Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
File:                     tg1afDY_D02TL-MXuQzmz4DSg8k.mft (raw, json)
Hash identifier:          FMaqu6COyenTfjyy6IHZIAco32KhrRTJIxFkh5by+/c=
Subject key identifier:   BF:1E:3E:21:76:54:F7:28:A8:67:66:28:BB:A0:E7:F1:46:15:24:8A
Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9
Certificate issuer:       /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
Certificate serial:       0B0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
Manifest number:          0B02
Signing time:             Wed 22 Jul 2026 19:44:19 +0000
Manifest this update:     Wed 22 Jul 2026 19:44:18 +0000
Manifest next update:     Wed 29 Jul 2026 19:44:18 +0000
Files and hashes:         1: tg1afDY_D02TL-MXuQzmz4DSg8k.crl (hash: y/unQb0pzYlJZOeSspyC+pBHwK5ebcojRCCWMJK/PA0=)
                          2: 59AA22D06FFD11EA9160902DC4F9AE02.roa (hash: wf2N7y2gm+HMhGLmDepSkmqtdRiwq+CjqsQ72qN8FGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl
                          rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2831 (0xb0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9
        Validity
            Not Before: Jul 22 19:44:18 2026 GMT
            Not After : Jul 29 19:44:18 2026 GMT
        Subject: CN=6a611d92-2191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:74:c1:a8:16:44:af:d5:ee:57:18:d8:4e:
                    2d:e6:c5:d2:af:86:3f:ef:ea:4d:74:c2:d8:3b:66:
                    4e:07:c4:89:a6:b4:76:1e:54:c5:38:fc:3d:22:88:
                    cd:54:3e:4c:7f:5e:db:e6:a4:8d:19:23:fd:6c:93:
                    27:7a:f8:e9:c8:e9:eb:d9:64:85:2f:69:8c:11:e8:
                    d8:74:c0:5e:ba:54:22:a9:55:a9:e9:bd:08:cf:e2:
                    09:99:38:a0:6d:1a:2b:13:a6:c9:44:c6:5a:e6:d3:
                    da:07:35:ae:9d:13:ea:01:e7:2b:fb:f9:26:94:88:
                    73:5c:be:f0:7a:03:01:bf:e8:c0:79:bc:e3:95:fe:
                    27:c1:10:18:77:69:20:38:e4:bb:d6:c2:bb:04:5c:
                    af:35:21:dc:e1:db:87:55:04:23:ac:94:3c:0d:e0:
                    d3:47:d8:46:a2:88:d1:92:6d:6c:cd:dd:f2:65:46:
                    5f:51:12:08:05:e6:b1:a0:b4:1b:ae:52:01:4c:e7:
                    9f:6b:bb:99:04:26:08:72:20:1a:20:61:34:3d:5b:
                    58:3f:18:89:61:e5:43:99:93:f7:82:b5:84:77:b3:
                    38:ec:61:26:d3:b2:f8:9c:17:3d:6e:86:c3:8b:2c:
                    29:18:4c:ad:a5:55:9e:8f:4d:19:20:8b:ff:48:96:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1E:3E:21:76:54:F7:28:A8:67:66:28:BB:A0:E7:F1:46:15:24:8A
            X509v3 Authority Key Identifier:
                keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:32:e7:9d:7e:96:e8:94:ce:3a:38:aa:45:72:31:23:c4:37:
         51:82:67:fb:35:35:88:64:cb:be:24:2f:78:15:a7:b0:3a:8f:
         cf:7b:8d:e0:41:94:62:72:85:48:e4:fa:df:b6:d2:2d:d3:c8:
         63:49:25:4b:8b:81:ad:4c:dc:8e:af:d6:68:72:0e:ef:66:69:
         16:bf:a4:19:70:10:34:bf:9a:88:b8:a1:19:20:7d:94:8c:40:
         9a:b4:83:d0:a6:e3:82:d1:40:56:70:fc:f9:41:b0:64:70:22:
         3d:79:da:ea:1a:91:99:4e:69:5b:20:08:24:13:c4:99:27:79:
         b6:bf:26:ab:c3:35:7c:04:53:d1:07:a1:fd:0a:0c:76:86:d8:
         52:3e:3e:ef:d4:26:55:20:80:4e:c1:18:89:0c:02:52:b8:bd:
         c7:64:47:cb:50:cc:bc:e8:8e:5e:2d:9c:96:9e:60:00:93:a9:
         5a:27:22:ae:e9:ea:0e:61:27:91:44:59:d9:d9:94:8e:07:60:
         93:76:b5:38:58:0d:0a:66:71:3e:0a:87:b0:18:92:95:62:8a:
         ab:bd:20:03:36:22:3d:19:c0:3d:cb:44:08:ff:0e:85:09:50:
         f3:59:b6:09:8c:45:a0:63:06:13:ac:a4:1a:e8:03:74:05:ff:
         9f:90:00:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG
ODBEMjgzQzkwHhcNMjYwNzIyMTk0NDE4WhcNMjYwNzI5MTk0NDE4WjAYMRYwFAYD
VQQDEw02YTYxMWQ5Mi0yMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSx0wagWRK/V7lcY2E4t5sXSr4Y/7+pNdMLYO2ZOB8SJprR2HlTFOPw9IojN
VD5Mf17b5qSNGSP9bJMnevjpyOnr2WSFL2mMEejYdMBeulQiqVWp6b0Iz+IJmTig
bRorE6bJRMZa5tPaBzWunRPqAecr+/kmlIhzXL7wegMBv+jAebzjlf4nwRAYd2kg
OOS71sK7BFyvNSHc4duHVQQjrJQ8DeDTR9hGoojRkm1szd3yZUZfURIIBeaxoLQb
rlIBTOefa7uZBCYIciAaIGE0PVtYPxiJYeVDmZP3grWEd7M47GEm07L4nBc9bobD
iywpGEytpVWej00ZIIv/SJYbSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8ePiF2
VPcoqGdmKLug5/FGFSSKMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG
RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODMwOS8xQTQ4REM4NjZGRkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0Qw
MlRMLU1YdVF6bXo0RFNnOGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASjLnnX6W6JTOOjiqRXIxI8Q3UYJn+zU1iGTLviQveBWnsDqPz3uN4EGUYnKF
SOT637bSLdPIY0klS4uBrUzcjq/WaHIO72ZpFr+kGXAQNL+aiLihGSB9lIxAmrSD
0KbjgtFAVnD8+UGwZHAiPXna6hqRmU5pWyAIJBPEmSd5tr8mq8M1fART0Qeh/QoM
dobYUj4+79QmVSCATsEYiQwCUri9x2RHy1DMvOiOXi2clp5gAJOpWicirunqDmEn
kURZ2dmUjgdgk3a1OFgNCmZxPgqHsBiSlWKKq70gAzYiPRnAPctECP8OhQlQ81m2
CYxFoGMGE6ykGugDdAX/n5AAJw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:59 2026 by rpki-client