Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
File:                     TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json)
Hash identifier:          j9RuOyZ6Wisst/FTk7v9hXmFlfkCm3K3SP8G+2R+0Ys=
Subject key identifier:   31:2D:5C:F1:96:C6:3B:97:E1:7B:B5:B2:97:87:4F:AC:22:02:41:79
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Certificate issuer:       /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial:       10C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
Manifest number:          10B1
Signing time:             Wed 22 Jul 2026 17:29:34 +0000
Manifest this update:     Wed 22 Jul 2026 17:29:33 +0000
Manifest next update:     Wed 29 Jul 2026 17:29:33 +0000
Files and hashes:         1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: c3bJUEffv0a/xVNaEahn2TDSDxvJ2hXyOsuTujtgpjw=)
                          2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: U8acwf2BkkT2MWqZuHqyhaYsOZaXmV1y4mf2DIlSMAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
                          rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4288 (0x10c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
        Validity
            Not Before: Jul 22 17:29:33 2026 GMT
            Not After : Jul 29 17:29:33 2026 GMT
        Subject: CN=6a60fdfe-1d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:4c:f8:db:60:42:31:6a:0e:f2:36:40:74:
                    42:9d:1f:be:9d:77:2e:3c:0e:7a:67:4a:0c:27:19:
                    53:1b:b6:db:57:16:4b:6a:91:f0:c1:7f:41:e0:a4:
                    41:a7:91:fa:94:e5:f9:4f:42:9e:9b:35:58:0c:f8:
                    d4:83:3d:d9:e8:0b:be:15:e4:e1:12:48:f0:5b:27:
                    d0:e3:e9:86:ed:70:73:c4:2c:8c:7c:b7:03:9d:8b:
                    80:45:09:65:cc:87:60:a4:38:a3:94:0d:c8:cb:70:
                    a8:b6:1d:f4:2f:38:f3:9c:de:4e:4a:04:b8:c5:a9:
                    f7:19:6d:26:1d:c6:ad:65:09:1c:65:f4:35:d9:24:
                    fd:8f:81:ed:55:95:62:47:02:3c:f7:57:e2:be:29:
                    bc:18:c6:5b:05:ff:3b:4c:fc:9f:cf:52:f4:90:b4:
                    3a:31:cd:23:1c:8c:5a:3e:d6:35:e4:77:e7:aa:e9:
                    47:5a:cc:b2:b2:0f:96:ea:4d:10:70:09:65:03:12:
                    e4:36:f9:03:3d:cd:40:ca:31:3a:6f:56:fe:e6:3b:
                    90:50:04:b3:79:65:f9:c2:b0:4a:ab:a1:6f:57:70:
                    d6:5c:ee:73:71:ea:5a:cc:12:f4:a6:5d:88:c0:89:
                    d0:16:4f:49:76:a7:1a:1a:f0:b9:82:91:49:a5:79:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:5C:F1:96:C6:3B:97:E1:7B:B5:B2:97:87:4F:AC:22:02:41:79
            X509v3 Authority Key Identifier:
                keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a3:40:e6:f3:30:71:76:77:f5:17:e8:df:07:54:09:de:3e:
         fa:b1:19:5b:52:8d:b6:8a:9d:af:17:3e:d4:8b:74:95:b0:53:
         af:f7:b6:bf:5e:cb:7d:04:2a:8a:01:52:ec:cf:63:27:a0:d8:
         c1:aa:49:d4:a4:af:c4:58:d7:a6:4b:57:6a:42:5d:d3:d1:c5:
         a3:4f:b4:7c:bb:84:74:a8:43:1e:57:a2:21:66:c9:d8:30:ab:
         c4:3a:c2:8c:44:ca:ed:b0:fe:01:30:c7:50:f6:5d:54:fa:92:
         52:c2:1d:3f:e5:eb:f2:db:59:77:d0:0a:a1:45:9c:eb:71:32:
         18:7a:88:1d:8c:e8:e8:ce:d8:25:40:3a:72:bf:87:cf:25:e1:
         25:72:a0:2f:9d:50:5d:1a:18:92:15:cc:24:ee:8a:dc:27:4f:
         da:04:03:2d:f0:45:63:2b:83:77:b3:8f:cd:b4:05:f1:17:7b:
         78:9e:99:f4:4c:c4:2e:39:08:e1:cf:26:b5:ce:e5:cc:2c:b7:
         a2:be:4e:fd:12:8a:9d:2a:2a:12:07:46:1f:e9:49:e5:b5:61:
         0e:e8:c5:11:a9:3e:3f:a6:4b:e0:60:8b:7c:60:41:6c:11:fb:
         c7:20:f0:d0:4e:a3:96:38:99:02:76:d5:b1:c8:b1:6c:de:7b:
         e4:8a:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:21 2026 by rpki-client