Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File:                     Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier:          gxbzUR+13CWBcJWf7kIb6yQiiQ/MRU71Qd96jXmYJtU=
Subject key identifier:   6C:EA:C8:E7:7A:36:1E:00:EA:01:DD:F8:F1:BF:56:D6:01:CC:E0:51
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       089C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number:          0894
Signing time:             Fri 12 Jun 2026 20:34:45 +0000
Manifest this update:     Fri 12 Jun 2026 20:34:44 +0000
Manifest next update:     Fri 19 Jun 2026 20:34:44 +0000
Files and hashes:         1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: Zq+sl2UrN2DyWRpESh6XQ8rTr8xKnoAdswfibeMkgjE=)
                          2: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: O/7YA16zUHlRs4EqhBTZvR5d/9Wf8oxzD6m86xewXDU=)
                          3: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: olzU9jiah+vCL2TYo6oua28ch8EeQcQTF/v3T6cuGv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Jun 12 20:34:44 2026 GMT
            Not After : Jun 19 20:34:44 2026 GMT
        Subject: CN=6a2c6d65-d303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:83:da:ce:d1:69:2a:8d:41:8e:11:6a:6c:
                    9c:85:23:8c:2e:61:75:91:49:17:ba:f0:6f:c0:34:
                    e7:b6:80:c0:93:84:6e:f9:b7:5d:35:86:e2:79:95:
                    f7:fb:47:bc:fd:84:1f:50:b1:bd:91:57:48:c6:49:
                    e2:0e:d5:e3:52:38:97:59:7e:68:5b:6e:00:4b:87:
                    53:a0:a2:89:1b:3c:dc:ee:5f:11:7a:a0:87:48:01:
                    ae:d8:8e:ef:94:18:d3:8c:0e:bd:4a:17:f1:a9:8e:
                    12:b6:cd:b5:46:8d:bb:a5:8c:51:02:45:87:a7:26:
                    f7:4f:ce:e7:b8:14:bf:64:49:2c:39:27:3d:61:9c:
                    31:8b:e6:18:21:cb:9a:43:42:39:bf:b6:c5:93:f8:
                    ca:8d:7f:77:88:76:0d:cd:1c:db:80:68:4a:50:80:
                    31:e9:22:5d:33:a0:3e:22:f8:e2:f1:bb:3e:71:b4:
                    aa:d1:4d:6a:4d:24:2d:b5:e5:f0:d0:ad:7d:42:2b:
                    ec:af:76:05:da:cb:e8:f9:2a:21:8e:e1:67:76:42:
                    27:f8:51:69:a1:07:fb:9d:cf:9b:ba:25:81:8f:d8:
                    7f:7c:6b:0b:c2:19:9f:be:7c:11:30:fa:7b:46:6e:
                    10:42:81:9e:db:11:43:66:60:ea:33:85:e0:f5:4e:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EA:C8:E7:7A:36:1E:00:EA:01:DD:F8:F1:BF:56:D6:01:CC:E0:51
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:07:30:95:0e:f8:e1:73:77:be:0f:83:07:5f:36:05:ad:
         73:d8:87:e0:cb:8c:a1:93:de:c2:ef:97:36:77:4c:2f:16:e2:
         50:7d:00:cf:ab:b8:d6:c3:73:4b:e0:3c:49:08:53:45:78:49:
         8e:3b:cb:ab:e5:e8:c3:6e:28:71:9b:dc:4e:57:f3:27:95:a3:
         09:00:76:3a:a5:d7:86:84:ac:21:9a:1f:ed:1c:4c:cb:a2:cb:
         b4:7a:5e:f1:44:4a:63:4c:00:f5:a8:90:64:53:d5:a3:fa:ac:
         6b:d7:f1:3d:81:d2:58:9f:f1:30:33:9f:61:7b:40:73:07:0c:
         ad:84:8c:ca:b1:1f:31:9e:31:12:ca:0b:3d:65:91:47:15:5c:
         92:ae:c5:40:b8:95:c3:ef:b8:3a:80:77:35:ee:94:ae:69:f2:
         7e:08:f7:26:47:0e:de:80:4e:3c:fe:db:df:cc:44:81:64:02:
         9e:de:c2:29:ea:4a:f8:42:00:6d:c9:90:4a:ef:fe:b3:63:e4:
         0b:95:e5:2b:9b:8a:72:68:44:e8:51:11:2c:ba:39:95:15:f6:
         8a:42:b9:4c:7e:37:68:3b:48:78:b4:c0:68:a9:29:52:0a:b6:
         e1:b3:2d:82:58:bd:3f:14:3a:c5:51:e3:06:d6:0c:ab:94:4f:
         1f:7a:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:28 2026 by rpki-client