Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File:                     THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier:          axb+ukNW2r5X2wutkbUjzf3e3zXnrSqwe2stqcgUbTI=
Subject key identifier:   16:41:FC:1F:3F:86:51:4F:5F:40:2F:BF:74:15:D0:47:DA:CB:B4:41
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer:       /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number:          A2
Signing time:             Thu 23 Jul 2026 09:06:23 +0000
Manifest this update:     Thu 23 Jul 2026 09:06:22 +0000
Manifest next update:     Thu 30 Jul 2026 09:06:22 +0000
Files and hashes:         1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: HgCM8fPPPfX/+tTzskeyljWuZd+0QOp4We7dfM+4mPk=)
                          2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
                          rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
        Validity
            Not Before: Jul 23 09:06:22 2026 GMT
            Not After : Jul 30 09:06:22 2026 GMT
        Subject: CN=6a61d98e-d333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:9d:a9:fe:1e:a9:2c:65:cb:0d:c8:b3:fd:
                    d1:4d:23:13:c1:8b:46:66:07:90:9d:68:70:a3:35:
                    ac:e3:dc:4e:46:df:84:e4:e0:e7:26:31:bc:81:60:
                    29:28:67:b4:03:fc:3d:38:ff:8b:55:be:90:72:d0:
                    05:cf:56:b7:06:e6:5e:02:ff:c4:ca:a6:03:58:a9:
                    4f:46:30:e1:da:75:0b:84:6c:63:52:96:53:8c:7d:
                    ce:1c:c6:2c:ef:7b:b6:01:9d:bd:01:6c:01:2a:f4:
                    e3:91:cd:15:08:7f:49:83:9d:1c:21:77:66:6d:14:
                    9b:7c:62:8c:aa:1b:42:fa:5a:61:5c:e5:27:c3:ce:
                    bf:b9:c8:dc:f2:76:ce:f6:b2:39:60:f5:56:8a:ef:
                    f7:4a:c8:1c:5b:ec:ab:38:84:ed:cf:b6:6a:0e:06:
                    fd:26:72:80:c0:9e:70:f6:1e:6b:66:bb:06:c4:ff:
                    25:4b:7b:16:70:ad:1a:28:7b:98:01:fc:5d:a5:44:
                    18:8c:53:6d:b8:09:7c:c0:2b:c8:d6:c8:94:9e:59:
                    7d:01:f8:6b:34:24:66:05:76:ad:fb:5d:8f:45:9d:
                    df:7b:67:b8:7e:60:a9:ca:90:ba:7d:df:91:67:56:
                    eb:25:b4:fb:d0:45:1e:67:99:c0:08:eb:cb:23:20:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:41:FC:1F:3F:86:51:4F:5F:40:2F:BF:74:15:D0:47:DA:CB:B4:41
            X509v3 Authority Key Identifier:
                keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:3e:e5:5d:6e:17:4b:f7:f0:44:df:49:76:07:2a:5e:ad:
         6a:d8:54:45:4f:2c:05:32:36:34:34:aa:a7:19:bb:05:b5:70:
         c2:47:ec:bd:14:79:30:21:ab:0e:30:80:41:96:aa:01:9b:cb:
         2c:e9:6b:f2:97:54:af:e8:be:0b:5a:f7:0d:4b:64:9f:dc:3f:
         7c:f1:d0:9b:cb:e7:f9:c2:aa:8f:b3:e0:6f:9b:23:b1:5b:4f:
         36:91:d9:6f:cd:ab:dc:18:91:86:7e:a5:7c:08:c5:59:37:d0:
         7f:e1:78:cc:dd:c3:3b:01:62:0a:14:8f:8a:52:f0:8e:2e:c6:
         e0:60:9f:74:1a:5a:97:5f:4b:22:ab:e3:7d:46:26:a3:e0:1a:
         1b:9b:50:04:af:da:2e:46:81:5a:cb:dd:58:2e:34:9b:87:b9:
         02:09:bb:9a:c5:3c:0d:78:64:d8:f0:7b:a8:74:c9:0e:6d:32:
         65:4b:94:51:cd:1b:bd:14:63:0b:f8:7e:fa:81:db:cf:00:d5:
         1d:15:0b:32:6c:24:ba:27:46:62:49:61:58:ea:34:95:6e:4a:
         a7:a0:ae:f2:e7:76:88:41:91:20:15:1a:d1:fc:e7:3d:5b:43:
         54:c4:e6:61:ef:01:c6:a0:ed:bc:92:99:e3:e4:28:af:e4:3f:
         81:0c:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:26 2026 by rpki-client