Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File:                     tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier:          3I6qz5Sw8KG5tfhxzuuqF4yZYZDVJtRDytJzWPvSTto=
Subject key identifier:   74:18:32:52:8E:AA:2E:AB:B3:88:68:6F:1C:95:90:C9:AB:23:2E:AC
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer:       /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial:       2A36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number:          2A1E
Signing time:             Wed 22 Jul 2026 15:39:12 +0000
Manifest this update:     Wed 22 Jul 2026 15:39:11 +0000
Manifest next update:     Wed 29 Jul 2026 15:39:11 +0000
Files and hashes:         1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: Qa3+RKzS3bWdcLD18ekX/5utme02tqliNuCZhw2IfEs=)
                          2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10806 (0x2a36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
        Validity
            Not Before: Jul 22 15:39:11 2026 GMT
            Not After : Jul 29 15:39:11 2026 GMT
        Subject: CN=6a60e420-61db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:2f:73:2d:2b:38:63:81:ce:53:1d:e4:35:
                    e7:2d:a0:13:45:cb:29:0e:6b:60:d0:dd:ca:5c:1e:
                    d4:d7:b9:af:08:f2:c4:c3:ad:8c:a7:78:eb:a8:ff:
                    0a:ce:0b:61:5d:04:20:18:34:18:45:58:90:96:f5:
                    13:93:78:7c:14:7a:b2:ce:db:58:ea:d9:3d:26:c6:
                    f5:8d:d3:0c:cf:26:ae:76:52:f4:6c:cd:04:30:cd:
                    49:b3:32:05:e4:c7:59:e4:0c:dc:d6:ae:01:45:b4:
                    94:5c:dd:78:2d:30:a5:c8:37:2b:90:50:ab:fc:3e:
                    5b:42:ab:9e:a7:10:98:5b:8f:35:ca:56:e5:f4:46:
                    71:ac:07:c9:14:15:8f:76:c0:e1:01:1c:3e:6d:81:
                    ae:7a:8e:f1:21:0f:2f:07:91:5a:d7:8f:01:29:fd:
                    10:2b:d7:40:34:a2:78:9c:c8:02:3a:11:49:a2:2d:
                    70:b9:9f:df:63:3a:98:72:e0:97:3b:17:b5:c9:2c:
                    6d:08:48:d1:22:0c:d3:41:89:64:4a:fc:89:f9:aa:
                    26:cc:f4:1e:f7:94:e4:a4:f8:83:fc:0d:08:ca:f2:
                    db:35:d6:f5:19:7a:dd:db:a8:15:e3:35:27:e4:d7:
                    95:93:a7:0d:ba:93:ea:28:85:ab:17:52:a3:eb:72:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:32:52:8E:AA:2E:AB:B3:88:68:6F:1C:95:90:C9:AB:23:2E:AC
            X509v3 Authority Key Identifier:
                keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:de:b8:3b:7b:14:03:c7:0a:4c:4f:8e:e3:8b:b9:db:a2:2f:
         b4:d8:4d:1a:2d:52:0d:94:a5:38:3f:a7:7e:9d:74:49:f5:e0:
         ba:f2:c5:3b:5f:e2:75:1b:c9:f6:63:78:28:ae:2d:cc:bc:0d:
         60:39:3f:5f:c5:51:24:cf:71:04:77:7f:d9:b6:09:8c:2a:30:
         56:f0:ca:f1:0c:69:72:e5:3e:42:3c:bf:38:2a:09:32:9b:59:
         3c:9e:9c:38:df:47:0d:a7:05:07:d3:d2:84:95:29:2d:d5:8f:
         41:33:e6:e5:e1:99:41:86:5b:67:50:23:c1:7e:1d:cf:a0:ac:
         5d:a1:a7:2a:df:2f:34:23:15:bb:25:a5:05:6c:eb:27:17:4f:
         3e:20:a0:07:57:31:af:90:3d:b0:d0:7e:08:d9:64:f9:00:42:
         98:1f:42:a8:83:4a:23:43:a5:6f:79:2c:82:da:37:c0:f5:dd:
         38:52:da:a6:6f:b3:d8:c1:43:00:a8:9e:c0:7f:85:90:f2:81:
         63:37:47:87:e7:87:91:40:42:02:d1:a5:8f:da:91:a0:88:83:
         e8:23:0e:3e:bb:c0:99:9f:e9:ef:b5:dc:7f:1f:83:29:5f:30:
         40:22:e4:84:60:15:0e:ae:fc:04:99:fe:bf:2f:1b:d2:8e:d0:
         05:14:b0:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD
NzA4QjRBQzUwHhcNMjYwNzIyMTUzOTExWhcNMjYwNzI5MTUzOTExWjAYMRYwFAYD
VQQDEw02YTYwZTQyMC02MWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArp8vcy0rOGOBzlMd5DXnLaATRcspDmtg0N3KXB7U17mvCPLEw62Mp3jrqP8K
zgthXQQgGDQYRViQlvUTk3h8FHqyzttY6tk9Jsb1jdMMzyaudlL0bM0EMM1JszIF
5MdZ5Azc1q4BRbSUXN14LTClyDcrkFCr/D5bQquepxCYW481ylbl9EZxrAfJFBWP
dsDhARw+bYGueo7xIQ8vB5Fa148BKf0QK9dANKJ4nMgCOhFJoi1wuZ/fYzqYcuCX
Oxe1ySxtCEjRIgzTQYlkSvyJ+aomzPQe95TkpPiD/A0IyvLbNdb1GXrd26gV4zUn
5NeVk6cNupPqKIWrF1Kj63K56wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQYMlKO
qi6rs4hobxyVkMmrIy6sMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4
QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ
Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdN64O3sUA8cKTE+O44u526IvtNhNGi1SDZSlOD+nfp10SfXguvLFO1/idRvJ
9mN4KK4tzLwNYDk/X8VRJM9xBHd/2bYJjCowVvDK8QxpcuU+Qjy/OCoJMptZPJ6c
ON9HDacFB9PShJUpLdWPQTPm5eGZQYZbZ1AjwX4dz6CsXaGnKt8vNCMVuyWlBWzr
JxdPPiCgB1cxr5A9sNB+CNlk+QBCmB9CqINKI0Olb3ksgto3wPXdOFLapm+z2MFD
AKiewH+FkPKBYzdHh+eHkUBCAtGlj9qRoIiD6CMOPrvAmZ/p77Xcfx+DKV8wQCLk
hGAVDq78BJn+vy8b0o7QBRSw1Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:12 2026 by rpki-client