Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          6JFdlFSCeiBFNjH2s76Xjlx0RKVxXHQUCKEweltwBxc=
Subject key identifier:   61:E9:59:4E:EC:B5:A3:D4:94:9E:F2:8C:FD:4C:8A:70:01:2D:23:FC
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          F0
Signing time:             Fri 17 Apr 2026 06:06:19 +0000
Manifest this update:     Fri 17 Apr 2026 06:06:18 +0000
Manifest next update:     Fri 24 Apr 2026 06:06:18 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: Y7x4o3emkHV31Y98eJMhUV/O6CCQKxUDldzGza/mMDY=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Apr 17 06:06:18 2026 GMT
            Not After : Apr 24 06:06:18 2026 GMT
        Subject: CN=69e1cddb-60ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:ad:50:69:d4:b7:65:2c:63:20:ff:46:b5:
                    57:10:6a:14:50:68:7a:eb:35:4f:c6:be:74:ea:b4:
                    5c:01:ea:ff:be:e4:66:79:aa:0d:e2:06:15:c7:a5:
                    fd:ae:bf:cd:13:0c:8e:78:76:97:a2:1f:5a:5f:94:
                    b7:30:83:98:8f:7d:c7:ef:3b:c8:38:3a:e0:76:1a:
                    58:f9:f7:cf:54:a2:d3:81:70:af:21:7d:29:84:17:
                    01:d7:93:f1:ec:24:3f:b2:7e:70:e8:7c:11:f8:b7:
                    a3:34:ca:76:aa:87:7e:78:3f:86:8b:c7:58:4f:60:
                    32:b9:90:b1:78:9e:72:42:43:c6:ca:9b:6e:47:79:
                    4f:08:96:c5:f4:f4:eb:60:56:66:3c:de:2e:a5:6d:
                    67:5e:96:c9:cf:53:c0:4a:e7:fb:86:75:4a:bd:3a:
                    18:a2:0f:b1:cb:b9:4f:a1:a5:fe:20:d8:e6:a2:f0:
                    5f:94:f2:7a:33:ca:4a:e2:99:5b:77:4b:8e:bf:44:
                    de:04:9f:7b:c1:27:c8:e1:e1:bb:3f:f6:49:5c:83:
                    91:0f:ed:1f:ff:86:ef:6e:e9:e7:86:96:7e:7a:06:
                    3a:a6:c1:5e:37:15:de:19:1e:f3:1f:64:b0:5a:c5:
                    54:a1:cd:e9:f7:9a:b5:1e:a6:c7:e3:f0:25:a2:17:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:59:4E:EC:B5:A3:D4:94:9E:F2:8C:FD:4C:8A:70:01:2D:23:FC
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:b9:f2:14:70:55:04:1a:7d:a5:f2:dd:9c:b4:f0:e3:cd:
         bf:90:a3:6b:5e:cb:e7:70:d3:34:9b:43:0a:62:d1:48:90:de:
         cd:5b:00:9a:a3:e1:b1:37:f8:83:51:c3:74:54:26:86:b0:c6:
         93:81:00:e8:2a:40:a9:f0:2f:73:eb:e4:27:8b:c8:55:5b:65:
         47:b8:a7:bd:2b:cc:19:ec:77:33:f2:d7:10:bf:84:c9:93:a8:
         4b:c9:ca:43:94:f8:d6:62:1d:23:43:9a:57:82:b0:51:32:29:
         25:8e:c7:c7:81:b8:66:ee:52:3e:0a:ee:c8:a6:8a:0f:2d:86:
         dd:80:36:07:8a:37:46:24:98:65:0d:2d:64:a2:75:76:d2:2f:
         f3:bb:ba:c6:9b:03:d5:de:e1:94:b1:30:51:8f:4f:b1:1d:5e:
         53:38:74:28:b5:0a:7d:37:09:fb:ef:5d:3b:a3:17:7c:81:35:
         24:ae:09:ce:d2:9e:b1:76:9e:2b:fc:cc:e2:bf:1c:0d:57:e3:
         97:fa:5c:92:1b:99:78:3e:84:d9:d7:45:f7:ac:94:cf:e3:31:
         60:1e:dc:2c:65:db:71:63:42:54:89:25:4f:98:e0:3d:85:f2:
         5a:b4:6f:c3:ad:fa:5c:73:d0:6f:ea:c9:91:41:46:c7:cc:40:
         c1:fc:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:27 2026 by rpki-client