Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          1IUjWTo0oUFXE+X5r0pjUWGY6gkNFM7Qp3tGP6Ey55s=
Subject key identifier:   EE:44:5E:1A:25:86:CD:C4:59:18:5C:E9:48:63:29:74:BB:5F:22:4C
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0BF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0BE7
Signing time:             Mon 20 Jul 2026 19:16:27 +0000
Manifest this update:     Mon 20 Jul 2026 19:16:27 +0000
Manifest next update:     Mon 27 Jul 2026 19:16:27 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: CPl1Bnl1G2iuWXbiogkfWmvL++32hKz5d9wp04wfOmc=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: nDxmW75XsnkkvR0/lsX99gyZXa0q7ERrzbEjSla7UOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3058 (0xbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Jul 20 19:16:27 2026 GMT
            Not After : Jul 27 19:16:27 2026 GMT
        Subject: CN=6a5e740b-9b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:af:7a:c0:fe:2f:89:d5:84:bc:3d:9f:21:
                    4f:8d:a1:8d:4c:80:a6:e8:76:52:d7:98:27:ec:92:
                    bc:6c:4c:9a:20:8d:e9:ca:d6:36:61:0c:34:8c:e5:
                    fc:f3:6c:5d:72:b4:d8:e4:64:18:23:bf:39:31:30:
                    6d:df:0e:f2:ca:71:73:5b:3d:39:46:48:5c:5a:a9:
                    06:b2:0a:7e:c1:2e:44:10:42:00:30:ab:ab:61:8d:
                    bd:0c:e0:93:6e:1b:46:b5:b7:10:0f:eb:3c:70:30:
                    c9:71:9a:bb:dc:2c:d8:2c:df:fb:d2:89:57:88:90:
                    cd:ce:56:cf:55:d0:31:e0:2b:6a:6a:bd:c2:76:f7:
                    79:02:4e:0d:d5:40:6c:2f:e7:a8:1d:4e:4c:d5:bf:
                    17:cd:95:cf:b4:45:4c:f6:60:4e:74:e5:6f:e1:7a:
                    77:91:e7:0f:9c:ea:9c:bb:14:eb:84:da:0f:c4:e1:
                    f7:42:2c:fe:a5:2a:f3:a5:93:21:f7:9c:6e:41:4f:
                    5f:8a:54:38:57:49:99:7d:99:4c:2f:52:83:e6:9d:
                    76:dc:b1:3e:64:92:e3:bc:26:a8:b7:ff:d6:78:80:
                    01:5e:3c:7d:37:9d:70:07:86:2d:d9:f7:13:f3:c1:
                    b5:03:a8:1d:0a:14:69:1a:a0:00:4b:32:23:d3:b2:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:5E:1A:25:86:CD:C4:59:18:5C:E9:48:63:29:74:BB:5F:22:4C
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:97:9c:84:9f:09:24:94:56:e6:42:21:bd:9a:6b:c4:d6:53:
         10:67:0a:3f:44:aa:2c:62:eb:53:8b:5b:2f:61:14:10:34:84:
         23:ca:86:ce:0c:f6:30:95:6d:11:d9:c2:89:d8:55:78:7d:4d:
         5e:16:fd:82:94:aa:b7:28:10:a9:22:9a:8a:90:19:fb:40:14:
         a6:92:f2:54:77:00:b2:dd:ca:25:87:28:4f:73:e6:7d:bf:68:
         f8:59:d9:b9:42:02:e2:01:c8:f5:ea:67:1d:51:5e:cd:15:4b:
         1c:d4:1d:28:8e:05:f6:cf:26:1f:a4:ce:0f:4f:06:f5:00:21:
         0a:b2:57:b9:99:64:27:79:c9:de:39:41:18:08:a3:00:43:2e:
         11:61:b4:06:04:61:70:dd:0f:de:a9:47:b0:42:21:0d:be:f0:
         f6:f1:13:e3:10:43:ca:a4:9d:90:3f:2c:9b:4b:43:e0:e7:8e:
         a7:38:40:d7:a3:7b:74:ce:9a:ca:40:46:5b:c7:27:29:d8:db:
         a7:37:ab:6e:11:35:78:cb:00:02:55:e5:14:ad:af:4e:e2:41:
         d0:f8:34:e8:28:30:56:90:06:12:cb:81:24:76:8a:95:2c:47:
         ef:52:62:a5:2a:b6:dd:0c:94:b5:35:70:5a:ef:a5:8c:c2:b2:
         ba:ba:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:02:55 2026 by rpki-client