Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
File:                     TyFhsA_Cs23gqCRPCvKBQnkChg4.mft (raw, json)
Hash identifier:          U300cTXrykL/YRG2gn3lkl3pfLRFDwWUcLAIMUfU41E=
Subject key identifier:   E3:C8:80:DF:D8:D8:2E:66:A1:C8:61:F4:4D:F1:F5:97:BC:A0:45:DA
Authority key identifier: 4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E
Certificate issuer:       /CN=A91C19F7/serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
Certificate serial:       0A98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
Manifest number:          0A90
Signing time:             Wed 22 Jul 2026 19:58:42 +0000
Manifest this update:     Wed 22 Jul 2026 19:58:42 +0000
Manifest next update:     Wed 29 Jul 2026 19:58:42 +0000
Files and hashes:         1: TyFhsA_Cs23gqCRPCvKBQnkChg4.crl (hash: 9cndqw++6bZvAGPQWSsxkSDcnl3z4dhK9sqRJbZEGDA=)
                          2: C09BAC8E860011EABD37250EC4F9AE02.roa (hash: 6IXTKp13HuxMWhW3hn1g3ZSbEaBP+PUeVbQIJFfugEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl
                          rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2712 (0xa98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C19F7, serialNumber=4F2161B00FC2B36DE0A8244F0AF281427902860E
        Validity
            Not Before: Jul 22 19:58:42 2026 GMT
            Not After : Jul 29 19:58:42 2026 GMT
        Subject: CN=6a6120f2-78cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:85:79:0b:0c:09:63:37:68:1a:4f:ca:22:
                    7d:5f:5f:40:3d:c5:81:4e:25:b8:b1:10:f7:23:5e:
                    fc:f9:fc:95:ce:eb:74:0d:c0:19:29:79:ae:a6:b1:
                    b9:bd:44:39:18:bc:f5:4d:27:c6:16:c9:cc:db:95:
                    7c:10:95:03:29:c8:71:9a:cc:b4:46:dd:ff:82:f1:
                    c4:6a:6c:3a:a5:c4:3b:f5:cb:3d:7a:57:59:5f:04:
                    20:b2:c4:a4:ba:e1:86:fe:0d:04:05:03:15:37:69:
                    6e:af:75:0f:d7:a3:0a:fc:1b:00:52:65:1d:1b:bf:
                    7b:3e:84:72:87:6e:92:8d:4b:8d:1b:2b:4c:a6:7f:
                    0e:05:e2:26:98:bc:f0:5b:3c:80:6c:0a:c2:f3:4c:
                    a4:b6:9d:58:94:42:a9:6c:90:98:6e:8f:cb:5f:49:
                    6a:2d:05:02:70:a7:d4:98:c4:d9:f7:77:0a:55:56:
                    2a:e2:0d:0d:06:a0:35:89:c4:33:ea:3f:4e:fc:d0:
                    82:bc:39:3e:bd:2c:50:26:96:20:e7:6a:a2:ba:7e:
                    14:5c:c0:39:7a:21:5b:37:ff:a3:39:c3:47:57:63:
                    44:ec:9f:72:19:38:3b:81:38:c6:dc:21:99:b0:d5:
                    f7:1d:0d:26:c4:47:50:5f:4e:4a:9d:41:1a:84:42:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:80:DF:D8:D8:2E:66:A1:C8:61:F4:4D:F1:F5:97:BC:A0:45:DA
            X509v3 Authority Key Identifier:
                keyid:4F:21:61:B0:0F:C2:B3:6D:E0:A8:24:4F:0A:F2:81:42:79:02:86:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TyFhsA_Cs23gqCRPCvKBQnkChg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C19F7/61D9F5B285FF11EABFC7150CC4F9AE02/TyFhsA_Cs23gqCRPCvKBQnkChg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:bb:64:2b:67:af:6f:0e:63:59:ee:0b:24:f4:9c:00:9b:
         ab:9b:8f:ba:7c:ed:b5:d2:dd:a6:90:f3:dd:e2:42:d9:83:9e:
         9c:cb:64:a6:df:62:b3:37:4e:3a:0a:95:75:0b:10:dc:6f:bb:
         99:d6:6e:13:23:27:5e:98:b4:75:0e:e8:31:e4:6f:0f:8e:c6:
         83:90:ad:47:71:92:e6:93:48:90:11:4d:82:ca:ca:9e:be:3c:
         d6:14:57:71:b5:1b:9c:02:de:a1:ce:70:1d:9e:25:69:6b:6a:
         ba:a4:6d:bd:36:2e:41:61:45:23:30:bc:56:fa:1a:b1:60:d9:
         90:ed:af:fe:78:82:ab:8b:de:9b:90:72:c1:b2:c6:e6:d1:73:
         f2:b8:f7:ed:22:00:05:85:f7:3a:a7:d5:85:bd:56:3a:38:db:
         26:56:8c:2c:db:3e:49:23:13:d3:90:1b:86:d6:9d:2a:bb:55:
         e2:78:7d:25:2b:7c:93:d6:a1:78:7d:0f:73:2b:bd:f6:b3:58:
         48:71:a8:af:13:57:87:3f:6d:b0:c7:28:36:44:5e:d8:ef:73:
         3b:21:5a:d9:1c:4c:65:e7:49:1f:7b:09:f1:c4:ae:66:2b:b1:
         4b:5a:d8:d6:9b:72:9b:09:a8:8a:88:10:21:61:f7:77:a5:01:
         91:47:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:34 2026 by rpki-client