Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
File:                     tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft (raw, json)
Hash identifier:          BkIrn5wY82Pc6JgMH7d5P21PotZr+SKDezCBd5nViLI=
Subject key identifier:   8E:F8:EC:CC:CF:2B:12:DA:5A:7B:64:6D:74:B3:F9:EB:6B:FD:5A:C8
Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06
Certificate issuer:       /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
Manifest number:          027A
Signing time:             Sun 19 Apr 2026 01:43:19 +0000
Manifest this update:     Sun 19 Apr 2026 01:43:19 +0000
Manifest next update:     Sun 26 Apr 2026 01:43:19 +0000
Files and hashes:         1: tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl (hash: aNC6dVf+X2oS2sjFwjAwcrGgHDVBI6pwJAdk3dRLbP0=)
                          2: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (hash: ySHcIoYi69/klx1xfZit6p/PRcBh2GhqWocAom0vCPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl
                          rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606
        Validity
            Not Before: Apr 19 01:43:19 2026 GMT
            Not After : Apr 26 01:43:19 2026 GMT
        Subject: CN=69e43337-25a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:22:d5:5b:d5:a4:d8:4e:a2:e3:1a:8e:e2:
                    7d:03:08:34:d1:ca:24:80:d1:3a:0f:d0:01:d2:05:
                    75:23:e5:49:42:c0:96:9f:7c:2c:f8:44:dd:26:4f:
                    de:24:80:52:ac:1c:63:19:1f:60:78:6f:2c:ff:25:
                    e0:b5:21:8c:31:b3:5b:34:ca:da:ac:60:90:41:56:
                    ef:4e:21:6d:9d:eb:9a:f4:72:0f:e3:f1:60:f2:5a:
                    3c:03:a4:50:84:69:70:c4:f6:ff:97:ea:24:ae:24:
                    5f:c5:09:1d:f5:29:c0:18:e3:2a:85:46:81:91:c8:
                    7c:ed:4e:40:f5:8a:44:e6:52:6c:58:7c:66:e2:e2:
                    cd:20:7b:b3:17:1c:6e:38:59:c4:3d:d3:85:a3:5b:
                    ec:77:92:7e:a9:c1:d0:1c:c6:e0:7c:f9:24:9f:2b:
                    ab:63:b4:03:07:b5:a9:15:38:89:8a:f8:07:c6:95:
                    60:12:bc:8a:45:20:75:bd:da:79:4d:c6:43:fb:fa:
                    13:4d:42:0a:52:db:66:0d:54:7f:b4:63:17:f6:ee:
                    68:8e:c7:6e:7e:6c:02:a2:da:2b:1c:66:62:12:d4:
                    91:fc:6f:48:6e:05:f3:df:d0:a3:df:98:64:d1:87:
                    d0:2f:b4:be:bd:da:44:09:f7:bd:64:7d:6b:67:de:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F8:EC:CC:CF:2B:12:DA:5A:7B:64:6D:74:B3:F9:EB:6B:FD:5A:C8
            X509v3 Authority Key Identifier:
                keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:fb:97:fe:6c:62:03:63:d9:e8:36:9b:3d:97:e9:df:b7:
         b3:e7:3c:b1:7a:3d:db:73:d6:f0:69:b6:ab:b3:8b:76:b0:7a:
         2d:86:1f:94:42:be:c5:d7:85:62:d0:2e:e3:3b:7b:1d:ed:90:
         8d:6c:cd:28:c2:36:4f:07:95:04:07:ee:a4:af:69:51:93:f1:
         f4:5b:04:90:dc:71:cc:27:a0:71:01:e2:8a:a5:4b:d5:74:be:
         87:ed:ca:22:d3:9b:14:13:ec:65:0b:4e:b2:85:a0:17:bf:be:
         29:9b:fd:7b:65:1f:d3:d4:cc:e1:bc:31:7c:6e:94:cd:70:9f:
         b7:85:18:f3:c1:d5:c2:6c:68:c4:45:95:19:ee:ac:3c:62:f7:
         32:fa:b0:b3:1b:56:e7:e9:2e:ba:89:e6:84:71:69:4c:2d:77:
         7c:23:85:6d:28:34:11:58:15:21:d5:a3:ae:63:b1:71:62:05:
         c3:e8:e8:04:02:74:c3:de:80:fc:e4:cf:cd:b1:c8:2a:a7:8a:
         22:f0:0e:e7:01:60:28:32:41:a4:54:e5:93:fe:d3:8f:c4:f0:
         43:84:33:9c:68:15:65:ee:6d:27:e0:69:1b:f2:c7:a6:53:34:
         e7:2f:e7:68:4e:39:9a:0c:0c:a8:56:aa:20:aa:85:4a:c5:75:
         75:fb:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:20 2026 by rpki-client