Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File:                     TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier:          ZedU6V2i5GZKNqwCxztDghWOlz4HlEbSljY+uBjMSjY=
Subject key identifier:   92:50:FE:C1:42:C0:8A:01:6F:9D:FE:79:D2:43:28:80:18:D0:E5:2F
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0AEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number:          0AE2
Signing time:             Wed 22 Jul 2026 19:46:55 +0000
Manifest this update:     Wed 22 Jul 2026 19:46:55 +0000
Manifest next update:     Wed 29 Jul 2026 19:46:55 +0000
Files and hashes:         1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: 6liwykoAuQkHf9BNMJ7rF8jomd1H4b0AvFS1gr6pQko=)
                          2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
                          3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2799 (0xaef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: Jul 22 19:46:55 2026 GMT
            Not After : Jul 29 19:46:55 2026 GMT
        Subject: CN=6a611e2f-6440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:0c:a3:35:ff:e1:e7:e0:4e:57:b4:fb:59:
                    51:0b:c8:a0:ed:9a:fa:e3:f7:9c:00:80:39:13:18:
                    aa:65:11:38:c9:3f:c0:e3:ea:55:68:8a:d4:d5:c9:
                    77:12:a1:8f:60:86:6c:d3:3b:c7:9b:b0:53:e0:7f:
                    43:0e:63:e7:1b:0f:b0:c5:63:c7:59:d5:9a:17:5b:
                    9f:f0:b5:77:be:bf:d3:1a:6d:78:28:2a:2b:b4:56:
                    0c:33:0b:05:70:53:da:32:7f:ca:5b:0e:0a:35:86:
                    c8:e3:2c:b1:61:c5:6b:41:26:17:10:2c:3f:bf:26:
                    38:62:db:b4:60:77:50:96:11:7e:cd:00:f0:fe:6b:
                    95:20:74:7d:c6:7a:7a:92:63:26:d3:1e:f8:52:a0:
                    be:cf:e6:3f:86:d6:d5:c7:7f:f6:7b:e4:a8:f9:7f:
                    33:d9:d7:df:7e:31:0f:8c:41:14:df:d3:94:d9:31:
                    3c:7a:b5:a4:2f:67:73:ad:77:0e:3f:30:08:a5:24:
                    41:e4:51:00:67:15:18:77:cc:ea:8f:e1:58:eb:52:
                    23:18:91:5f:81:fe:5e:6f:57:27:6d:2f:18:ea:6c:
                    f1:73:13:9e:f1:9e:4f:49:83:9b:18:88:af:9a:a9:
                    cf:9b:b2:5e:41:f7:c7:66:02:b6:3d:c3:95:68:d1:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:50:FE:C1:42:C0:8A:01:6F:9D:FE:79:D2:43:28:80:18:D0:E5:2F
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:9f:a7:54:13:9a:fc:96:7e:c0:e4:30:18:b0:7f:93:22:
         f7:0e:b6:f3:c9:96:0e:5e:98:e1:ca:d8:1e:b7:ac:6c:4a:6d:
         27:75:9a:fb:14:fc:4e:8c:21:48:7c:fe:a5:3c:0d:9c:00:3d:
         17:19:4f:25:4a:6f:d9:ff:62:ad:24:d2:d3:25:3f:bb:cd:eb:
         94:ae:34:5c:30:42:a9:52:f6:81:c7:6d:00:67:4c:e2:58:e2:
         b2:d9:b9:12:d7:d8:c5:36:9c:17:30:ae:72:02:39:13:90:8f:
         46:11:65:23:58:f2:a5:05:ac:76:de:61:f2:1c:9b:18:da:3e:
         45:73:b7:4b:3b:a3:de:03:94:a2:85:6b:ad:50:77:d9:23:13:
         6b:c7:ba:f3:4b:ba:38:f2:c2:68:3c:43:39:f2:4e:83:41:ae:
         8c:a0:10:b2:5d:6d:33:f9:81:8a:cd:00:05:85:55:5e:1b:1c:
         f8:8a:c3:99:f1:99:ba:e5:2c:16:71:f6:44:d0:45:e9:e5:87:
         7a:73:17:e4:00:7a:bc:c8:d7:ab:8a:6b:9d:20:4e:23:be:24:
         4f:ca:2c:74:15:b9:35:26:c4:9c:cc:e9:d2:fd:3f:60:5a:4d:
         c0:ab:dc:e7:ef:99:7a:90:cd:62:ea:9e:64:db:d1:40:f0:00:
         90:1d:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:13 2026 by rpki-client