Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File:                     TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier:          5yhBNr0JCTYFpMxI8YxCWDqzQVpZoe6kIDPy2PPAv9E=
Subject key identifier:   64:78:FF:CB:BF:4B:95:2C:98:E1:80:E8:FE:78:FA:81:1B:98:D0:27
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number:          3644
Signing time:             Sun 26 Jul 2026 14:30:28 +0000
Manifest this update:     Sun 26 Jul 2026 14:30:28 +0000
Manifest next update:     Sun 02 Aug 2026 14:30:28 +0000
Files and hashes:         1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: e64paVv2Cd310jh8qWZeK1PJtylRrPghneKb1lecJWs=)
                          2: 9ED84B886EC111F19289006667A30FBC.roa (hash: hd1ZU6/Fnutera66ZXCD8DJsTN9KMedFIbuKf7ICHXM=)
                          3: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
                          4: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
                          5: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: l7LBi/Y1FpDZmmeBXMO7I7E/b5ECT7acllocUhgV2ZA=)
                          6: 041DFBF46EBE11F196174E6566A30FBC.roa (hash: UdubWRqV2Ckel/l8C/+VnynljQ5Fshh1WNKa2k+xRl8=)
                          7: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
                          8: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
                          9: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
                          10: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
                          11: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
                          12: 031323B06EBE11F196174E6566A30FBC.roa (hash: NXB/rg2055CKSN9ZF6BUpnYzbi4UYOhQlvoMPnUpbg0=)
                          13: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
                          14: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
                          15: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
                          16: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14180 (0x3764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Jul 26 14:30:28 2026 GMT
            Not After : Aug  2 14:30:28 2026 GMT
        Subject: CN=6a661a04-4893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:ef:8a:c3:78:ee:89:b9:a7:de:f2:aa:b5:
                    cf:bf:46:a6:05:38:45:5d:21:37:b4:15:26:bf:f8:
                    c3:44:71:99:bc:2c:fb:3a:47:fb:63:a4:85:31:d7:
                    a8:4e:cc:3d:5e:f3:55:74:4f:f6:9a:c3:ac:4c:0d:
                    b8:97:2e:eb:55:91:7c:6e:0d:98:26:5c:f8:5c:07:
                    6d:99:cd:01:d8:c9:b3:81:6f:9a:aa:b5:49:67:9d:
                    c9:c3:45:49:72:14:c6:03:2b:44:2b:e4:e6:f5:d6:
                    f9:c0:84:60:96:91:05:fa:c5:65:bb:4a:3a:45:9f:
                    c6:f5:ed:98:e0:cd:e4:9a:8e:27:03:d9:01:cf:72:
                    35:0d:dd:d9:25:c3:ca:78:95:0c:bf:8f:1f:dc:66:
                    b9:77:0c:f9:61:46:3b:b4:0d:14:af:31:02:09:c7:
                    e8:49:08:9e:08:5a:9e:36:86:42:bb:e3:50:49:2b:
                    18:47:c4:3d:be:da:5c:e5:36:9c:b7:29:01:b3:b0:
                    c4:08:91:50:be:e0:41:c9:e2:bb:ba:d0:91:53:2a:
                    6a:7f:0d:35:da:f1:6e:68:f3:89:99:54:05:9b:c2:
                    b4:1d:d4:32:db:2c:99:65:f6:3a:22:81:bc:c0:b7:
                    b1:ae:10:1f:1c:2e:9f:10:5d:d8:48:b4:dd:3d:86:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:FF:CB:BF:4B:95:2C:98:E1:80:E8:FE:78:FA:81:1B:98:D0:27
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:d2:7a:77:54:b8:eb:69:6c:13:1e:4c:40:9d:eb:a3:b8:
         75:6d:95:c1:e9:07:4e:a8:32:f0:f0:8d:58:5e:b3:d8:e4:af:
         a3:90:26:32:c1:f8:a3:68:cb:0e:4b:8f:69:d3:43:b9:ce:99:
         2c:e4:81:fe:6f:7a:45:64:3d:0e:80:42:11:ba:d6:81:41:39:
         24:24:2a:2e:3c:29:d9:4e:37:30:50:91:08:1d:76:87:40:18:
         36:32:7a:e8:66:a0:42:89:85:98:4a:42:da:f4:bd:0b:7f:d5:
         07:09:63:2f:a8:b3:88:f8:7b:55:c3:37:b6:7c:ca:37:f9:83:
         7d:b5:41:98:61:0f:5c:3c:ff:a8:e4:27:76:a4:62:79:a6:ad:
         a5:6a:bd:49:1c:ef:2f:fc:f8:a9:c1:22:82:6b:da:31:0d:0b:
         f4:d3:d3:36:12:03:50:50:25:b9:34:e7:6f:48:2f:89:80:4a:
         01:af:61:a8:9c:bd:83:9f:89:8c:13:cc:e6:26:e7:e4:5f:44:
         3f:b5:be:54:57:fe:9e:ed:e7:20:26:8c:94:94:c9:2d:73:ae:
         0d:5e:ed:63:03:58:97:42:18:0a:7a:79:b0:b8:60:f4:b4:54:
         4e:9f:12:5c:e7:4b:59:d9:33:1d:70:f6:39:c4:f8:d5:85:33:
         a3:e1:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:32:10 2026 by rpki-client