Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
File:                     tlTdX1sVILMlvAnEv0yt88r7NCk.mft (raw, json)
Hash identifier:          lvZYzHlMFIfYMwU/ObubZlfxaKUH9E1FLiiN1/INmTI=
Subject key identifier:   4C:8E:BB:80:4C:CE:D6:5B:19:86:BB:CC:BB:D0:F4:46:4E:15:23:56
Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29
Certificate issuer:       /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429
Certificate serial:       09FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
Manifest number:          2181
Signing time:             Fri 24 Jul 2026 16:43:21 +0000
Manifest this update:     Fri 24 Jul 2026 16:43:20 +0000
Manifest next update:     Fri 31 Jul 2026 16:43:20 +0000
Files and hashes:         1: tlTdX1sVILMlvAnEv0yt88r7NCk.crl (hash: Y9PToTT/nei+OLlqOrF9MnX8jZ7IrhiElq9vMhD07m0=)
                          2: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (hash: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU=)
                          3: EDA7924C4C6A11F18E27EE0BC2833773.roa (hash: 1Bx4zBsmcdQadh2Lc0q70WKfY8U9Q8aKMXPEm63RlMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 15:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555 (0x9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429
        Validity
            Not Before: Jul 24 16:43:20 2026 GMT
            Not After : Jul 31 16:43:20 2026 GMT
        Subject: CN=6a639628-a72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:e4:ac:28:25:92:7d:00:f3:af:07:9f:fc:
                    ce:90:80:9d:08:85:f3:9c:01:b6:6a:2e:91:fc:b2:
                    48:86:c1:7b:57:a5:0e:4a:3d:10:4f:0e:db:79:6b:
                    f5:a1:62:04:5b:0f:2f:dd:bc:74:d7:f4:b4:31:e2:
                    de:dd:73:9f:7e:3c:1b:0c:04:43:a4:60:b2:7e:aa:
                    ec:85:e7:8c:05:64:72:82:5d:01:ca:71:5e:47:5d:
                    63:c3:2a:e2:46:1c:84:0b:7c:0b:72:37:b0:83:2a:
                    1f:ed:19:1d:e6:f0:7c:86:22:00:17:fe:8b:f9:a8:
                    3e:a2:84:50:10:3f:db:f9:ea:fb:6c:a1:51:9f:ca:
                    01:e4:cd:cf:a2:8d:98:fd:4c:a5:12:fa:b6:ec:6d:
                    37:9e:26:c4:98:0e:a9:40:8c:a4:36:11:13:8e:83:
                    23:6f:84:c6:73:3c:03:5a:5c:fb:70:9f:13:5e:dc:
                    68:0d:dc:75:10:7e:15:ed:bc:dc:ab:17:8a:c8:94:
                    c2:80:b9:8a:ea:b1:ce:1f:45:04:b5:6b:18:69:91:
                    c4:19:9d:35:52:b6:58:89:60:06:54:bc:fb:70:ec:
                    bf:c7:b2:c2:78:6e:13:0d:8e:7e:df:6a:47:c8:3f:
                    a5:88:5d:f7:7a:0c:4f:0e:a5:c1:3e:3e:5c:f7:19:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:BB:80:4C:CE:D6:5B:19:86:BB:CC:BB:D0:F4:46:4E:15:23:56
            X509v3 Authority Key Identifier:
                keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:3d:d8:cd:57:f6:3b:a8:37:eb:45:03:ea:b9:09:76:db:
         df:1b:9b:85:98:04:66:0e:4e:cb:8f:5d:e4:37:6f:31:a2:49:
         db:56:5d:c5:f0:14:c8:47:c1:a6:27:b3:02:56:b8:0c:62:58:
         f9:4a:36:3d:3d:2b:b1:0b:30:ad:0c:97:a5:be:02:8b:ad:86:
         c5:26:0a:15:56:2c:4c:b2:e3:0a:ff:31:19:e7:18:8e:b3:ff:
         53:e4:b0:76:ae:f0:5c:15:1c:25:8e:2a:e5:b4:fd:2a:6d:56:
         02:07:e1:c3:2e:35:cd:10:dd:57:77:c7:d0:a9:dc:80:ff:58:
         83:16:3d:2a:bf:eb:3c:6f:bc:bf:f3:41:0a:0b:61:41:0c:63:
         81:87:82:9d:35:17:5f:f9:54:a1:a3:e3:64:a3:2a:57:cd:85:
         22:e9:b5:7c:4b:30:f1:b7:e5:a0:4e:42:d0:5c:d3:c9:ca:0c:
         7c:57:73:53:7a:59:4f:69:74:6c:03:30:94:54:83:b7:97:bd:
         65:f6:f1:f0:be:a9:a1:39:93:fe:6b:fe:d0:09:ae:ea:b3:b7:
         60:8a:3a:36:0e:ef:17:83:bb:1b:ef:c3:dd:9f:0d:29:75:1f:
         37:0f:e8:b7:ae:97:46:09:79:7a:34:93:7e:ba:c0:13:44:fa:
         35:47:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:27 2026 by rpki-client