Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
File:                     TonyDOHR4q7I1gVlBTEwvWB9W_0.mft (raw, json)
Hash identifier:          wmEWAH60lDXzDmYHnwDEM4twpVUqntlhsh6IHNIcp4s=
Subject key identifier:   FE:56:87:99:C0:8A:96:CB:2B:60:3B:71:1D:E3:26:A4:02:9F:BB:3E
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Certificate issuer:       /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
Manifest number:          45
Signing time:             Sat 13 Jun 2026 08:32:57 +0000
Manifest this update:     Sat 13 Jun 2026 08:32:56 +0000
Manifest next update:     Sat 20 Jun 2026 08:32:56 +0000
Files and hashes:         1: TonyDOHR4q7I1gVlBTEwvWB9W_0.crl (hash: 84JIsushIMuS8vdQfXaRbefH7Cae9er56E/vOj5/JC4=)
                          2: 78CCC796100411F190DA552F0F3D8C67.roa (hash: 9ijSIQLwt2Gy2XEyUcUffnJwapZcaQTrQntZZWP4Uss=)
                          3: A885DC48100411F1A3563A300F3D8C67.roa (hash: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
                          rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
        Validity
            Not Before: Jun 13 08:32:56 2026 GMT
            Not After : Jun 20 08:32:56 2026 GMT
        Subject: CN=6a2d15b9-24fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:9e:1d:01:5c:5e:67:1f:c6:f3:58:44:8e:
                    01:99:d3:f9:70:59:6f:96:38:57:1f:c8:30:df:59:
                    95:1a:c9:9f:f2:e8:ad:a5:f2:70:13:5f:ac:e1:2a:
                    fe:f8:af:80:71:21:60:dc:04:0e:8b:db:26:82:dd:
                    ec:33:8a:83:53:2d:fe:9c:5a:c1:21:e9:41:cf:8a:
                    f6:d1:f8:cd:4b:93:0e:67:ae:18:98:dd:23:2d:92:
                    96:a8:cb:3c:a8:05:e3:87:6f:78:1e:ff:ca:8f:a8:
                    4f:ea:9f:ef:e6:ec:6a:1d:0f:89:d0:a1:33:88:33:
                    9b:d9:eb:46:46:8a:cd:47:ed:d9:6b:3f:13:90:d6:
                    47:b8:91:6c:03:43:05:8b:db:6f:c3:93:e1:1f:27:
                    2f:bd:d1:f8:9c:f8:0a:3d:50:ce:5a:02:f9:39:cb:
                    35:3b:fa:61:ac:b5:ce:21:d6:92:f6:bc:d7:de:f4:
                    38:7d:7e:7f:fb:bf:83:81:0d:78:1f:12:03:9c:1d:
                    28:76:9f:b6:d9:16:e4:c8:eb:db:49:18:48:98:03:
                    98:6d:9e:5a:6d:b4:7f:ac:a4:19:0b:29:92:84:a2:
                    fa:51:22:ca:2a:75:cd:cf:4e:51:47:38:7d:e8:6f:
                    76:3e:a4:5f:9f:f3:b5:2c:08:84:53:64:7a:78:a8:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:87:99:C0:8A:96:CB:2B:60:3B:71:1D:E3:26:A4:02:9F:BB:3E
            X509v3 Authority Key Identifier:
                keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6a:a8:db:ba:c8:9f:5e:4f:98:84:1a:1b:7c:fb:d0:c2:ac:
         08:87:ae:d4:98:72:44:37:41:30:66:f7:bd:25:68:f2:b8:28:
         02:06:de:3d:4b:6f:0d:4a:36:8b:05:fc:28:9a:ed:6d:0e:37:
         00:47:21:00:2b:a6:2c:cd:d7:0f:66:67:69:ab:ce:ac:cf:d2:
         89:37:42:24:60:d3:fe:b6:5f:41:e8:10:d0:16:1b:51:e6:3a:
         3c:a7:63:b8:f7:ef:0b:56:8b:21:86:42:8a:a2:c8:cd:7a:c1:
         61:fd:83:18:48:ee:1a:1c:71:99:01:cb:f3:5f:df:e4:a2:77:
         22:75:0b:69:a4:82:50:2f:93:b9:3f:4f:16:2b:22:5b:28:26:
         a5:28:dd:17:63:56:19:87:f9:65:1d:f5:b8:3b:a9:82:fe:48:
         f1:f8:5b:57:84:62:7a:7f:3d:8f:44:96:13:ff:a3:58:41:92:
         3a:82:6d:27:83:42:7d:6f:aa:29:4f:6a:be:76:cf:ba:4e:95:
         33:a4:63:ed:66:11:8f:29:90:09:08:c8:27:e7:a8:b6:a3:c0:
         22:0f:7e:cf:13:7e:11:1f:b6:62:7a:de:54:63:c9:9f:d7:d8:
         bc:2a:58:1a:b3:d3:44:d9:26:cc:1d:59:1a:64:0c:c4:70:1e:
         55:c5:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:46 2026 by rpki-client