Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
File:                     tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json)
Hash identifier:          1dbssEftx7LyAd0JMZh9xNjEozHdqeQt0TCdWXVvjMk=
Subject key identifier:   06:35:37:C2:E7:2A:A9:99:EC:F7:91:1E:C0:A3:70:F9:91:1B:A6:BD
Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F
Certificate issuer:       /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
Certificate serial:       0AF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
Manifest number:          0AE8
Signing time:             Wed 22 Jul 2026 19:45:13 +0000
Manifest this update:     Wed 22 Jul 2026 19:45:12 +0000
Manifest next update:     Wed 29 Jul 2026 19:45:12 +0000
Files and hashes:         1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: 3q8O39qJceqYFkvTLRPkzKDpT2lZoS+W5CW6CY1wUrg=)
                          2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: he3UjPhAzljyPyijMVHrJVOO3ZJsIkaVva/wVZG1Ao0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl
                          rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2803 (0xaf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F
        Validity
            Not Before: Jul 22 19:45:12 2026 GMT
            Not After : Jul 29 19:45:12 2026 GMT
        Subject: CN=6a611dc9-48f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:92:fd:70:bd:1c:d1:0c:ee:46:3f:f2:13:a7:
                    c0:5e:2b:9e:3e:2b:1d:fe:b0:06:a0:19:1f:99:39:
                    41:12:62:e7:4c:89:f0:50:19:b5:47:09:22:6f:80:
                    33:82:23:63:7d:ef:d1:b9:d5:c0:56:f8:be:04:57:
                    90:26:a0:59:69:ac:d5:42:ac:67:96:64:16:cf:7e:
                    16:6c:7a:7a:f8:6d:08:d5:26:ca:ff:4f:8b:95:52:
                    4d:86:8c:9a:69:21:9d:16:cc:df:21:80:ed:46:7c:
                    b9:f0:da:eb:f7:f6:6d:11:e4:28:b8:2e:a4:7a:6a:
                    67:55:cd:0e:06:c0:dc:10:fb:ea:62:27:9f:c8:ac:
                    1d:fd:78:8a:80:ec:fe:86:a0:91:e7:f2:d7:34:fa:
                    77:44:b4:65:5f:42:fa:67:ba:4d:63:3c:99:aa:1e:
                    18:f7:3e:0c:34:93:3d:37:94:5c:14:a8:23:64:6a:
                    72:e5:64:a5:86:aa:65:8f:22:ec:03:13:42:1b:60:
                    dc:a1:54:76:25:4e:79:58:9a:82:4c:6d:73:9e:a6:
                    2d:6c:4c:c5:2b:c0:40:a4:40:ef:e1:36:f9:81:bd:
                    1d:ef:b1:12:48:d5:ed:b0:ba:5c:d2:da:d5:e1:f5:
                    09:63:37:e5:aa:a8:89:0f:63:8f:9e:1d:92:dd:f9:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:35:37:C2:E7:2A:A9:99:EC:F7:91:1E:C0:A3:70:F9:91:1B:A6:BD
            X509v3 Authority Key Identifier:
                keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f3:42:da:3b:8a:aa:37:4e:83:24:19:80:46:2d:66:58:46:
         be:a3:09:c9:07:2f:df:b9:a5:0d:36:77:9d:e9:8a:19:28:d4:
         1d:9e:6e:19:46:15:9e:d9:74:53:c3:3b:a7:8d:b8:7e:4a:dd:
         71:d7:a7:42:76:17:b6:88:4a:e5:a3:bb:cc:78:49:8f:32:00:
         55:44:ee:5d:dc:be:aa:1d:09:58:1a:7b:1f:f9:8f:57:16:f8:
         d6:da:cc:12:d4:e3:26:8d:c7:2d:5f:24:e2:d7:ca:7b:d2:b7:
         3d:15:b7:5c:06:12:78:2e:15:be:64:c5:1f:da:80:13:7a:f4:
         cc:61:75:dd:ed:2d:c9:3a:67:02:5e:12:19:20:c8:49:8e:bd:
         dd:c1:45:76:e7:e1:44:ed:39:e4:3b:04:d2:58:57:2a:5a:d7:
         a3:0f:36:9e:42:5e:4b:69:c9:62:fc:8c:2f:c2:ee:70:14:7b:
         66:7d:9b:11:34:46:0a:e3:82:e0:92:16:3c:23:ba:a2:84:4d:
         16:17:d5:25:09:58:a1:08:e4:89:54:1a:dd:71:42:8f:bb:6a:
         c1:46:28:ea:cb:76:6f:04:af:1b:7f:3e:35:5c:d5:ea:e0:a3:
         0f:13:51:81:ad:67:1c:cc:31:21:91:b1:06:af:dd:54:40:a5:
         b4:c4:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:49 2026 by rpki-client