Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File:                     tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier:          cUMTREdqeIQznZ6pl+EfuqnX5fv6vUV2DgPFB5V4wWI=
Subject key identifier:   34:44:A2:59:94:E7:38:13:AB:D5:95:6D:A4:B6:CC:F3:31:90:AB:3B
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer:       /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number:          AF
Signing time:             Mon 31 Aug 2026 07:29:21 +0000
Manifest this update:     Mon 31 Aug 2026 07:29:20 +0000
Manifest next update:     Mon 07 Sep 2026 07:29:20 +0000
Files and hashes:         1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: DqvUQY7l+E8XKunoKw2pdHio+63TxU+DVoQ7qrIBYA4=)
                          2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
        Validity
            Not Before: Aug 31 07:29:20 2026 GMT
            Not After : Sep  7 07:29:20 2026 GMT
        Subject: CN=6a952d51-c0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:46:a5:99:fa:84:ac:d5:a9:75:57:8d:1e:
                    45:9e:51:d8:a5:66:51:40:b2:83:9f:11:b9:85:ab:
                    10:3d:81:25:41:0d:c2:ff:23:0d:61:b9:ac:22:0c:
                    3c:23:8c:4c:21:54:d4:b0:1a:db:bd:ff:e0:fe:af:
                    ec:d1:74:82:3d:a7:1d:87:23:0d:3d:29:d2:9e:3d:
                    24:57:53:fe:25:6d:72:84:c0:1c:c2:77:11:34:19:
                    0c:cd:17:56:86:e5:a4:45:73:39:2e:7e:96:6c:d8:
                    32:3e:43:c6:66:66:61:e9:5a:0d:f4:49:24:2d:58:
                    c6:57:fa:f1:74:ab:7a:f2:26:43:f9:c5:6d:d6:70:
                    25:85:71:47:63:2a:fe:f8:85:54:2d:7c:48:4e:12:
                    a4:71:6d:7f:a5:d4:b8:39:b1:50:d5:20:61:1f:d0:
                    fd:dd:0b:0f:ef:a3:57:1d:cd:b6:39:b0:d7:d8:b3:
                    e5:28:3c:cb:d2:25:41:f8:fe:63:d7:63:ca:5d:3b:
                    65:4d:30:31:df:f4:e0:97:cc:55:33:84:64:ae:27:
                    f1:83:51:d0:e8:f2:3a:8e:30:5e:09:93:b8:a6:ce:
                    3f:59:42:19:2e:e3:1f:92:69:83:df:db:9d:fb:2f:
                    87:8b:26:c4:51:64:3e:a6:8f:47:f1:49:56:07:aa:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:A2:59:94:E7:38:13:AB:D5:95:6D:A4:B6:CC:F3:31:90:AB:3B
            X509v3 Authority Key Identifier:
                keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:87:9c:c8:c2:ce:ac:f2:a8:c8:19:e4:35:0d:b4:1e:80:
         2e:3d:01:8e:88:24:b5:e8:b4:c2:8b:6a:2c:a2:8a:75:60:e7:
         1f:cd:34:98:ff:7d:23:ae:2b:13:9e:7c:c4:29:20:37:1b:56:
         66:7f:ef:27:49:e7:44:43:06:49:13:8f:25:58:04:39:a2:cf:
         6a:2b:ba:ed:bd:d4:78:94:40:09:59:d1:07:4d:76:18:58:17:
         a9:e2:48:d5:75:16:98:d0:6c:25:2c:f8:c0:43:4e:81:f0:f0:
         00:f0:1a:6a:5f:2b:73:15:89:a5:26:3f:41:fe:dd:ac:d4:02:
         f1:9b:d3:b2:ad:a7:fc:af:c6:33:1c:cb:86:a0:7a:0c:31:f4:
         29:e4:ad:12:18:31:6e:3c:40:fa:87:d1:7d:ea:2c:7b:a8:b8:
         f2:6b:12:37:78:19:15:9d:4b:4d:55:c8:f8:2e:c9:00:f6:c2:
         c0:a3:74:52:aa:00:cf:47:bc:42:af:00:df:1c:8d:1d:7d:e3:
         9a:94:80:0c:b6:71:3b:9f:d5:f1:a0:97:ce:5a:a2:5d:d7:92:
         41:5d:60:b0:3d:be:0c:47:78:eb:32:a8:c9:47:f2:c5:83:63:
         c6:8a:04:f3:e4:86:91:f9:aa:7f:e5:86:e0:f2:f8:57:4a:35:
         5a:64:3f:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk5MjgxMTAvBgNVBAUTKEI1QjM1RjkyNEVCNUMzMkZCQjQxODY3RDNBMTY2RTRB
OTZCQkVDQTIwHhcNMjYwODMxMDcyOTIwWhcNMjYwOTA3MDcyOTIwWjAYMRYwFAYD
VQQDEw02YTk1MmQ1MS1jMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwtGpZn6hKzVqXVXjR5FnlHYpWZRQLKDnxG5hasQPYElQQ3C/yMNYbmsIgw8
I4xMIVTUsBrbvf/g/q/s0XSCPacdhyMNPSnSnj0kV1P+JW1yhMAcwncRNBkMzRdW
huWkRXM5Ln6WbNgyPkPGZmZh6VoN9EkkLVjGV/rxdKt68iZD+cVt1nAlhXFHYyr+
+IVULXxIThKkcW1/pdS4ObFQ1SBhH9D93QsP76NXHc22ObDX2LPlKDzL0iVB+P5j
12PKXTtlTTAx3/Tgl8xVM4Rkrifxg1HQ6PI6jjBeCZO4ps4/WUIZLuMfkmmD39ud
+y+HiybEUWQ+po9H8UlWB6r9pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDREolmU
5zgTq9WVbaS2zPMxkKs7MB8GA1UdIwQYMBaAFLWzX5JOtcMvu0GGfToWbkqWu+yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTkyOC81N0RGQkVCQzk4
NEYxMUYwODU0MDI5NzVDNEY5QUUwMi90Yk5ma2s2MXd5LTdRWVo5T2hadVNwYTc3
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTkyOC81N0RGQkVCQzk4NEYxMUYwODU0MDI5NzVDNEY5QUUwMi90Yk5ma2s2MXd5
LTdRWVo5T2hadVNwYTc3S0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG7WHnMjCzqzyqMgZ5DUNtB6ALj0Bjogktei0wotqLKKKdWDnH800mP99I64r
E558xCkgNxtWZn/vJ0nnREMGSROPJVgEOaLPaiu67b3UeJRACVnRB012GFgXqeJI
1XUWmNBsJSz4wENOgfDwAPAaal8rcxWJpSY/Qf7drNQC8ZvTsq2n/K/GMxzLhqB6
DDH0KeStEhgxbjxA+ofRfeose6i48msSN3gZFZ1LTVXI+C7JAPbCwKN0UqoAz0e8
Qq8A3xyNHX3jmpSADLZxO5/V8aCXzlqiXdeSQV1gsD2+DEd46zKoyUfyxYNjxooE
8+SGkfmqf+WG4PL4V0o1WmQ/Pg==
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:25:02 2026 by rpki-client