Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
File:                     TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json)
Hash identifier:          ha849CyzNZneAbU1agwrEJDF1QTxaNrSi2mjcBlkk30=
Subject key identifier:   F8:98:E7:A5:CC:BC:0B:37:88:F3:73:FD:1B:B0:52:DE:89:27:BD:06
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Certificate issuer:       /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial:       0658
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
Manifest number:          0650
Signing time:             Tue 18 Aug 2026 23:02:15 +0000
Manifest this update:     Tue 18 Aug 2026 23:02:15 +0000
Manifest next update:     Tue 25 Aug 2026 23:02:15 +0000
Files and hashes:         1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: y5YC/VCQtgF7kK5mjcGiNoiNoMlChVDLaautdTkcgD4=)
                          2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: FH7SMQY4WyVt9Ewh8gjU/J4biuTaLOVJJpWUTHyF1xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1624 (0x658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
        Validity
            Not Before: Aug 18 23:02:15 2026 GMT
            Not After : Aug 25 23:02:15 2026 GMT
        Subject: CN=6a84e477-98fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:2a:3a:2d:7a:e4:b3:02:4d:52:98:cb:7d:
                    9b:39:ab:7f:56:87:8b:ac:d7:f1:e1:28:dc:b7:db:
                    07:9f:12:b0:48:19:a3:92:8e:52:eb:77:a5:d2:50:
                    1f:7a:05:35:ae:ec:b2:b5:38:9c:cf:0f:9c:42:eb:
                    d4:1d:bc:a7:65:d6:5f:66:73:9e:c0:69:df:c4:90:
                    23:98:71:1d:ab:53:b4:3b:ac:14:49:0f:e2:2e:4d:
                    48:dd:00:94:73:50:9b:cc:2f:be:97:ee:3f:82:d1:
                    f9:d9:0b:62:7b:d7:1a:37:06:e0:08:92:0a:4e:05:
                    7c:f5:b4:03:51:eb:9e:7a:f1:6c:fa:18:29:e9:00:
                    ee:31:b8:5c:c6:ee:a1:99:fe:52:db:82:de:3d:a3:
                    85:83:0b:1e:4e:68:8c:8c:44:d6:71:17:af:51:51:
                    39:0b:76:24:d8:1d:cc:06:95:89:38:30:0f:cd:bb:
                    2b:41:b5:f5:ad:9a:3c:b4:75:4d:67:4a:03:8b:7b:
                    ff:ea:e8:ce:6b:df:72:3d:d0:29:e2:14:fe:7b:f8:
                    65:db:40:0d:d4:3f:8f:3a:8e:78:3b:38:95:69:df:
                    4f:af:b6:2d:c3:45:6b:10:0b:ce:bb:d1:4e:f9:fd:
                    7f:8e:ff:cc:e0:32:e4:68:2e:84:a5:b7:49:5b:fb:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:E7:A5:CC:BC:0B:37:88:F3:73:FD:1B:B0:52:DE:89:27:BD:06
            X509v3 Authority Key Identifier:
                keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:50:55:01:97:ad:c7:95:50:2f:21:c9:3c:3c:e3:6d:52:
         0e:c1:f3:0e:6c:50:1f:a4:2e:c5:6a:19:93:21:bf:15:64:78:
         96:a8:42:19:40:a0:df:96:76:db:ea:4e:ba:43:c8:ca:a3:61:
         7c:3f:da:d6:b2:d6:68:f5:b7:50:68:35:9c:7f:e2:4d:7d:97:
         7f:ff:23:29:88:0e:07:df:d4:3c:2e:a1:29:41:08:21:4a:29:
         65:47:29:85:d3:03:b2:ca:78:90:5a:30:02:b1:6f:8c:3a:b3:
         85:36:fe:d6:e1:cc:97:8d:95:31:15:c4:30:bb:d9:55:ce:06:
         db:8a:05:25:ed:5c:e7:7a:09:cb:80:ef:69:13:f8:c4:06:4e:
         38:4b:9a:e6:21:af:8b:89:7b:68:5a:2b:00:66:94:46:c4:8a:
         c9:85:61:13:57:33:fe:0f:d6:b0:1f:27:95:04:7f:19:c4:e4:
         d4:2d:33:04:47:f3:02:c4:86:59:f8:5e:02:3a:ff:25:ee:50:
         ad:bf:d9:77:65:13:12:c5:75:e1:67:a4:15:57:e3:c8:82:5a:
         f4:bb:f0:9e:c6:54:70:f8:25:27:51:b8:a4:1a:b4:50:2b:db:
         a8:cb:20:81:40:fa:30:7f:d4:4c:1e:96:ab:9a:c6:56:e6:fe:
         39:5d:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:33 2026 by rpki-client