Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File:                     twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier:          sNDMYh7wO72qysnBO0mQg0n9H7OCizgBo4m5u3tKvwA=
Subject key identifier:   47:80:B5:B5:D5:7D:7F:9B:11:05:67:30:C9:1C:B1:AE:59:22:2A:7E
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       0AE7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number:          0AAE
Signing time:             Wed 22 Jul 2026 19:54:36 +0000
Manifest this update:     Wed 22 Jul 2026 19:54:36 +0000
Manifest next update:     Wed 29 Jul 2026 19:54:36 +0000
Files and hashes:         1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: 70pbgwYVA2YeXU7U4GsvD8RiEApg6TyoW/BQ21x5jBQ=)
                          2: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
                          3: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
                          4: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
                          5: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 2SRueJuk/oI2Z3RrQ/efGcxSLtCYpUo5HpcBPACZQGM=)
                          6: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791 (0xae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Jul 22 19:54:36 2026 GMT
            Not After : Jul 29 19:54:36 2026 GMT
        Subject: CN=6a611ffc-4f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:6e:11:01:be:58:87:5b:37:75:75:bc:1c:
                    f9:0d:3b:b9:c7:be:58:c5:f9:cd:6b:e7:dc:26:58:
                    92:13:33:fe:42:e4:02:c2:40:f1:9f:0a:68:28:5d:
                    1d:7b:e7:db:a2:a9:bc:be:fe:f6:ab:c0:2d:75:b8:
                    33:fc:3c:9c:da:cf:4a:24:e6:74:f2:13:e5:99:4c:
                    96:21:3e:20:4d:ee:78:ab:95:e0:79:67:ee:ed:ff:
                    20:d8:2a:45:05:0b:33:e1:68:ef:59:32:57:a6:11:
                    7a:8f:22:a1:73:5a:b6:2e:6d:e6:77:14:16:cb:8d:
                    ce:81:12:9d:f1:d3:8f:3f:de:99:fa:b8:ad:e1:a9:
                    c6:50:57:5d:b7:a6:59:14:b2:c0:46:28:2b:a3:38:
                    26:f1:5a:ae:fb:42:00:c8:b0:dc:58:f2:cb:86:7f:
                    3f:c4:ce:76:a2:78:df:a1:76:1c:0d:43:e8:62:2e:
                    05:76:9a:31:4a:d6:82:d4:6b:79:e7:04:b2:70:09:
                    e5:0f:7b:cf:ad:76:4c:29:11:19:bf:56:97:53:34:
                    95:85:71:43:6e:69:64:71:a9:bc:09:d5:e7:00:d6:
                    99:90:a1:82:0a:c7:a4:06:5c:c5:35:b4:35:15:25:
                    92:ce:54:3f:21:bd:3d:86:e9:81:e4:18:79:48:c0:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:B5:B5:D5:7D:7F:9B:11:05:67:30:C9:1C:B1:AE:59:22:2A:7E
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6a:50:a3:10:e0:f1:f2:15:21:b1:e0:4b:9a:37:e1:f3:24:
         db:a8:7f:5a:68:67:72:c6:81:a4:03:f0:7d:7e:49:92:e6:f0:
         1f:39:cc:78:74:f1:ab:01:50:0d:83:8a:0a:ba:fb:2d:b7:47:
         ae:3c:35:ec:db:fc:00:c2:86:3a:a4:16:22:c8:54:43:5d:39:
         5b:3d:50:e6:9a:3d:7c:c5:4c:30:90:e8:d6:1a:56:41:79:d5:
         a6:4c:51:30:be:de:55:a5:69:2e:6e:56:d7:9f:9a:de:0f:59:
         ae:2f:65:fd:8b:bc:b6:78:6c:7e:0e:3d:1d:4e:65:3b:08:09:
         6f:57:8d:c6:5e:41:5a:9a:44:2a:f9:3f:dc:6a:91:0c:91:65:
         4d:48:fd:97:b2:94:50:9f:ba:00:ed:f2:37:32:e9:18:4a:03:
         47:0c:fd:d0:be:1e:b4:2d:49:dd:0d:da:38:db:b9:29:a2:24:
         a5:02:09:1a:c9:13:db:a7:0c:aa:e3:a6:69:b0:0d:99:40:aa:
         ec:c8:1c:49:f9:0c:9f:53:bc:0e:57:72:18:6f:1e:5d:8f:8b:
         0a:af:2d:6e:d3:26:27:67:ba:27:4f:c2:7b:d3:64:35:a8:cc:
         bf:4f:31:10:38:41:cd:45:4a:85:e8:42:c2:a9:e9:ef:5e:40:
         40:26:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:06 2026 by rpki-client