Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File:                     TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier:          6f1yzAY3LHUPbWUrkVeTprgJdaXF+EKzvwaPEf9mFO4=
Subject key identifier:   C6:F7:61:74:EA:04:F6:C0:E6:D0:35:08:77:6F:8B:A6:D9:91:51:C7
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer:       /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial:       03E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number:          03DD
Signing time:             Thu 23 Jul 2026 01:26:01 +0000
Manifest this update:     Thu 23 Jul 2026 01:26:00 +0000
Manifest next update:     Thu 30 Jul 2026 01:26:00 +0000
Files and hashes:         1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: YCU08OIENMzXl0X2wkYUmNon9wRMpO9ziW5Rsh7rev4=)
                          2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: osHneI9FvoCZRKQxl7txl+jB8Ly+Es1NyoWP2eT8CMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
                          rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
        Validity
            Not Before: Jul 23 01:26:00 2026 GMT
            Not After : Jul 30 01:26:00 2026 GMT
        Subject: CN=6a616da9-afcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:c1:27:c4:ad:ad:76:46:ba:10:ea:68:72:
                    0e:cd:0d:bf:35:af:bb:19:75:39:80:f1:8a:47:0a:
                    65:4b:bd:8c:01:27:a3:80:f5:b8:bf:f5:7e:70:d1:
                    e9:04:1f:6e:51:7a:4b:7d:67:5a:6d:a7:97:47:83:
                    02:43:8d:a5:5d:d2:4b:39:e5:b4:22:52:41:ff:b8:
                    c8:3d:7e:19:46:2e:8d:c9:f8:f4:46:ee:fc:10:33:
                    41:55:c7:06:b7:7c:63:9d:ce:05:cf:61:b0:f8:e2:
                    3f:85:59:2f:9a:49:e2:5c:a3:38:8c:c6:3d:c1:f8:
                    52:4b:a6:d2:74:74:85:21:fb:39:52:8b:95:85:54:
                    75:c1:fb:9b:58:24:0d:7d:20:42:32:e1:d7:cc:64:
                    4a:12:f9:0b:05:93:5f:67:90:de:8e:1f:05:34:3d:
                    a2:2d:d5:71:fb:49:88:d0:22:95:ac:77:ad:86:14:
                    b7:2a:94:91:1c:68:fe:ea:fd:88:c9:da:ef:72:4d:
                    6e:84:f0:70:16:e5:19:b8:58:16:1d:03:01:4b:b8:
                    bc:75:41:7b:24:a6:6a:95:60:5b:29:4d:7c:97:16:
                    11:0b:0b:a2:b7:a1:91:43:25:0d:ba:c5:db:f9:5a:
                    47:78:1a:2e:15:53:3a:01:96:fb:5e:c3:ed:75:a6:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:61:74:EA:04:F6:C0:E6:D0:35:08:77:6F:8B:A6:D9:91:51:C7
            X509v3 Authority Key Identifier:
                keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:73:73:77:f7:de:e9:7a:7d:3e:32:2c:85:bd:0d:b1:60:
         03:e5:c7:7f:c6:8a:ae:d8:74:46:a0:e1:25:e4:c0:c3:b6:36:
         e2:40:3d:f2:39:e3:21:58:aa:90:8a:18:0a:53:a4:83:dc:5b:
         9d:b7:0e:7c:91:82:32:ac:2e:22:ac:b8:83:58:bd:92:f7:4e:
         91:bd:35:36:a4:e2:c5:fc:7b:5c:5e:d2:22:4d:3c:69:06:ca:
         43:97:c2:38:aa:18:48:2f:cb:6a:a1:1a:30:c2:c2:3b:dc:d2:
         bc:0c:0e:06:cd:5f:37:ff:8a:68:5a:25:39:af:ef:4f:57:c6:
         f9:2b:66:6f:68:02:12:a7:90:00:d6:ac:06:57:9e:e6:d5:3d:
         27:91:42:dd:8b:01:df:b8:e4:58:24:8d:76:7c:b4:24:c8:56:
         9f:d8:d8:f0:4d:33:b9:e7:1f:6a:3d:b9:6d:2c:22:af:62:31:
         ed:33:04:9b:bd:ec:0d:18:14:06:97:24:85:f8:43:51:50:14:
         7c:dd:fb:96:7d:e7:87:58:a9:95:b5:b1:fc:16:5e:04:7a:e0:
         46:4b:7b:37:31:b5:20:40:63:86:73:49:be:90:e0:ee:60:ad:
         96:94:48:bb:ee:8c:1d:6c:c3:9b:02:52:94:3d:77:ac:d4:9b:
         2a:0f:ec:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRERTIxMTAvBgNVBAUTKDREMjkyMDM2ODExNjA1RjhGMzg4OTgwMTUyMUIyNTcy
N0ExQ0Q3NjUwHhcNMjYwNzIzMDEyNjAwWhcNMjYwNzMwMDEyNjAwWjAYMRYwFAYD
VQQDEw02YTYxNmRhOS1hZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApx3BJ8StrXZGuhDqaHIOzQ2/Na+7GXU5gPGKRwplS72MASejgPW4v/V+cNHp
BB9uUXpLfWdabaeXR4MCQ42lXdJLOeW0IlJB/7jIPX4ZRi6Nyfj0Ru78EDNBVccG
t3xjnc4Fz2Gw+OI/hVkvmkniXKM4jMY9wfhSS6bSdHSFIfs5UouVhVR1wfubWCQN
fSBCMuHXzGRKEvkLBZNfZ5Dejh8FND2iLdVx+0mI0CKVrHethhS3KpSRHGj+6v2I
ydrvck1uhPBwFuUZuFgWHQMBS7i8dUF7JKZqlWBbKU18lxYRCwuit6GRQyUNusXb
+VpHeBouFVM6AZb7XsPtdaYYmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMb3YXTq
BPbA5tA1CHdvi6bZkVHHMB8GA1UdIwQYMBaAFE0pIDaBFgX484iYAVIbJXJ6HNdl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NERFMi8xQzU0MjJEMEQ1
REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0JmanppSmdCVWhzbGNub2Mx
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RTa2dOb0VXQmZqemlKZ0JVaHNsY25vYzEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NERFMi8xQzU0MjJEMEQ1REQxMUVDQTE0Q0M2MjNDNEY5QUUwMi9UU2tnTm9FV0Jm
anppSmdCVWhzbGNub2MxMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKmpzc3f33ul6fT4yLIW9DbFgA+XHf8aKrth0RqDhJeTAw7Y24kA98jnjIViq
kIoYClOkg9xbnbcOfJGCMqwuIqy4g1i9kvdOkb01NqTixfx7XF7SIk08aQbKQ5fC
OKoYSC/LaqEaMMLCO9zSvAwOBs1fN/+KaFolOa/vT1fG+Stmb2gCEqeQANasBlee
5tU9J5FC3YsB37jkWCSNdny0JMhWn9jY8E0zuecfaj25bSwir2Ix7TMEm73sDRgU
BpckhfhDUVAUfN37ln3nh1iplbWx/BZeBHrgRkt7NzG1IEBjhnNJvpDg7mCtlpRI
u+6MHWzDmwJSlD13rNSbKg/s6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:27 2026 by rpki-client