Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File:                     TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier:          j5OBfPzv8Bm/sZMfp8Vaiuil29z4qOCZYVqKfoCHTkM=
Subject key identifier:   11:27:59:35:E9:72:E7:1D:9C:35:21:C6:96:12:7C:7E:71:EF:FD:95
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer:       /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number:          0198
Signing time:             Mon 03 Aug 2026 05:29:39 +0000
Manifest this update:     Mon 03 Aug 2026 05:29:38 +0000
Manifest next update:     Mon 10 Aug 2026 05:29:38 +0000
Files and hashes:         1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: i2tyW3MZN2rTvl7bx5uQHOgMa2b0BPGPShsrG12xVyg=)
                          2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: JPVeqFS8xR3Uu2AP5zfr6KQvfduwIv7keU6B2F9zLVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 05:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
        Validity
            Not Before: Aug  3 05:29:38 2026 GMT
            Not After : Aug 10 05:29:38 2026 GMT
        Subject: CN=6a702742-eab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:30:4f:19:70:60:06:3f:a7:91:a9:55:b5:
                    4a:ce:c0:62:07:4b:4e:a7:21:6f:37:4c:15:10:b6:
                    8f:fd:38:2e:ab:12:6f:43:fd:c9:25:2b:44:df:6d:
                    a3:7b:9d:d4:9e:ba:b3:ed:0a:3a:62:45:b8:42:dd:
                    fd:47:ba:96:8c:3a:8c:37:67:09:f5:40:3c:6d:69:
                    03:d1:6e:36:f7:88:ab:21:24:c1:ae:04:d8:37:8e:
                    2a:eb:cb:ef:58:83:b6:a8:45:bf:45:d1:e2:0f:25:
                    b9:85:74:7e:d3:34:1d:89:bd:25:2b:19:34:cc:44:
                    56:c5:93:18:6b:69:26:54:50:a7:63:9d:ae:f4:85:
                    76:c3:68:a9:1d:c6:ef:d1:9c:e7:7d:86:a9:68:63:
                    6d:31:c0:34:59:41:aa:43:70:69:79:ba:6e:c3:2b:
                    ec:c0:5f:fa:95:ab:63:68:29:14:68:f2:6d:4a:f9:
                    bf:db:f8:28:ee:c6:10:1e:81:71:3b:dc:04:75:fc:
                    e5:93:e8:db:db:89:95:e9:b8:b4:e4:f9:88:47:c8:
                    6f:39:18:e8:a8:7e:76:25:21:fd:2d:49:77:6d:81:
                    b6:b9:ec:ea:d7:da:8e:39:8b:90:87:61:26:4f:d4:
                    d2:73:bf:c7:50:39:5d:5d:11:b7:6d:9d:c4:bf:a9:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:27:59:35:E9:72:E7:1D:9C:35:21:C6:96:12:7C:7E:71:EF:FD:95
            X509v3 Authority Key Identifier:
                keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c3:94:ee:18:c9:59:13:cd:10:4b:d7:d0:4e:e6:2a:59:5f:
         e3:8e:0f:f9:08:6b:e4:8d:c2:93:8d:4e:eb:86:d3:74:9b:15:
         a4:c4:c8:90:c5:d5:01:3e:54:82:bb:90:b7:6f:ab:f3:68:6b:
         8d:b1:24:eb:37:fd:00:ed:88:eb:ed:b1:44:49:e0:e3:0f:88:
         1a:15:05:cf:4d:f2:fa:0c:6f:a9:2e:0a:cc:92:0e:2b:32:83:
         76:89:d6:50:30:b8:95:77:15:0c:a7:43:51:19:94:6e:c3:b7:
         b6:27:28:fd:c4:c1:55:0d:73:2b:bc:14:f4:98:a2:f1:83:e4:
         79:87:6c:a6:21:20:f6:cc:32:38:6b:31:e8:f3:2a:17:19:1f:
         21:1f:a3:e7:10:c9:2b:ba:30:cc:3f:5f:43:8c:25:f7:f2:63:
         68:a6:bb:ed:08:1b:74:cb:2e:a7:d5:74:61:63:3f:cf:48:50:
         b4:84:7e:26:51:c3:0f:50:a6:33:62:e5:24:70:cc:5b:e6:c1:
         bd:01:bf:76:18:47:93:4f:2c:c0:cd:4c:85:4f:bb:33:88:6b:
         85:78:96:ad:82:8b:c4:bc:97:90:cb:3e:f8:f1:c7:71:77:eb:
         4b:11:11:1c:a8:de:5a:82:53:86:ca:e4:8a:70:f4:90:f9:64:
         63:93:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 16:21:43 2026 by rpki-client