:45:97:a0:5e:60:61:3c:97:1d:f9:55:4f:
         f5:4d:5c:6b:5e:ff:04:05:00:91:52:5c:a5:26:17:c7:d8:69:
         ef:c3:a0:66:76:e8:19:53:77:6a:41:0a:d0:6c:3c:11:ef:d9:
         2a:b8:30:dc:f3:be:cd:b5:dc:93:0c:f4:d2:78:db:27:a6:c3:
         53:14:fc:32:f9:cc:3f:fd:aa:5b:9a:a3:3f:5f:9c:5d:98:50:
         ab:14:28:9a:56:f3:b9:89:75:ed:98:a6:f1:41:78:53:6c:7b:
         e8:16:09:ba:9c:8f:68:3d:10:b6:2f:41:2b:fa:b1:11:50:24:
         14:04:cc:dc:90:03:2a:99:83:07:69:be:e3:eb:97:84:58:86:
         a0:8c:df:85:08:03:fc:ce:e1:93:54:94:c3:69:9a:90:1d:ca:
         e9:c4:98:b6:8e:67:52:e1:25:95:ff:63:4d:ca:7b:61:31:51:
         37:83:c2:28:f9:d0:1b:8f:0b:ea:70:3d:5d:66:67:d7:6e:57:
         b6:69:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:59 2026 by rpki-client