Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File:                     Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier:          dsPjkk4d5hPUQGupTsQIyhL/S4/+uedpEDKvt4BRArU=
Subject key identifier:   AE:06:6E:FE:0B:62:3E:91:9D:E8:C6:7C:B6:87:CD:65:4F:BE:F8:CD
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer:       /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial:       19E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number:          19D8
Signing time:             Wed 22 Jul 2026 16:28:15 +0000
Manifest this update:     Wed 22 Jul 2026 16:28:14 +0000
Manifest next update:     Wed 29 Jul 2026 16:28:14 +0000
Files and hashes:         1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: d7XIvqYXRWba0aDrYRHTKWmTi7PaoxFZQyT2G81x7Bg=)
                          2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: tuFhPkM88OAOhbJHPJWo76XV19a6w7QlA1gqkoBuKS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
                          rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6632 (0x19e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
        Validity
            Not Before: Jul 22 16:28:14 2026 GMT
            Not After : Jul 29 16:28:14 2026 GMT
        Subject: CN=6a60ef9f-97f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:0a:05:c5:dd:6a:d7:5b:43:90:15:ab:70:
                    16:57:0a:ff:52:bc:65:c2:a1:86:7a:39:c5:0a:3f:
                    d8:bd:b5:bf:d9:49:ff:12:78:b4:2a:16:f9:9f:57:
                    bd:42:47:fe:d2:89:48:a2:49:fc:61:4f:37:51:b9:
                    a0:5b:5d:a9:23:25:3f:fa:d1:2e:99:8a:e3:06:e2:
                    ba:9a:68:6c:5b:f6:09:58:74:af:4d:3d:c9:4b:01:
                    8e:00:18:cc:80:52:d8:f0:62:e4:65:d9:86:17:0a:
                    ff:b6:c9:aa:82:c6:fa:9a:5c:dc:15:3e:0c:3b:45:
                    3c:f5:58:b1:c4:62:cf:56:24:cd:3e:c8:9f:2b:07:
                    83:94:a1:9c:44:fe:2a:77:2a:d1:e6:9b:53:95:c1:
                    af:e7:f8:3c:82:ec:ac:46:7d:b8:f7:75:26:43:49:
                    1d:09:2c:2b:d7:3b:bd:d3:1e:1e:4f:b7:a6:f8:40:
                    fc:e6:cd:62:dd:a7:c8:ad:4f:74:6e:0a:72:ff:7c:
                    dd:e5:56:62:28:e0:8f:75:b9:9d:c4:c4:6a:52:6d:
                    e0:20:3f:cc:33:46:c1:10:e9:9d:15:ec:b6:e1:f9:
                    15:7a:27:73:2d:60:d8:d5:3b:c0:a2:0a:01:0d:c8:
                    3e:f7:05:f1:03:fa:ed:70:de:f6:5d:5e:7b:61:cf:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:06:6E:FE:0B:62:3E:91:9D:E8:C6:7C:B6:87:CD:65:4F:BE:F8:CD
            X509v3 Authority Key Identifier:
                keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:d2:6a:f8:56:13:23:65:eb:8c:6f:d5:20:65:91:eb:12:
         fb:d7:87:c8:f3:de:ce:1d:29:5b:41:30:27:65:e1:4d:e7:4e:
         05:af:fd:24:48:ef:ff:01:86:90:e9:85:30:58:ae:3a:6e:6c:
         72:a4:03:b5:f9:ac:b4:09:20:28:a0:b5:4a:81:cf:63:99:33:
         8a:8e:56:13:f7:34:f2:34:44:c4:27:80:bb:71:a1:e3:5a:fa:
         6e:25:ae:59:b6:30:4e:d4:e1:67:d8:b4:5f:d8:aa:57:60:63:
         4f:6f:41:94:fd:1c:02:66:b4:2b:4e:82:fb:d3:eb:87:c5:20:
         c0:cc:d7:ab:a3:84:6e:9e:64:59:0f:45:53:11:c7:5b:29:40:
         1e:24:c8:69:f2:d2:90:70:45:eb:b7:ce:29:2b:6c:46:c6:db:
         fd:37:e8:a1:86:fe:78:40:73:2b:84:3e:73:f9:a4:f4:e5:f7:
         92:a8:07:ae:a9:83:85:61:95:48:b9:74:f3:12:53:11:2d:a5:
         c4:ad:d7:8f:b4:9e:7c:8f:4d:a3:bc:6b:7c:e0:6b:cc:5b:e7:
         6d:2c:e7:03:c4:6f:91:85:60:96:ad:2c:94:1d:20:39:3d:7d:
         63:36:88:fd:07:8d:e7:54:7e:7a:84:59:4e:11:b8:c3:ed:3a:
         d6:8e:43:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDOEExMTAvBgNVBAUTKDRFMkIyMEQ5NTM3MzJCNzVFRUQxMkYxMjk5MjFBMEIx
QjVFQjE1OEUwHhcNMjYwNzIyMTYyODE0WhcNMjYwNzI5MTYyODE0WjAYMRYwFAYD
VQQDEw02YTYwZWY5Zi05N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz6YKBcXdatdbQ5AVq3AWVwr/UrxlwqGGejnFCj/YvbW/2Un/Eni0Khb5n1e9
Qkf+0olIokn8YU83UbmgW12pIyU/+tEumYrjBuK6mmhsW/YJWHSvTT3JSwGOABjM
gFLY8GLkZdmGFwr/tsmqgsb6mlzcFT4MO0U89VixxGLPViTNPsifKweDlKGcRP4q
dyrR5ptTlcGv5/g8guysRn2493UmQ0kdCSwr1zu90x4eT7em+ED85s1i3afIrU90
bgpy/3zd5VZiKOCPdbmdxMRqUm3gID/MM0bBEOmdFey24fkVeidzLWDY1TvAogoB
Dcg+9wXxA/rtcN72XV57Yc8tAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK4Gbv4L
Yj6RnejGfLaHzWVPvvjNMB8GA1UdIwQYMBaAFE4rINlTcyt17tEvEpkhoLG16xWO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M4QS9FN0ZGQzVGNDg2
RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOekszWHUwUzhTbVNHZ3NiWHJG
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Rpc2cyVk56SzNYdTBTOFNtU0dnc2JYckZZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0M4QS9FN0ZGQzVGNDg2RjcxMUU3ODYzNEVDN0VDNEY5QUUwMi9UaXNnMlZOeksz
WHUwUzhTbVNHZ3NiWHJGWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPafSavhWEyNl64xv1SBlkesS+9eHyPPezh0pW0EwJ2XhTedOBa/9JEjv/wGG
kOmFMFiuOm5scqQDtfmstAkgKKC1SoHPY5kzio5WE/c08jRExCeAu3Gh41r6biWu
WbYwTtThZ9i0X9iqV2BjT29BlP0cAma0K06C+9Prh8UgwMzXq6OEbp5kWQ9FUxHH
WylAHiTIafLSkHBF67fOKStsRsbb/TfooYb+eEBzK4Q+c/mk9OX3kqgHrqmDhWGV
SLl08xJTES2lxK3Xj7SefI9No7xrfOBrzFvnbSznA8RvkYVglq0slB0gOT19YzaI
/QeN51R+eoRZThG4w+061o5D7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:32 2026 by rpki-client