Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
File:                     TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json)
Hash identifier:          PCI1gFjm/RvragAqe5O9gbqQOgHyfCNGb6fSDOjlgdg=
Subject key identifier:   19:3F:D7:5C:F7:68:BC:52:42:BB:B5:47:69:9C:2D:B2:BF:71:06:B9
Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Certificate issuer:       /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
Manifest number:          F2
Signing time:             Sun 05 Jul 2026 07:04:12 +0000
Manifest this update:     Sun 05 Jul 2026 07:04:12 +0000
Manifest next update:     Sun 12 Jul 2026 07:04:12 +0000
Files and hashes:         1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: JBbxy/4OOwhti3xwxpD8Up880I+Mq540bZPyI5zyFrY=)
                          2: 9B4952122CC411F18DA02C7B8F833773.roa (hash: bxkYgKM3AZY7JP6+Ac7J2hlgQV4hzjnKcNdgfr1Hzwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
        Validity
            Not Before: Jul  5 07:04:12 2026 GMT
            Not After : Jul 12 07:04:12 2026 GMT
        Subject: CN=6a4a01ec-742f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:b6:63:d1:6f:f1:9f:98:67:38:5a:30:53:
                    d2:0a:c8:13:57:99:d1:56:86:f1:73:92:63:ea:ee:
                    4c:eb:cb:f9:e4:50:84:60:8c:3b:52:ae:1b:97:04:
                    3d:9b:2c:a2:c0:fe:84:f3:86:ff:26:ca:35:85:df:
                    bb:0f:5e:5e:44:87:c8:fb:20:4e:40:c5:12:32:26:
                    ae:1b:67:55:41:64:32:12:5f:5e:97:9e:a2:01:7e:
                    cc:51:89:34:69:55:19:2c:e9:30:ab:60:65:e6:6d:
                    34:ea:02:a0:64:ac:d6:df:df:20:a7:ba:65:e7:5d:
                    da:4a:6f:5a:82:cb:83:80:17:95:3d:68:f2:88:d2:
                    5c:4a:9b:8b:2a:f3:b4:fd:fe:67:89:22:33:bc:69:
                    f4:95:6e:87:83:e2:41:91:c3:bd:38:a5:4b:0b:62:
                    6b:03:e7:fa:76:f9:51:b6:05:de:58:32:25:52:ef:
                    21:31:85:53:40:98:62:34:48:6b:81:d7:3a:77:39:
                    ba:fc:15:43:6a:80:9b:ce:23:11:c6:56:f6:b7:7e:
                    39:df:25:e3:91:b6:b3:9f:e2:ac:6c:22:23:e2:cc:
                    f0:47:be:6b:7b:89:b6:38:84:32:c0:eb:6a:c2:4f:
                    df:07:f3:58:3f:78:14:f9:8d:a7:2a:58:08:6f:53:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3F:D7:5C:F7:68:BC:52:42:BB:B5:47:69:9C:2D:B2:BF:71:06:B9
            X509v3 Authority Key Identifier:
                keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:03:38:0d:fb:94:ed:54:7c:a4:cc:ad:f8:3c:d1:2d:5e:
         50:01:31:5c:d9:34:cd:08:6c:e0:44:ef:19:4a:8d:89:32:25:
         d0:e7:0e:62:0c:0e:bb:25:3b:bb:f0:39:4d:1a:e5:82:e7:d8:
         11:f4:65:c0:a9:59:23:4d:c9:4f:11:43:75:84:0a:5c:97:fe:
         d7:06:cf:5d:e2:01:c8:2a:40:62:79:7c:ff:93:39:39:10:70:
         33:50:6b:88:81:a0:ee:29:e6:9b:be:9d:27:7b:cd:e1:ac:9b:
         a3:be:7c:5e:76:1e:ec:af:87:e3:c3:d6:51:f6:7b:03:07:a1:
         df:ef:79:14:d8:62:34:5d:b3:ad:9b:41:fd:5b:31:3b:55:29:
         a2:67:a4:b6:39:24:e2:bc:a5:c5:62:58:4e:e8:2b:20:16:4a:
         3a:02:13:0a:ea:e7:96:ea:22:3e:88:44:0e:86:1d:e6:71:1d:
         25:d8:b4:c8:d1:15:3a:b8:05:cc:58:20:8d:14:42:62:8f:8c:
         2a:3b:95:15:b7:6d:a6:95:c8:99:b6:a4:a1:c7:ca:80:95:73:
         74:aa:3c:79:e1:8c:38:4e:c1:11:c9:ae:ee:c4:99:2a:76:ab:
         b6:2f:9d:f5:58:f5:61:e8:ba:2b:a8:af:49:15:43:9c:bd:5b:
         38:35:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:43 2026 by rpki-client