Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File:                     TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier:          YpkhLjY4zVWzYl32iewoq8dcY4HLuYQaRrzpEhSEKyk=
Subject key identifier:   DD:5E:B6:F9:7B:21:38:D1:5F:0D:CC:1D:CD:E4:CE:A5:BA:6E:8B:5F
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer:       /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number:          55
Signing time:             Mon 24 Aug 2026 05:58:34 +0000
Manifest this update:     Mon 24 Aug 2026 05:58:34 +0000
Manifest next update:     Mon 31 Aug 2026 05:58:34 +0000
Files and hashes:         1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: MWEhmIwmPDYLYCWXYwXBCbXev23NexAMajmjsqg/ZW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 05:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
        Validity
            Not Before: Aug 24 05:58:34 2026 GMT
            Not After : Aug 31 05:58:34 2026 GMT
        Subject: CN=6a8bdd8a-95f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:80:b7:92:d4:61:02:e1:70:73:49:ae:c5:
                    67:16:fb:e3:77:af:4c:e5:73:e9:33:a0:ca:90:37:
                    ed:2e:82:d8:30:46:e7:91:ad:c0:83:88:b2:7f:90:
                    78:33:94:7b:aa:4b:e7:08:b2:19:a3:e5:2f:45:e6:
                    f4:28:dd:28:25:ea:2f:b7:9f:27:87:68:bf:c6:bb:
                    f5:77:64:91:06:8f:fb:cd:02:5a:50:c6:0d:1b:2a:
                    2d:d8:ba:15:89:1e:62:80:10:b5:82:c8:da:f2:11:
                    8a:90:23:9d:a9:19:92:b0:78:26:08:22:7d:c4:08:
                    e0:b8:40:8a:0f:fc:f3:20:e3:b2:8c:72:76:14:d1:
                    fa:9a:d1:00:0b:9e:9f:8a:f4:e1:66:9f:a8:ba:07:
                    15:e3:ea:96:c7:c9:7d:c8:9e:f9:83:6d:af:65:c1:
                    0e:5d:8e:b1:de:51:aa:36:72:5c:5b:40:6c:26:2a:
                    56:26:63:03:50:b9:28:72:6c:f3:9e:65:73:4b:d0:
                    77:eb:30:0b:28:1b:ef:6b:a0:55:87:5e:f6:82:59:
                    27:7f:10:e1:6b:b3:be:23:e7:35:0e:f0:e0:72:62:
                    a3:3d:d9:7c:e1:78:c7:6a:89:22:cb:60:47:96:a4:
                    39:ae:bc:68:78:74:8e:54:c1:7a:26:06:06:49:6e:
                    c4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5E:B6:F9:7B:21:38:D1:5F:0D:CC:1D:CD:E4:CE:A5:BA:6E:8B:5F
            X509v3 Authority Key Identifier:
                keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:64:b2:36:1e:78:db:01:ef:30:be:93:ed:da:9a:ee:c5:10:
         1b:d9:f6:3d:6d:a6:82:68:bc:67:0e:78:e9:59:68:8e:5e:a1:
         28:f6:10:1b:77:1a:3b:d1:ac:c5:c9:fe:bd:2a:cb:5e:22:da:
         02:3c:10:b2:13:8b:8a:b3:5a:3a:10:5f:15:a9:b6:4f:b6:b2:
         0f:ea:dd:03:5c:bc:ed:65:2a:93:b4:fb:5a:1d:cd:2d:2a:5c:
         d4:d5:7b:5d:14:fa:19:c1:10:2a:76:7d:15:ad:7e:ab:79:10:
         4a:9a:2f:95:7f:f4:b9:1b:11:e3:55:1c:e9:b8:d3:bd:69:45:
         c1:f4:ce:be:02:ba:3e:9a:a3:a7:eb:aa:3c:cb:7c:e6:b0:fb:
         99:8b:d3:cd:24:67:47:d0:53:c5:cc:0a:fa:29:9a:6e:28:c0:
         60:19:99:3f:8c:29:91:f2:9e:a4:0d:68:21:36:9e:42:ed:f1:
         73:e4:f3:35:b3:aa:54:be:ff:06:b8:d2:64:45:f5:13:93:95:
         cb:70:29:a1:1c:39:ee:c4:b9:db:88:1b:1d:41:04:3e:38:c6:
         43:2f:17:d8:ff:2f:76:fb:67:02:dc:81:c2:d2:f5:b5:5a:93:
         b1:b3:6d:b0:7e:9d:62:a5:3c:aa:d6:59:52:9c:36:47:3a:27:
         99:04:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:39:20 2026 by rpki-client