Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File:                     TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier:          R9Ah7ghSbEy5Y6Ml0yvl9AqWcirx3O6iz20XYiB9s4U=
Subject key identifier:   92:C5:5E:81:A1:EF:08:7F:6E:1B:58:34:F5:9E:AE:6D:B0:09:DB:52
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0AF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number:          0AE3
Signing time:             Fri 24 Jul 2026 19:49:43 +0000
Manifest this update:     Fri 24 Jul 2026 19:49:42 +0000
Manifest next update:     Fri 31 Jul 2026 19:49:42 +0000
Files and hashes:         1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: fQQa1GisPT1/HSS6Y2jB/F09lfxH8zloaIUVMZ4a8ow=)
                          2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
                          3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2800 (0xaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Jul 24 19:49:42 2026 GMT
            Not After : Jul 31 19:49:42 2026 GMT
        Subject: CN=6a63c1d7-2f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:9c:c9:fa:b8:d9:f2:15:bc:99:9e:a0:ab:
                    41:68:78:8b:66:2d:d5:1f:ff:e6:66:00:9b:3f:d5:
                    0f:50:26:ce:9a:57:f7:c1:f2:1f:81:db:fa:f6:57:
                    dc:28:f7:5c:ad:d8:d4:c9:f6:a7:29:82:cb:c7:2d:
                    2a:ae:e7:4b:ea:e2:33:0e:26:62:cc:68:27:79:0a:
                    4d:1f:d5:83:28:23:d4:14:bb:62:47:59:27:50:a6:
                    a7:df:9f:a8:1c:9a:6f:3c:d6:e3:aa:45:e2:dc:21:
                    72:c3:cc:b0:f5:7b:b7:e1:c8:15:51:3a:8e:4a:b2:
                    67:e8:61:a0:ca:c4:1e:8d:95:4e:2d:5e:f0:92:1b:
                    a5:7d:c6:39:c7:e5:15:da:93:1d:63:d0:74:35:34:
                    0c:1e:4f:86:ca:74:0c:1d:eb:3d:a9:af:f9:68:b2:
                    1a:99:8a:cd:10:56:36:62:ea:73:4c:ef:b6:13:e4:
                    6e:a8:42:e2:cb:65:60:2d:7c:19:13:1d:f9:47:3e:
                    92:ce:7b:51:e4:5b:14:83:29:81:fa:3d:87:1c:5d:
                    d7:57:a7:a4:ba:86:8f:7a:88:06:92:b7:ea:6c:e1:
                    e7:29:30:57:b9:d3:3a:82:44:3e:82:ae:29:28:53:
                    d9:bd:bd:83:4f:df:17:4c:47:54:93:ba:8f:26:ee:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:5E:81:A1:EF:08:7F:6E:1B:58:34:F5:9E:AE:6D:B0:09:DB:52
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:74:c6:4a:43:7b:e6:71:ec:f0:ee:6b:7a:cf:4b:46:05:ee:
         07:e0:28:88:b2:d9:1f:d8:5a:74:fc:f1:24:e6:27:9c:b9:28:
         f8:2f:52:22:46:50:5b:81:8d:c3:3d:bd:80:98:1a:c2:e3:db:
         db:40:bb:a8:9b:1e:48:3f:24:4c:c9:1f:1b:d1:ae:4e:16:d7:
         2c:41:c6:4e:eb:b4:60:87:57:54:03:30:0a:0e:e3:fa:08:13:
         0f:87:61:76:bb:0f:ea:42:f3:94:57:91:76:b0:bc:10:1e:9c:
         77:c2:d1:2d:d8:54:7d:05:83:97:ca:95:77:da:2b:01:2a:ff:
         3e:47:35:21:69:37:00:94:79:00:58:a6:c2:ee:72:06:48:00:
         41:82:6c:a9:0b:fc:28:21:e8:1c:7a:37:6d:7c:a0:7b:a9:da:
         d9:09:d0:8a:a9:6e:e8:7a:26:05:de:79:16:e7:cf:77:11:6f:
         62:aa:c3:00:36:09:6b:e4:78:be:b7:fd:ea:77:c0:97:1e:64:
         b5:15:3a:13:b4:62:df:b9:d0:0d:0b:6b:15:1a:b6:79:17:45:
         1b:55:db:d3:df:b9:cd:d0:e0:f7:dc:59:e4:82:df:e4:65:2d:
         bb:67:d3:1f:b9:4a:41:35:13:20:31:c2:4c:a0:6c:6e:47:01:
         de:83:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:23 2026 by rpki-client