Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File:                     TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier:          N1o9cnSpAsJAWGqq645Y0eadFY8hwaRgvBbeHOCUHZA=
Subject key identifier:   9D:E6:FC:63:37:05:1F:51:0E:60:65:FE:42:6A:B4:45:92:E3:8E:44
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer:       /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial:       0965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number:          095A
Signing time:             Tue 18 Aug 2026 20:27:14 +0000
Manifest this update:     Tue 18 Aug 2026 20:27:14 +0000
Manifest next update:     Tue 25 Aug 2026 20:27:14 +0000
Files and hashes:         1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: zuOUrxhoy2ke4A64R8yyp7RSp9zT1hBeRSmtWHC1E44=)
                          2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: pJ8W3JL1SvT+9bYhgevlA/zqowg96Jc82pj7ld8nZi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
        Validity
            Not Before: Aug 18 20:27:14 2026 GMT
            Not After : Aug 25 20:27:14 2026 GMT
        Subject: CN=6a84c022-fbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:12:b5:3f:d6:6b:2d:f8:db:f4:0c:a4:3f:
                    15:e5:71:4a:bd:c4:e0:28:8c:68:e2:36:ad:6e:1b:
                    e2:ab:d7:29:48:47:6e:84:d3:7e:dd:e1:51:0c:d6:
                    ce:56:84:56:ab:8a:c1:27:b6:b2:06:5d:53:93:c5:
                    61:82:21:e7:ea:41:cf:bb:44:06:9b:30:73:04:33:
                    3a:8b:08:ac:48:91:b6:b9:c5:75:95:08:1b:ec:95:
                    8e:b9:f3:f1:eb:06:c1:11:54:4a:59:9b:40:97:d9:
                    10:67:1d:19:05:5b:d6:2b:29:29:7d:c7:4f:98:c2:
                    76:07:5b:66:73:dc:40:4d:44:bf:3d:bb:d4:f0:b9:
                    f8:c0:3b:04:fa:f5:ef:8f:f8:31:2a:6d:8e:96:95:
                    4a:7e:b1:fd:a0:64:a1:e4:16:17:50:03:e8:3b:92:
                    51:99:dc:c0:af:a3:80:1c:d7:29:23:c0:8d:1e:6d:
                    ba:1c:38:01:4a:f0:85:55:39:15:99:18:b8:2a:c1:
                    c7:d1:c4:f0:9b:63:51:64:4c:5f:25:e9:0f:50:6c:
                    3e:91:79:f8:d6:ea:98:92:32:72:c6:7d:e9:2e:33:
                    7a:a6:9b:a5:8f:75:7c:11:73:90:2a:6e:79:db:19:
                    3a:a4:b7:ba:64:a7:75:e0:86:23:85:7a:77:9d:fa:
                    84:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E6:FC:63:37:05:1F:51:0E:60:65:FE:42:6A:B4:45:92:E3:8E:44
            X509v3 Authority Key Identifier:
                keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:4a:d0:82:7e:45:e1:f7:63:6d:6e:ff:6c:cb:12:91:30:
         d0:3c:49:89:fb:eb:d5:d7:41:b1:cf:db:be:a4:8b:14:e0:fb:
         2a:94:5a:da:88:a9:63:53:4a:25:4b:71:c4:81:99:0a:d5:17:
         f9:6a:cb:3a:6b:30:95:5a:55:c8:96:2f:ee:da:a7:28:23:a0:
         07:a7:b0:c9:77:4b:2f:75:94:76:12:a0:b4:be:13:10:ce:08:
         9b:a2:a9:56:36:34:43:a0:e1:2f:12:77:ff:fd:81:d6:be:ba:
         48:c4:6a:ab:b8:4f:3c:2d:b7:8c:32:79:45:57:db:8a:a8:49:
         c7:5f:9e:a2:8f:c4:f6:0f:b9:2b:3f:ec:23:7a:87:37:07:10:
         f3:71:b9:49:b6:7a:fa:2c:cf:5f:0b:39:46:31:81:69:f4:e2:
         1c:ac:13:9c:81:ff:d9:83:f6:6e:cb:83:a1:2b:5c:b0:d4:a8:
         5c:7e:bc:a0:c8:5c:8b:cf:61:24:55:0d:81:02:68:2f:9c:d3:
         9d:7e:51:83:c0:f1:40:5a:a8:e6:04:74:26:d5:1e:be:c8:24:
         1c:8f:41:08:69:b4:0c:4d:90:ba:6c:2f:11:34:22:cd:f0:5b:
         b8:90:46:94:f6:d4:c1:f6:09:17:59:f7:82:43:b5:f4:cb:b1:
         f6:a8:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:59 2026 by rpki-client