Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File:                     TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier:          bRc6LMpZHu1oPyn23y9m/HE0hQhObSf5TxDI93tyXr0=
Subject key identifier:   40:6D:3E:37:D4:57:21:DF:10:57:AA:D2:4A:42:86:D8:EC:42:4D:07
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer:       /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 10:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 10:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:05 +0000
Files and hashes:         1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: mqF2IwUex3JDD5X8Zrw0MYdMW383OCCW0bdzghYQZEM=)
                          2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
        Validity
            Not Before: Jul 23 10:01:05 2026 GMT
            Not After : Jul 30 10:01:05 2026 GMT
        Subject: CN=6a61e661-c7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:93:c5:1d:ad:f7:27:7c:40:0f:85:74:41:
                    6c:9e:fa:41:2d:d5:be:fe:e4:c2:27:d2:36:f3:1c:
                    28:a0:60:45:2c:e3:0a:8c:91:27:8e:fd:5e:1c:c0:
                    c0:9a:eb:86:39:5d:35:c3:99:d3:80:67:97:e7:e9:
                    64:b7:7c:d5:08:a3:e1:0f:bf:fa:b8:b2:ed:67:4d:
                    d6:61:2e:05:d0:3d:77:47:31:4c:64:4e:ba:23:59:
                    e2:50:1e:d5:b5:cd:9a:91:e7:6f:f3:0e:f7:4c:e2:
                    f3:a9:37:c8:7d:88:d9:77:c0:a7:a1:d0:df:05:11:
                    e6:51:e1:02:6f:a4:70:96:da:dd:da:a1:8f:21:94:
                    ce:83:c4:9f:84:71:f1:41:2b:26:fd:46:47:8d:0d:
                    20:bb:bb:e0:24:2d:e0:e7:b3:73:6f:6c:48:07:9b:
                    a4:e7:24:93:99:b2:1e:ac:ab:ea:7e:5a:6e:fa:58:
                    6f:e4:3e:09:a9:45:f8:a4:74:ca:34:ed:66:a5:8e:
                    2d:3c:1e:d5:bf:f2:55:74:32:ef:7c:ef:7f:e0:c9:
                    7c:33:86:ff:8a:14:fe:e4:c4:d8:14:f7:d9:10:71:
                    f4:d3:01:d5:d6:e7:36:e7:30:00:c4:f4:e9:ae:f1:
                    c0:87:25:b7:71:69:9c:38:ab:31:cd:b4:b5:ae:70:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6D:3E:37:D4:57:21:DF:10:57:AA:D2:4A:42:86:D8:EC:42:4D:07
            X509v3 Authority Key Identifier:
                keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:ff:d0:56:35:3e:7b:0f:22:f8:0c:b1:8a:91:95:49:95:
         b6:e8:45:13:47:6f:0f:0e:94:56:be:8b:d3:0e:76:53:06:4c:
         3f:63:0e:b4:02:0f:de:bf:91:10:8c:fb:8e:e6:04:64:cb:b2:
         09:c1:f7:95:09:81:49:ed:26:3d:9d:7f:9f:7e:f8:b3:c2:cd:
         59:7e:f4:4a:15:b9:5b:5d:19:fd:41:44:6e:82:0a:bb:fb:b6:
         de:fb:34:4d:e6:96:d1:f6:75:5c:73:fc:b8:49:dc:39:f5:c8:
         98:bb:9b:52:d1:22:c5:48:49:a9:ea:e4:e2:78:af:47:3f:df:
         61:fd:bd:13:0b:b4:e4:59:63:fc:c8:98:7a:74:ed:d0:c9:7b:
         61:1d:96:29:ba:86:87:b5:c3:34:3f:79:0f:d5:50:8f:f6:ce:
         0d:3b:21:7e:db:e6:e4:9a:1c:ee:dd:92:2a:4d:df:90:95:a3:
         4b:14:06:97:1d:14:60:39:8e:fe:f7:9b:7f:27:50:3b:75:2d:
         9c:f3:03:fd:ee:c5:d0:36:02:64:9c:02:23:3d:14:64:e4:3f:
         e6:b8:62:d8:83:eb:00:a1:00:a6:0e:f7:38:40:a0:e2:b1:34:
         e3:f1:b6:5c:6c:af:5e:08:ba:24:ec:f2:e5:07:1c:c8:45:1a:
         06:77:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:07 2026 by rpki-client