Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File:                     TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier:          h4FzO0GSy0eFKOHEwOncocigb7vhHXYvOJ9GPfcTNO8=
Subject key identifier:   46:60:E6:01:FF:CF:EB:2E:A5:BB:A7:2B:96:BA:84:DB:58:4D:D8:7A
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer:       /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number:          0245
Signing time:             Thu 09 Jul 2026 04:03:14 +0000
Manifest this update:     Thu 09 Jul 2026 04:03:14 +0000
Manifest next update:     Thu 16 Jul 2026 04:03:14 +0000
Files and hashes:         1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: XhGsfVFyUgCrzoUE5Aer2vc4/v04sA2pdBdTCGk2wrk=)
                          2: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
                          3: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
                          rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 04:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
        Validity
            Not Before: Jul  9 04:03:14 2026 GMT
            Not After : Jul 16 04:03:14 2026 GMT
        Subject: CN=6a4f1d82-d46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:9b:f6:8e:83:64:db:3b:5c:39:01:49:47:
                    69:11:3a:bd:c3:43:c8:79:28:d7:a3:b8:1e:f3:a3:
                    35:f0:37:2e:7c:a2:3f:84:b4:bd:0e:3f:e4:98:67:
                    de:c7:42:c2:c2:ad:c8:b4:76:06:a8:c2:84:22:19:
                    86:db:40:16:83:f6:8a:bd:10:b6:ee:9b:e4:22:69:
                    b9:15:95:40:72:a2:01:ff:03:13:79:58:70:05:9f:
                    30:3d:4d:c4:e1:51:75:3f:42:6c:87:09:ea:2f:58:
                    6f:ec:81:3b:cf:dd:d8:3e:1f:19:8c:dc:a0:3a:27:
                    86:82:ad:6a:4a:5f:36:30:c3:38:c5:74:36:31:83:
                    49:82:21:39:48:3b:22:9c:d6:33:d9:3b:53:74:8f:
                    0d:27:aa:95:9c:81:9d:1f:56:e4:45:de:7d:79:be:
                    33:9b:cd:71:90:b3:70:b5:8f:a4:5c:6e:d0:84:2d:
                    5d:27:7d:ef:77:7e:fc:32:09:be:a1:26:b6:36:e3:
                    9b:c2:54:c0:b3:8e:53:ff:a1:bd:2b:97:36:d2:1d:
                    7a:82:6a:db:30:28:23:d5:ac:d6:58:17:58:e3:b5:
                    9d:bd:d1:41:54:20:8a:b2:54:6d:ae:34:77:9f:91:
                    3b:f5:11:b9:45:d8:5c:bf:41:8f:5f:c7:4c:fb:10:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:E6:01:FF:CF:EB:2E:A5:BB:A7:2B:96:BA:84:DB:58:4D:D8:7A
            X509v3 Authority Key Identifier:
                keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:58:21:d6:fe:f8:1e:c2:ca:bc:be:f8:d1:e4:19:db:21:
         b7:71:2d:6a:4f:fe:ab:84:83:f8:2f:b1:fa:38:5e:29:5f:00:
         88:ea:9d:f1:41:9e:ab:17:1f:f7:ef:24:a9:10:81:a1:58:0c:
         1a:66:4a:66:ab:44:8f:48:db:20:7c:16:d5:55:ee:dc:cd:08:
         9e:38:02:74:ab:10:dd:80:64:28:29:d5:b1:7b:e5:e0:1d:4a:
         07:57:1c:0f:28:aa:c5:a1:ee:e5:38:ac:eb:e7:26:bf:b9:d5:
         95:c4:34:90:f0:6c:a7:a2:e2:1e:ee:5b:21:2e:66:59:d5:59:
         bf:60:bd:ca:e7:13:b7:67:de:d3:a3:7c:68:5b:db:75:8c:a7:
         cd:39:f8:9c:8a:51:c2:db:62:7c:1f:38:a3:75:0a:5b:5d:be:
         2f:5a:55:50:de:7b:59:74:65:ba:7c:17:75:64:48:1f:25:24:
         d7:92:fa:2c:ed:d4:44:72:1b:37:60:40:a8:2f:e6:7f:df:9d:
         65:77:2d:a9:f9:3c:a8:28:3d:c0:09:0f:ee:2c:2a:1a:51:32:
         d1:ff:7c:0e:b1:ef:b9:99:62:dd:ca:e2:57:d5:d2:bd:76:3c:
         62:ff:c6:a5:0f:ea:8f:37:ed:89:c3:54:b7:bd:de:10:61:3d:
         38:8e:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 03:19:28 2026 by rpki-client