Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File:                     TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier:          6eJY87ZyAxMOhQEc9tcf9/Tp0TRclJG0ybNb0pDB8RM=
Subject key identifier:   D5:D3:72:8C:C3:34:4B:0A:68:19:32:40:15:03:39:54:85:48:FD:ED
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number:          3642
Signing time:             Wed 22 Jul 2026 14:30:22 +0000
Manifest this update:     Wed 22 Jul 2026 14:30:22 +0000
Manifest next update:     Wed 29 Jul 2026 14:30:22 +0000
Files and hashes:         1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: nvRXgiVJdTmU0be6ujHqIUnZiB07dXVK1/d+muHFO24=)
                          2: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
                          3: 9ED84B886EC111F19289006667A30FBC.roa (hash: hd1ZU6/Fnutera66ZXCD8DJsTN9KMedFIbuKf7ICHXM=)
                          4: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
                          5: 031323B06EBE11F196174E6566A30FBC.roa (hash: NXB/rg2055CKSN9ZF6BUpnYzbi4UYOhQlvoMPnUpbg0=)
                          6: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
                          7: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
                          8: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
                          9: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
                          10: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
                          11: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
                          12: 041DFBF46EBE11F196174E6566A30FBC.roa (hash: UdubWRqV2Ckel/l8C/+VnynljQ5Fshh1WNKa2k+xRl8=)
                          13: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: l7LBi/Y1FpDZmmeBXMO7I7E/b5ECT7acllocUhgV2ZA=)
                          14: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
                          15: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
                          16: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14178 (0x3762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Jul 22 14:30:22 2026 GMT
            Not After : Jul 29 14:30:22 2026 GMT
        Subject: CN=6a60d3fe-edba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:67:0e:dc:c0:13:8c:da:53:48:fc:11:ad:
                    be:e2:a8:7e:fb:62:31:6c:55:6f:74:ae:7c:31:67:
                    40:0e:3a:b2:4c:c6:c5:14:87:55:20:7c:c5:45:5e:
                    cd:4c:b3:5c:f2:69:92:9c:d7:b9:c6:31:4a:5c:bf:
                    bd:1c:a6:e0:09:cb:6b:a3:07:66:ff:f8:5c:83:b6:
                    a1:23:8f:19:91:38:7b:0a:1b:78:89:38:76:7c:ba:
                    b8:ab:d8:4c:2d:a6:fe:6b:80:38:9b:f7:c6:d7:d0:
                    ff:79:35:05:c0:db:de:5b:53:e3:83:ea:84:a6:16:
                    e2:f3:18:a6:84:f3:63:62:a3:9c:d2:6e:1a:58:4f:
                    ee:5e:7d:26:79:5f:c8:44:2f:c3:bd:89:bc:88:8b:
                    77:35:d6:ca:4c:41:0d:25:3a:0a:38:07:8f:ad:3c:
                    47:23:d8:14:35:24:12:d3:06:92:f8:83:5a:d8:b2:
                    ef:61:fd:93:03:2d:f9:41:ec:39:a9:6a:be:25:f8:
                    2d:14:7e:72:7b:0f:c6:d1:a6:cf:96:dc:e1:e1:d8:
                    42:63:ce:f8:e1:80:e0:b0:be:e0:31:05:ff:24:5c:
                    b0:42:cb:ed:69:a3:18:bb:00:34:18:ed:a5:d8:fe:
                    fe:cd:6b:72:2a:54:c8:a9:2c:55:49:02:0c:60:ac:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:72:8C:C3:34:4B:0A:68:19:32:40:15:03:39:54:85:48:FD:ED
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:5d:60:d5:3f:bd:79:a4:db:3a:23:55:b2:38:50:cb:90:
         f5:51:6a:3e:a3:f2:a5:80:8f:6f:2f:ca:68:87:38:a8:7b:0b:
         9a:c4:65:db:11:bc:5d:2e:27:c8:d5:a0:28:36:63:24:07:c4:
         40:36:0a:93:6d:71:7e:20:fb:de:60:5a:59:95:59:71:b0:23:
         33:44:eb:41:56:ce:5d:86:86:e6:d9:fd:44:5e:12:62:da:2d:
         40:8d:01:f1:da:99:31:e7:c1:58:4b:36:9d:7e:0a:74:b7:56:
         57:6e:d7:7e:24:a2:33:ee:f6:16:83:3b:b2:fa:14:da:70:3e:
         8a:e0:aa:64:4f:51:c2:d5:71:30:21:cd:2b:1f:ef:13:06:38:
         3a:84:88:c8:3f:44:38:30:c9:b5:f6:c8:89:b5:fc:72:d8:dc:
         f6:de:95:5f:cc:64:6f:e6:ad:ec:95:f0:ec:c1:b3:c1:0f:8e:
         a2:bf:80:b6:34:43:71:64:54:34:c1:e7:b1:69:09:7a:ba:f1:
         55:31:a2:14:32:a7:c4:5c:05:c1:41:0d:aa:cf:8f:69:53:c4:
         1b:7b:47:77:29:92:06:a6:59:8e:3a:90:a4:8d:5a:8e:02:30:
         f9:dd:2a:d0:ee:9d:ac:9e:76:85:92:ac:2d:22:ac:9c:d4:c4:
         45:e4:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:36 2026 by rpki-client