Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          P3XuYkG7iKca17txop0ArUSPuKZd3iCtiSrJYRnXHXk=
Subject key identifier:   47:C5:A9:8F:4E:54:C4:22:D6:4C:B4:F1:24:0B:85:C4:9A:E0:F3:49
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       0330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          0322
Signing time:             Fri 31 Jul 2026 01:51:36 +0000
Manifest this update:     Fri 31 Jul 2026 01:51:35 +0000
Manifest next update:     Fri 07 Aug 2026 01:51:35 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: IlM5yZcoCUeNIEIrQALsDPb1axUCAA/kfwzyeMPG9wg=)
                          2: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: k7oa0gyVDVstpxNJdtdSBjaevXmXY8KxLGB4YjxHPeM=)
                          3: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: zLRwlyYQoMCNATwicvYcavIJagOdRZfxbGUFbhuhVoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Aug 2026 01:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Jul 31 01:51:35 2026 GMT
            Not After : Aug  7 01:51:35 2026 GMT
        Subject: CN=6a6bffa8-8baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:90:f8:53:51:77:5f:20:9f:25:ad:ba:d6:
                    e3:83:e2:e9:72:e7:ab:d3:7a:c3:a2:1a:13:38:a5:
                    84:39:3f:ee:8e:3c:d6:a2:8e:00:bf:49:07:f3:99:
                    6d:e0:d5:4d:6a:47:6e:5d:84:12:70:45:93:8b:04:
                    eb:e7:56:4f:13:4c:af:11:57:eb:6a:fc:d9:a9:5e:
                    4d:77:e0:68:40:52:4c:9d:71:50:46:14:d8:8c:d8:
                    9e:f6:fd:91:b0:0b:0f:46:52:10:f0:e9:3a:1d:98:
                    89:a8:a9:39:07:44:8a:f5:e8:3f:73:60:67:d1:fe:
                    a5:da:0e:f7:41:56:f8:14:99:ac:4a:aa:32:03:f7:
                    7d:d5:84:0b:30:e6:8a:c4:da:18:f3:16:5a:ee:a8:
                    c5:b7:ef:a8:57:80:31:46:3c:ef:25:aa:57:1c:59:
                    16:99:7a:44:a4:fc:de:55:3d:ed:79:3f:45:5e:d4:
                    e0:45:97:c0:fa:3c:62:c6:0e:c1:48:05:ce:b5:da:
                    31:a0:6c:c8:03:70:36:83:27:76:90:29:03:d5:18:
                    b6:cb:49:a5:a7:a6:e7:bb:01:b4:3b:8e:76:c4:4e:
                    ba:11:9e:26:09:91:68:ac:d4:51:29:16:f6:b0:b4:
                    4d:b2:07:ed:23:bf:bb:e4:d7:05:0a:1f:6d:08:b0:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C5:A9:8F:4E:54:C4:22:D6:4C:B4:F1:24:0B:85:C4:9A:E0:F3:49
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:9b:16:89:5d:c8:98:05:2d:7d:16:e5:da:8d:76:b4:13:
         4d:ba:e7:60:54:2c:c1:90:40:82:a3:e0:1d:0a:0e:b6:bc:0f:
         77:8e:3d:08:84:01:c3:a1:ab:7c:0f:61:19:ab:8c:ec:71:07:
         81:77:00:15:bf:32:e9:6e:2a:42:cd:f1:4e:3c:af:d7:a4:e2:
         d2:58:0c:fa:98:c3:2b:ff:46:35:ff:2c:e2:63:66:0e:ae:b0:
         95:d7:a7:f6:f3:8f:d0:ac:6f:59:4b:27:b9:35:14:ec:cf:17:
         71:67:60:82:78:07:bc:0d:c2:de:c1:06:f6:03:c0:fc:69:68:
         5d:2f:5b:b2:67:d7:a2:f0:20:ca:0a:c2:cb:43:44:fe:54:92:
         21:33:6f:aa:93:bf:f0:49:af:a9:0a:65:d1:1c:e4:d3:91:ae:
         79:de:ae:67:a5:2d:7e:cb:d2:fe:2c:75:3b:2b:f2:e7:4e:a4:
         e2:f4:b1:98:77:fa:04:89:a5:28:0e:33:41:4b:15:68:65:8b:
         c0:5a:fa:08:5c:92:b0:c2:bc:ba:7c:de:86:0c:96:90:3f:92:
         ca:eb:16:47:6e:55:9a:7f:e8:5e:f3:60:9b:02:9a:0c:03:1e:
         68:7c:fc:7c:6c:2f:45:77:21:81:26:11:31:be:39:03:3d:25:
         b4:dd:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 05:47:37 2026 by rpki-client