Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
File:                     tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json)
Hash identifier:          qjkokTors9lmR1DdiKPM0+GOXYEUzmJP/sXk6fWl9BI=
Subject key identifier:   76:E2:20:62:27:22:89:87:95:2C:EE:E7:F1:1D:6F:03:1A:17:94:72
Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B
Certificate issuer:       /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
Certificate serial:       02AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
Manifest number:          02A4
Signing time:             Wed 19 Aug 2026 02:10:09 +0000
Manifest this update:     Wed 19 Aug 2026 02:10:08 +0000
Manifest next update:     Wed 26 Aug 2026 02:10:08 +0000
Files and hashes:         1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: TnE6nWpfMTke4ony/gcttQxxF2R372c9Dj3Iw7otitU=)
                          2: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: GxVSXWzE6du6WMtXT3WxN39pt4kQtD831phFtQ55DeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl
                          rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B
        Validity
            Not Before: Aug 19 02:10:08 2026 GMT
            Not After : Aug 26 02:10:08 2026 GMT
        Subject: CN=6a851081-6aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:ed:22:87:89:61:bf:79:f1:23:4c:c8:54:
                    a5:a7:0c:13:52:48:a5:5e:30:4a:34:b1:af:97:80:
                    ae:d6:b3:60:9c:77:47:78:ff:aa:21:2d:49:d7:29:
                    bf:6f:cd:8f:ad:36:2c:9b:f2:18:ba:6b:3f:a0:8b:
                    9c:df:d4:d7:0a:4e:52:df:62:b8:5d:53:f6:39:dd:
                    b8:5d:ff:d2:a6:3d:64:2c:fd:3f:60:6a:b7:04:c2:
                    b8:88:09:c9:44:98:d7:f6:46:b6:31:29:63:d1:ff:
                    c6:02:23:bd:a9:2c:c7:01:7a:3a:8e:99:27:92:1f:
                    b3:fe:92:fa:ad:ea:c5:88:32:56:18:36:ce:1b:8d:
                    9a:04:46:29:78:f8:82:de:0a:fe:52:5a:cd:1e:c5:
                    be:73:47:bc:b2:bd:cc:08:e1:9f:e9:7e:fc:39:13:
                    6f:17:69:da:eb:11:32:32:67:37:72:0e:ad:ce:13:
                    3a:10:98:bc:a6:22:47:92:c2:f3:af:32:be:61:f4:
                    0e:2c:8e:57:91:02:80:90:1b:f6:82:72:f6:98:68:
                    40:e9:d1:e6:12:a0:87:08:2c:d9:bb:60:ae:01:80:
                    d2:64:0f:76:c9:fc:b1:92:84:6e:f8:2f:d4:a3:cb:
                    bc:19:6a:c2:4f:9f:44:0b:b0:55:d3:ed:2e:ba:a3:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:20:62:27:22:89:87:95:2C:EE:E7:F1:1D:6F:03:1A:17:94:72
            X509v3 Authority Key Identifier:
                keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:76:a1:53:1d:ed:71:2c:fb:fc:29:3a:b3:29:01:61:c9:48:
         33:25:ca:2b:81:ce:b6:81:e9:9c:d9:b7:6f:54:ed:fe:6f:ee:
         80:dd:a5:07:09:72:48:38:14:41:51:be:99:8a:66:2e:67:7b:
         fe:58:35:94:30:66:ac:da:e4:01:99:3b:41:3c:a0:76:ee:1c:
         fc:4e:cb:b4:14:2c:43:cf:f2:5f:5e:d2:6c:8f:18:cb:39:0a:
         77:95:2c:3e:e8:4a:84:8b:ac:40:49:bd:4d:11:4d:09:99:76:
         ca:55:81:ec:da:1b:0e:52:2d:e7:a1:18:f9:cf:05:56:b9:da:
         18:1f:b8:02:2b:ef:a7:41:d0:99:70:59:53:1b:a3:3d:70:94:
         43:4d:ec:bd:91:a8:1d:93:69:f3:88:74:9e:83:b4:f8:8e:dc:
         87:00:99:2f:92:9b:c2:a2:6c:20:2b:e0:b5:a9:87:3c:2c:22:
         45:fa:04:75:84:c8:57:9a:ef:4b:2e:a8:5a:95:df:b8:a9:38:
         30:32:a2:25:63:9d:54:34:7f:9a:71:e4:9f:25:68:d2:61:a8:
         bc:5b:e5:22:d8:10:1c:88:1b:e8:c1:ab:5f:d9:18:07:8d:26:
         4b:4c:ef:38:b9:b3:21:b4:7a:8f:fc:ae:22:4b:12:89:d4:7f:
         a9:34:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:12 2026 by rpki-client