Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File:                     TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier:          7b60sZ7riHlp/GSBlXAq83fOm6GWAEZoeGZ2tgi7fCs=
Subject key identifier:   95:8C:84:37:BD:CC:D9:17:B5:99:42:06:2B:33:08:F9:F5:3E:16:D2
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer:       /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial:       0AAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number:          0AA7
Signing time:             Fri 04 Sep 2026 19:26:33 +0000
Manifest this update:     Fri 04 Sep 2026 19:26:32 +0000
Manifest next update:     Fri 11 Sep 2026 19:26:32 +0000
Files and hashes:         1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: JYH4hni6jnbgIc8iJOZfdNVfA49oWBV74JEmEHDjNw0=)
                          2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
                          rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735 (0xaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
        Validity
            Not Before: Sep  4 19:26:32 2026 GMT
            Not After : Sep 11 19:26:32 2026 GMT
        Subject: CN=6a9b1b68-40c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:38:ad:f8:7f:68:bc:da:c9:5f:40:89:a1:
                    cd:9b:eb:26:b7:01:73:3e:9c:b6:1a:96:93:91:e7:
                    af:6e:92:f6:22:8d:46:37:92:cf:a7:95:84:7c:7d:
                    19:61:af:3c:70:11:c3:5c:d0:7a:f2:ae:be:40:80:
                    cc:02:f0:06:84:64:b6:41:8f:0e:b8:b0:cc:04:9e:
                    76:66:48:43:e5:97:73:44:e5:4d:15:ac:f0:56:d3:
                    d4:4c:dc:be:41:96:7f:81:ba:73:73:19:fe:9e:1a:
                    ea:ed:b7:32:83:8b:84:54:d7:6c:06:3c:8f:98:79:
                    29:55:d1:cd:39:f9:5f:c9:ea:6d:fc:b4:d9:dc:1c:
                    ef:ff:31:b0:be:4c:dc:fa:d4:92:2a:c7:86:c4:32:
                    d3:4c:62:6d:ea:df:54:d3:31:3d:56:e2:2f:36:1d:
                    fa:0f:aa:b1:d3:42:94:c0:f4:68:54:11:d1:29:cb:
                    62:dd:b7:7b:51:af:92:79:54:6e:21:6e:7d:79:45:
                    a8:02:a7:bb:e2:b6:de:3d:2f:3b:3b:f4:05:48:53:
                    e6:e1:2d:22:db:22:d3:84:df:bc:eb:06:ae:f9:9a:
                    cd:f7:61:3e:6a:bb:95:8d:48:4a:e6:fd:53:ea:df:
                    eb:99:67:b8:d9:c0:c7:b4:6d:ad:d9:45:3f:fe:0a:
                    f2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:84:37:BD:CC:D9:17:B5:99:42:06:2B:33:08:F9:F5:3E:16:D2
            X509v3 Authority Key Identifier:
                keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:21:05:f6:ae:f2:05:b3:b9:e8:97:82:d9:36:8e:d3:d1:e0:
         41:56:b4:0f:8e:fd:8a:41:74:28:35:05:89:e7:87:2b:84:61:
         21:8a:b2:15:ca:64:f0:46:a4:0d:bc:5b:c7:93:15:88:34:57:
         35:ae:f0:fd:1f:35:14:6b:f4:02:be:99:d6:cc:89:1b:d1:12:
         19:71:93:22:ad:b6:0b:d9:08:98:86:c9:61:83:db:b1:1b:80:
         1c:4e:db:65:14:8d:76:f6:4e:45:1d:35:75:bc:9d:5b:f2:bf:
         8b:f8:0e:30:d7:75:e3:6b:2c:12:8f:24:2d:fc:6d:3e:ae:33:
         7b:64:db:e2:1c:40:4f:2e:60:09:7f:8c:3f:57:c7:da:27:5e:
         c1:73:8d:bd:bb:a4:ff:d8:c9:ea:8d:76:cd:92:6f:93:2f:51:
         32:8f:d6:ce:e6:0d:4b:36:94:43:ce:49:32:f1:1b:44:22:63:
         76:15:b6:a8:7e:1b:84:89:75:c7:12:91:a8:6a:49:57:97:ae:
         c2:ad:34:88:e5:17:7b:4a:13:b5:b4:e2:0c:6c:51:18:75:72:
         b8:ce:b3:74:b8:25:7c:6a:31:63:16:0a:75:11:39:1c:63:60:
         bc:5e:22:f5:aa:c9:d8:68:3e:98:2e:0c:bd:ef:b9:61:c7:8e:
         14:60:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:39:40 2026 by rpki-client