Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
File:                     TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json)
Hash identifier:          EVVlHjrg3p3gB0v9skz3XJ9+hcbXVQbkDh5cuYgU5eo=
Subject key identifier:   BD:92:F2:BE:ED:DD:06:C1:0D:89:DC:4D:C9:FC:4A:2F:C8:B1:EF:0A
Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC
Certificate issuer:       /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
Certificate serial:       0A42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
Manifest number:          0A36
Signing time:             Tue 18 Aug 2026 20:01:11 +0000
Manifest this update:     Tue 18 Aug 2026 20:01:10 +0000
Manifest next update:     Tue 25 Aug 2026 20:01:10 +0000
Files and hashes:         1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: od4/40MSRsRhvg+R1rkZA/v0uwo0WwTn4wHpQCaPGFE=)
                          2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: o9QOTY0z3HoO1T81xq5TYdHmjJWor4MMo3R90enA53U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC
        Validity
            Not Before: Aug 18 20:01:10 2026 GMT
            Not After : Aug 25 20:01:10 2026 GMT
        Subject: CN=6a84ba06-af2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:28:54:d9:d1:23:10:af:d3:51:e1:3c:7d:
                    03:af:9e:eb:a8:38:58:10:8d:c4:17:48:8d:a9:6a:
                    38:fc:42:0c:89:df:b2:1a:25:e5:20:28:47:d8:a1:
                    c6:a5:1a:77:a1:bf:b7:d2:ab:05:50:96:e4:fa:bb:
                    bf:27:a4:0e:33:07:7d:ad:05:5d:ed:3e:5e:c7:d4:
                    61:c2:b9:e6:df:ba:d0:39:54:b0:e5:79:ed:6a:dc:
                    86:d5:3b:2c:b7:09:a7:3a:b0:fa:fc:2b:86:a4:3d:
                    fc:48:49:f6:6e:96:db:84:ce:b5:f5:69:fb:e8:9a:
                    3c:87:a1:e0:44:2f:6a:fc:d8:92:40:ea:f7:55:e7:
                    2f:29:84:e5:25:f6:83:0c:1b:57:6d:76:69:fc:5e:
                    63:8d:7b:80:65:a9:7c:6e:ab:f6:07:a6:4d:65:ec:
                    bc:d8:3e:3c:90:c7:8a:ea:51:22:f3:a4:b8:c5:39:
                    1a:6b:66:ac:27:5a:64:d8:76:1b:14:3a:46:3a:69:
                    1b:04:b6:b5:00:40:0b:b2:52:a3:63:1c:df:84:4e:
                    ac:0c:b1:47:7e:e3:f1:01:90:fe:44:8c:a2:27:bf:
                    86:db:97:41:e5:b2:04:35:46:47:19:94:28:b2:5c:
                    3d:a5:f1:4d:53:59:18:11:75:1b:52:78:34:01:49:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:F2:BE:ED:DD:06:C1:0D:89:DC:4D:C9:FC:4A:2F:C8:B1:EF:0A
            X509v3 Authority Key Identifier:
                keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:ce:3f:bf:64:0f:e1:93:09:a6:33:f0:1c:94:0a:ff:6a:
         97:96:e1:8f:d3:29:29:31:d1:66:c2:f7:0a:38:b8:10:e8:1c:
         4b:59:b2:96:8c:e7:23:94:59:31:f9:43:ed:6f:0b:e8:a8:31:
         34:b6:e0:ce:b1:66:af:e9:af:98:60:b1:99:0d:92:b7:c9:1b:
         1d:a1:dc:3c:cf:b5:00:50:80:12:19:21:de:8a:ca:44:b3:49:
         dc:77:c8:e3:79:99:0d:2b:d9:5a:37:40:72:e4:c2:d9:85:e2:
         ed:f8:a8:10:cc:7c:49:24:03:5a:b3:b0:e7:de:65:d8:67:78:
         8c:8a:72:8c:ba:c1:42:91:2a:cb:7b:56:ec:52:cb:28:79:e8:
         e6:2f:8a:6b:a0:22:ca:49:5b:48:40:cf:fc:e8:b4:56:a3:c1:
         dc:23:a1:f0:6b:05:4f:1b:77:30:e6:c6:d7:f1:90:a2:47:ac:
         f4:c6:3f:a4:45:03:b5:53:46:4b:d5:d9:f5:11:a7:07:7b:1c:
         5a:9e:b8:ba:27:f7:1a:be:57:63:45:1c:f4:e7:22:7e:d6:1f:
         7e:ef:28:70:4c:3d:d8:f9:1f:c8:af:7c:6e:af:e8:e9:24:a4:
         68:66:8e:0b:94:67:34:c2:fe:73:94:b5:b3:d5:13:05:1e:43:
         e1:5e:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:56 2026 by rpki-client