Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File:                     TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier:          bt/Lar6vv6xCGJnK/eN08tuaWziNIWN5gS95Lpavn2M=
Subject key identifier:   70:9B:27:16:49:3D:B6:3A:58:48:E8:26:4A:6A:AF:C0:EC:3D:D1:50
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer:       /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial:       03AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number:          03A4
Signing time:             Thu 23 Jul 2026 01:35:55 +0000
Manifest this update:     Thu 23 Jul 2026 01:35:54 +0000
Manifest next update:     Thu 30 Jul 2026 01:35:54 +0000
Files and hashes:         1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: glQgAtS+eyItBHt+Z9CmOzEY1S/9Qdsl/dw7YgkaYcw=)
                          2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: P90Aw6/A3YFwdzm6ZtC5QnYCPc3LBDM9e/xDCyTP1kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
                          rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
        Validity
            Not Before: Jul 23 01:35:54 2026 GMT
            Not After : Jul 30 01:35:54 2026 GMT
        Subject: CN=6a616ffb-d9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:74:b9:13:5f:06:42:92:ec:d2:87:ca:8a:
                    e5:67:c1:3f:a2:ed:55:d0:c5:bf:c1:dc:dd:df:23:
                    06:e3:11:ba:0d:68:ca:e2:9b:fa:6b:1c:45:6f:f8:
                    5c:fa:61:d8:e5:ea:05:cd:9f:2e:84:99:22:97:62:
                    1f:99:da:4e:a8:95:06:d6:0e:f0:9c:c6:b0:84:e5:
                    f9:0f:83:58:18:f0:d1:bc:2d:a4:c2:e4:32:c6:9f:
                    c4:20:51:d1:36:40:00:16:43:a1:bc:0c:e9:30:b9:
                    50:5b:86:dc:2b:d9:33:ba:0d:fa:97:0f:c2:0d:22:
                    0c:ea:13:49:e6:f6:31:1b:70:6d:30:a1:67:9f:ad:
                    48:c5:ca:4e:39:79:0c:55:0f:95:e0:58:6a:a0:b1:
                    09:3d:8b:cb:dd:88:d7:0d:67:62:13:37:ae:94:b6:
                    e4:4d:1e:cd:7b:8d:52:3a:80:29:fa:1b:81:b6:01:
                    f2:91:4b:da:66:a8:b1:f3:8c:74:37:20:e9:d9:ef:
                    36:ab:3a:fb:87:f4:d9:6d:7f:24:8d:2a:50:2d:b2:
                    0a:9b:fb:f6:1e:2e:42:36:9f:69:1e:2d:28:de:b8:
                    70:2e:33:f0:92:7c:a4:d5:15:a7:0c:fd:1f:08:10:
                    62:c5:53:38:4d:3a:4c:cb:b2:e6:11:00:53:d2:31:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:27:16:49:3D:B6:3A:58:48:E8:26:4A:6A:AF:C0:EC:3D:D1:50
            X509v3 Authority Key Identifier:
                keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:7d:9a:f3:94:cf:76:fb:c6:9a:3d:e8:e8:ab:79:65:0d:
         bd:c7:3a:10:bd:36:03:ac:af:6d:52:b8:63:88:85:e6:48:9a:
         bb:10:f2:13:49:70:4d:63:0a:1a:d7:4f:7b:fb:3c:5c:86:7d:
         8f:b9:d2:26:ad:1c:95:7a:15:a6:ad:ab:a0:02:4c:85:e5:03:
         06:55:61:3f:d8:c4:f5:8f:d3:b4:b4:3d:5c:d5:63:f1:bc:c7:
         c6:84:79:fd:0b:c1:24:fd:d4:18:7d:73:91:0d:1e:c8:6b:26:
         79:d8:e2:4b:25:50:b5:1b:4e:a3:58:7e:b7:81:1e:54:2c:1e:
         80:ee:7b:b9:55:df:d6:3f:f3:7c:4d:4e:db:e2:24:76:30:a9:
         e7:0e:bb:cd:68:42:96:f4:60:97:87:fd:b1:31:1d:9f:64:dd:
         83:3c:ca:fd:10:57:d1:ab:ad:a1:36:c6:85:2a:a4:67:1e:0b:
         82:d3:cf:79:dd:7d:89:56:e6:85:be:27:2e:8d:0f:7e:44:12:
         be:24:4c:f6:df:54:b3:9e:6e:ed:3d:f4:fd:46:f4:54:58:54:
         d3:78:22:3d:dd:94:2d:f7:2d:8d:e2:dc:bb:7a:e3:d0:3d:16:
         d0:68:fe:d1:c7:b8:95:85:8d:3b:d1:02:03:14:2c:2a:de:f4:
         87:7b:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:16 2026 by rpki-client