Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
File:                     TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json)
Hash identifier:          9rRBC7P919zz2YiCAQU2+kgltbn4qeFt84S4ty4pIQY=
Subject key identifier:   CD:C1:35:D4:CC:3C:D8:A0:AE:CF:D5:6D:27:3A:2E:9C:A2:66:18:DF
Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
Certificate issuer:       /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
Manifest number:          016A
Signing time:             Thu 23 Jul 2026 06:22:28 +0000
Manifest this update:     Thu 23 Jul 2026 06:22:28 +0000
Manifest next update:     Thu 30 Jul 2026 06:22:28 +0000
Files and hashes:         1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: yX8Q4+SvKYzGtQuwLe0kRqAWiE5DODHu+tOYYJ0/CxQ=)
                          2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: DxEefx3v0VIE+PRbAwkcYP/T2AQ/uh/zxBc6m9wV8g4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
        Validity
            Not Before: Jul 23 06:22:28 2026 GMT
            Not After : Jul 30 06:22:28 2026 GMT
        Subject: CN=6a61b324-c2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1c:4d:88:0a:4f:d1:84:15:ae:f0:a2:af:17:
                    af:50:15:4e:ff:e1:91:da:79:2c:e0:fa:f7:47:d2:
                    83:aa:21:36:b5:03:11:11:9d:be:eb:dd:04:19:e6:
                    52:53:fd:bc:26:8c:7e:48:54:41:7f:b5:8c:79:55:
                    68:ba:09:2e:ef:32:d2:71:ef:9a:a3:3a:a7:74:ae:
                    ed:24:15:e4:a7:0a:a5:37:f8:99:b1:9f:dc:4b:3c:
                    45:31:02:d0:ab:cc:d4:29:0e:5d:97:6a:4f:86:e1:
                    05:1f:bc:9a:4e:00:fb:42:a9:39:7b:a3:0c:57:58:
                    f0:7f:97:be:6f:00:49:78:6c:b6:4a:ae:1b:63:69:
                    69:35:79:b3:c4:e1:bf:e3:7d:9d:b6:cb:29:ee:0a:
                    ea:66:ed:c9:81:1e:96:bc:cf:30:33:f5:08:8e:3f:
                    58:d3:e5:f8:de:fa:55:54:11:56:64:aa:38:b3:56:
                    90:d1:58:ed:89:1e:b0:14:2b:68:8b:f8:ba:ae:a6:
                    70:5b:3a:b6:4a:41:f7:98:92:77:2a:57:12:e8:2c:
                    7d:37:8c:c2:13:a8:10:d5:90:99:f3:a9:ee:31:7b:
                    06:20:ff:2c:81:10:f4:4f:76:7e:25:83:4b:86:c8:
                    cb:99:f7:84:53:66:ee:39:9c:b8:9d:fe:c6:15:65:
                    37:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:35:D4:CC:3C:D8:A0:AE:CF:D5:6D:27:3A:2E:9C:A2:66:18:DF
            X509v3 Authority Key Identifier:
                keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:82:dd:f1:60:ce:cb:34:2a:30:16:13:92:cf:bc:cb:9c:fe:
         23:89:ce:f7:dd:60:4a:d2:b7:7b:03:50:3e:c3:c1:af:1a:c7:
         10:78:27:41:fe:14:ba:51:85:75:27:85:a8:23:10:45:77:a2:
         94:db:2e:03:f4:11:8c:a9:0e:b0:08:22:c6:e7:d0:b6:2a:a2:
         fd:8c:60:ce:a8:7c:40:bc:50:7d:03:7e:1a:c4:70:9a:85:af:
         8b:c9:dd:61:08:44:ad:ca:df:80:ab:a0:90:26:dd:60:94:22:
         53:39:0f:62:9a:c9:9f:22:ff:51:f1:aa:33:37:1a:33:52:d8:
         f0:fe:6b:c8:66:70:8f:86:8c:83:af:ef:77:e9:22:55:dc:a8:
         32:8c:3c:66:24:bf:dc:a0:1d:48:8e:d2:ca:6b:cf:61:8f:43:
         a5:f5:a1:4d:27:2e:46:cb:93:36:4d:ab:de:e6:6a:60:59:d8:
         0f:72:a0:1d:0f:96:7d:da:98:1d:d8:02:77:2e:c4:1d:0b:b8:
         66:37:6f:a3:44:26:ad:4e:ad:97:de:f9:28:db:3f:2a:cc:7b:
         c4:3e:1c:95:35:18:56:17:5f:f7:50:0c:6d:c6:2c:91:60:e0:
         2b:b0:ab:b3:2a:a8:90:44:5b:72:f8:c3:b1:18:18:d3:84:6e:
         20:02:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:36 2026 by rpki-client