Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
File:                     TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json)
Hash identifier:          Ti8V1d7vUp6qnj2/mGsG3sAeZ1BvYPPgPmkLOLeoWcI=
Subject key identifier:   1D:01:56:55:B4:FB:D0:F4:CB:CD:2C:3D:2E:7C:CF:FF:1F:13:1C:A6
Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
Certificate issuer:       /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
Manifest number:          0187
Signing time:             Wed 19 Aug 2026 05:07:46 +0000
Manifest this update:     Wed 19 Aug 2026 05:07:45 +0000
Manifest next update:     Wed 26 Aug 2026 05:07:45 +0000
Files and hashes:         1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: 1wyxNHqCV01glXDieixjKvZ07Ldrsp8Hm1DlkQhEU0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl
                          rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
        Validity
            Not Before: Aug 19 05:07:45 2026 GMT
            Not After : Aug 26 05:07:45 2026 GMT
        Subject: CN=6a853a21-4871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:ba:85:3d:cb:cb:2d:28:dd:28:a2:76:e1:
                    f0:08:e0:20:54:b0:59:52:49:c4:77:4b:db:95:8c:
                    9e:b4:b8:22:7e:19:d2:98:5b:85:84:e6:1e:68:25:
                    8a:a3:b6:f4:ae:f7:ad:a6:8c:12:d6:dd:5e:49:83:
                    20:75:24:bb:40:4b:37:47:2f:25:42:74:52:3e:fc:
                    d0:1a:48:c8:93:7e:c9:27:b9:94:3e:8a:82:6e:c8:
                    9b:f8:4e:dc:1c:57:c7:86:a6:1c:f0:f3:1e:d9:3f:
                    fc:9a:92:e9:fe:b8:05:dd:ee:d3:85:b9:46:1b:ff:
                    cc:2c:6e:40:69:f1:37:16:79:8c:2b:fc:cb:f2:75:
                    5c:46:84:25:a0:57:38:62:53:5e:a0:66:2f:bb:30:
                    98:a5:50:b1:98:c8:c7:fd:00:42:fe:e3:6d:a3:85:
                    3f:69:98:18:44:6d:23:61:ed:58:52:8e:d3:9e:fd:
                    45:47:e7:88:f4:8a:85:f2:34:af:65:4c:ca:65:b1:
                    cd:3d:47:bb:87:9b:76:c9:ac:76:f8:31:0f:a2:04:
                    b4:fd:bf:71:eb:61:40:14:71:5d:9a:eb:a8:60:9f:
                    99:dc:f5:c2:e9:7c:60:3b:ee:66:e9:36:f3:1f:1e:
                    c7:c5:88:a3:97:5a:2e:c1:a5:7f:45:d7:98:2e:ba:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:01:56:55:B4:FB:D0:F4:CB:CD:2C:3D:2E:7C:CF:FF:1F:13:1C:A6
            X509v3 Authority Key Identifier:
                keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:e1:97:ff:87:60:e4:54:ce:62:5f:2b:38:37:65:56:72:
         9c:f0:88:41:a0:94:83:22:7d:16:d0:c3:3c:7c:c4:aa:88:fe:
         51:e1:cb:c0:88:b1:47:63:8d:2d:3a:36:10:31:37:78:98:88:
         f3:6e:fb:ca:59:55:f9:de:fd:1a:67:bb:bd:43:7f:51:31:54:
         de:ef:e7:ee:9e:68:63:fd:e2:07:34:41:ce:4f:40:6f:b9:54:
         24:49:af:02:1f:5f:f4:e1:47:f0:e8:83:c9:92:5e:48:3e:66:
         8f:d8:ed:45:85:2e:76:71:2b:48:d1:0c:73:86:60:9f:68:7e:
         0b:60:19:f4:17:79:91:39:3d:9b:af:e6:4a:dc:56:05:3a:8a:
         b3:db:fa:17:8a:46:b5:59:fd:c0:7d:e0:e0:bb:4c:6d:5a:51:
         6b:9b:2a:49:b1:48:03:b4:e6:72:af:35:64:f7:a5:73:6e:ad:
         97:cd:e8:e5:2b:d0:f0:71:18:a7:94:27:cb:29:08:f4:f6:b6:
         9c:68:0e:0e:b0:ec:d2:a3:09:3f:56:b0:71:c7:c2:88:20:fa:
         0f:8f:43:28:41:24:7f:f9:c2:41:a5:6d:09:65:3e:1b:71:e7:
         8c:36:99:f0:71:d1:fd:22:52:52:00:7b:ba:69:d2:98:8b:11:
         88:f9:32:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:42 2026 by rpki-client