Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File:                     TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier:          Iro38ta0ZRNZBsC5qpcss0eGitBrwRSdd1p8xvnxBAA=
Subject key identifier:   D9:35:15:8E:B7:19:2A:F9:A1:A2:E1:06:5F:60:68:6A:32:19:72:09
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer:       /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number:          54
Signing time:             Sun 23 Aug 2026 07:54:34 +0000
Manifest this update:     Sun 23 Aug 2026 07:54:34 +0000
Manifest next update:     Sun 30 Aug 2026 07:54:34 +0000
Files and hashes:         1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: m7Nkri3kBrg6X6VbatPawMy+QCjLcVsz5FxQa1P+u8Y=)
                          2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: k+DLGcP4Ggvw0BXwNT4VhSvzYWoeDsh21weBHSJZ/6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
        Validity
            Not Before: Aug 23 07:54:34 2026 GMT
            Not After : Aug 30 07:54:34 2026 GMT
        Subject: CN=6a8aa73a-02f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:f7:25:87:96:02:7c:8d:b2:4c:e0:8d:11:
                    3a:55:5e:85:93:e6:7c:cf:7c:24:f7:03:15:0d:85:
                    81:2a:25:c6:aa:5c:5b:5c:f6:70:e4:f7:01:00:ff:
                    44:c1:24:63:08:60:28:cc:a2:95:29:25:53:01:57:
                    0c:34:1f:d8:49:0c:77:98:ee:ca:87:66:77:e6:96:
                    35:f6:75:f7:2d:00:bd:dc:7a:1c:f0:9a:f5:b3:73:
                    5b:7e:13:11:39:4b:8a:ef:eb:69:bd:15:c9:9d:33:
                    41:f4:92:e3:fa:31:30:87:fe:de:da:3a:e9:f3:e1:
                    59:df:cd:8c:23:0e:76:38:d5:70:08:f7:38:bd:de:
                    95:5c:0e:98:85:c7:8f:1d:db:d6:a7:f9:84:9b:f1:
                    22:4f:31:28:e4:90:9e:1c:06:1c:bc:14:11:f2:f4:
                    29:3a:e3:37:b6:7a:b2:6f:31:7b:8c:76:d8:38:c3:
                    30:95:00:69:3b:55:07:63:be:c1:ea:9f:91:21:de:
                    f5:f2:c6:cd:4e:6e:41:82:73:02:41:dd:fb:0f:ce:
                    cc:fe:9c:8c:71:55:35:3e:88:ea:88:8f:52:f8:7c:
                    59:ae:bc:b9:72:dc:bd:8c:89:c7:9d:7b:0a:e9:16:
                    f8:68:06:d4:0e:d8:db:5d:18:54:96:36:59:46:67:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:35:15:8E:B7:19:2A:F9:A1:A2:E1:06:5F:60:68:6A:32:19:72:09
            X509v3 Authority Key Identifier:
                keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:69:d5:c1:89:bf:00:8a:de:69:48:3b:90:b8:0b:31:1e:01:
         bd:f6:37:d2:09:05:05:76:95:10:52:c8:07:16:6f:6c:36:0f:
         25:e6:d3:d6:fa:98:b7:7d:18:a4:75:34:07:54:78:60:96:f4:
         68:eb:7f:0e:05:a2:55:f0:16:a4:e3:16:07:af:2b:80:b5:fa:
         bb:fe:19:e0:f4:01:8f:94:c1:cc:e4:11:26:81:e2:71:31:4b:
         b9:62:a2:52:bb:ab:fe:50:54:65:95:fc:78:c3:5d:c4:fb:df:
         0a:02:87:8e:08:70:17:f7:0d:bf:b5:cb:2d:9d:30:be:bf:f6:
         c6:59:63:7b:12:b7:7b:b4:64:d4:90:e9:31:66:d2:7c:fd:30:
         6c:e5:1a:91:17:da:34:89:5f:7e:1d:5f:67:08:8d:8e:81:5f:
         4f:52:fd:cd:c8:42:a7:e8:f1:49:61:39:6c:9c:f7:fb:e4:e7:
         f8:d1:a5:ba:1d:3b:56:f0:3d:8a:de:19:e4:7e:2b:a3:d3:d6:
         8d:f1:69:77:85:01:b5:63:d4:29:21:40:a3:24:97:08:04:1a:
         07:c8:89:f6:6d:9e:40:e7:d6:95:b9:f9:28:f8:b1:5a:64:e5:
         c1:be:82:08:ea:48:03:1e:5e:61:a6:ac:60:a6:69:80:b5:db:
         58:1e:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:32:46 2026 by rpki-client