Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File:                     tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier:          W9LybFRbfny+3RsMoimDqQOQIgd/GwlTXoZHahgkULE=
Subject key identifier:   2F:24:32:E6:1F:92:16:09:46:2D:3F:5D:EA:91:ED:5F:DB:7A:74:2F
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer:       /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number:          92
Signing time:             Sun 05 Jul 2026 08:06:02 +0000
Manifest this update:     Sun 05 Jul 2026 08:06:01 +0000
Manifest next update:     Sun 12 Jul 2026 08:06:01 +0000
Files and hashes:         1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: n503D5QsvuEgu1+V8gmsh/zAhBt6gkzxFIF4jTYCMjc=)
                          2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 08:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
        Validity
            Not Before: Jul  5 08:06:01 2026 GMT
            Not After : Jul 12 08:06:01 2026 GMT
        Subject: CN=6a4a1069-2c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:dc:fe:63:c2:cf:de:d6:02:3c:a8:e2:29:
                    15:4b:80:6b:db:1d:8d:09:94:81:82:d9:14:eb:73:
                    e0:96:5f:d0:6b:38:ba:31:e7:10:22:1d:57:26:1b:
                    5b:05:d9:ba:a5:ec:9b:39:c5:2c:4d:5c:c9:f6:c4:
                    66:cc:ec:54:68:70:1e:4b:f6:6b:3d:e4:e6:75:df:
                    ff:c4:34:3f:8f:17:48:16:71:0b:04:1d:8e:1c:67:
                    6d:ad:10:c6:83:ab:ee:eb:b9:1f:c6:90:e2:ee:c3:
                    a6:97:df:3a:0d:76:88:e0:68:60:68:8d:07:60:f0:
                    0b:17:0f:e7:97:d9:e6:b6:0e:c1:eb:10:13:58:57:
                    1b:6d:98:01:4b:27:f4:a0:57:96:f5:4c:99:51:44:
                    89:ce:ff:65:74:47:94:ec:84:a9:0f:8d:de:92:02:
                    88:04:fd:27:ad:4a:7f:13:fc:d6:9b:d4:bd:ad:64:
                    cd:d8:86:d5:af:49:8b:21:84:1c:6a:de:2b:6e:e4:
                    d0:71:bb:d4:8a:07:30:be:88:5e:5c:5a:04:d7:e7:
                    44:57:c4:e2:72:fb:e2:bd:2f:13:e4:06:63:4e:65:
                    97:4d:04:6d:c0:63:86:01:55:3d:c4:c4:23:e3:aa:
                    8a:3c:a6:b3:e8:7c:4d:21:98:da:f0:a5:11:a9:41:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:32:E6:1F:92:16:09:46:2D:3F:5D:EA:91:ED:5F:DB:7A:74:2F
            X509v3 Authority Key Identifier:
                keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:95:3a:08:cb:0b:60:80:6d:b7:f4:18:40:df:55:83:50:72:
         d4:9d:41:8d:42:f7:10:92:04:ca:db:b9:4d:dc:28:de:ef:b8:
         d6:73:06:d8:5c:90:5c:d0:08:0f:d8:75:ab:91:66:8e:d5:a2:
         dd:bc:eb:dc:ba:81:df:5c:68:e0:3a:15:95:a0:71:fd:62:79:
         06:88:99:a0:3e:2d:05:a4:7e:b4:97:7f:76:e4:ca:d5:dd:2c:
         fa:d1:28:de:41:c8:e5:5a:ab:ee:af:93:33:bf:d3:7f:72:0b:
         1e:9a:55:dc:9f:17:fb:8c:a9:f1:32:e0:ed:ea:94:e6:03:d5:
         72:1b:2a:73:68:ac:c4:83:a2:f0:04:8c:aa:07:f6:1d:26:0a:
         bf:3f:94:73:6e:68:b6:f0:9e:67:b8:5e:13:b8:90:fe:09:6a:
         7d:8d:9d:f7:b9:99:dc:27:0f:12:ce:13:a9:bd:f2:29:ec:9c:
         e6:54:b6:f0:00:65:93:59:52:a9:bb:78:4a:bf:46:3e:29:17:
         d2:9a:74:ad:27:c4:ea:6f:75:80:a2:e5:7e:94:81:c2:0d:e8:
         26:e9:dc:37:24:df:7e:5d:b7:71:ec:cf:ef:be:42:3b:c4:b1:
         60:79:32:4f:46:2c:d7:45:bb:27:62:95:9e:5f:fc:25:42:52:
         0d:60:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 20:00:08 2026 by rpki-client