Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
File:                     TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json)
Hash identifier:          WKkax1EhcJN3YrPonl1WRbbJvfanDid4rU/4t/gohZU=
Subject key identifier:   30:A1:CA:E6:53:0E:81:67:C4:B2:B1:E6:A6:93:32:AB:90:D7:0B:D4
Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
Certificate issuer:       /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
Manifest number:          079A
Signing time:             Sat 04 Jul 2026 21:46:33 +0000
Manifest this update:     Sat 04 Jul 2026 21:46:32 +0000
Manifest next update:     Sat 11 Jul 2026 21:46:32 +0000
Files and hashes:         1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: xKxRlFUreAzcTlb05VcO5WRH19WTOsX23LPWAskLH5k=)
                          2: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=)
                          3: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=)
                          4: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
                          rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 21:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
        Validity
            Not Before: Jul  4 21:46:32 2026 GMT
            Not After : Jul 11 21:46:32 2026 GMT
        Subject: CN=6a497f39-199d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:37:ac:74:4d:7e:b2:57:05:93:29:92:6d:
                    d1:65:36:ab:aa:b2:3d:40:7a:f0:7d:98:0c:13:3e:
                    46:a2:ab:1c:ec:3b:56:53:74:97:ba:8a:f1:a5:d0:
                    f7:c2:d7:69:42:32:0f:d6:ef:a9:c7:10:a5:04:b8:
                    c6:3f:03:64:56:e2:a2:20:ec:60:05:3c:ca:ff:2a:
                    0b:69:a4:57:2a:89:64:8b:c8:9d:d9:6f:57:5c:7f:
                    78:08:91:1d:1e:5f:e6:aa:6d:74:fe:6c:bd:38:50:
                    5c:9c:b1:e5:84:6b:72:d7:66:e7:2d:b2:df:4f:2f:
                    b2:81:72:2a:48:72:1e:10:a2:1b:8b:4a:18:99:8f:
                    0e:2e:26:3e:ad:5f:33:70:eb:26:a6:70:15:3c:5e:
                    69:23:e0:7e:ad:dc:eb:86:16:1e:af:7f:87:5f:e1:
                    bb:5c:42:a3:89:46:44:f5:53:5b:fa:b5:09:d8:fd:
                    11:0b:25:5a:0a:68:af:0a:6a:3d:8d:01:4c:90:4d:
                    96:d1:07:b7:2c:a0:f4:b9:fb:e5:44:75:89:13:5a:
                    45:f5:68:ac:95:bc:0c:55:4f:8e:ac:32:0a:c3:a9:
                    ab:26:3a:ed:3e:6c:36:e6:ee:0e:d0:8a:9f:b6:6d:
                    1f:bd:b3:45:3a:78:ee:00:b4:c6:60:9b:d1:51:e9:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A1:CA:E6:53:0E:81:67:C4:B2:B1:E6:A6:93:32:AB:90:D7:0B:D4
            X509v3 Authority Key Identifier:
                keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:bc:1b:ac:a6:bb:09:bb:c8:47:44:27:82:61:53:1f:09:e7:
         57:55:b1:48:83:bd:dd:49:d9:55:55:8d:f5:3d:c2:dc:6e:62:
         bd:ec:bd:36:f7:a7:b1:7a:90:60:43:5a:17:d6:fa:a3:07:de:
         ef:c1:66:0e:24:ff:c4:7b:c6:ab:b5:55:1c:f5:e5:53:b6:8c:
         f3:2d:25:fd:3c:dc:35:b7:9b:e3:c1:8f:79:35:b7:b6:3c:c6:
         79:08:7a:d1:1d:5d:bb:ad:2b:7b:f2:cc:f1:5c:b9:f4:e2:a5:
         90:24:01:fc:56:38:71:ef:be:2e:5c:5a:35:d6:1f:7f:13:f0:
         f6:a5:3c:6e:64:a1:31:0a:c7:63:69:9d:6e:2b:62:b9:cd:a9:
         32:24:c1:e6:37:a3:1e:4a:ea:d0:f7:df:02:80:53:53:d4:89:
         22:91:ee:62:6f:ad:05:9b:06:42:ac:4b:55:98:68:27:d0:2f:
         39:93:f2:cb:24:fb:bd:90:46:b4:aa:68:e3:0e:b8:17:51:4c:
         f3:e0:9c:b5:fe:0d:7f:51:dd:58:a2:0e:8a:13:cd:2f:97:4f:
         95:55:2a:6c:15:85:75:73:3c:dc:52:71:83:d8:6d:2f:63:c9:
         dc:40:aa:f8:1b:f0:cf:7a:38:3f:fe:68:73:ed:43:8c:96:8d:
         e4:28:8a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:52 2026 by rpki-client