Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          uHyK8MA5IZs3v+qqUXRxjBUPA26XMIQiWnIMBW1mKEY=
Subject key identifier:   AA:C6:F0:73:17:E4:BC:BF:30:DB:5C:BC:61:8F:12:9E:C5:0D:3D:A9
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          044E
Signing time:             Sat 13 Jun 2026 00:17:25 +0000
Manifest this update:     Sat 13 Jun 2026 00:17:25 +0000
Manifest next update:     Sat 20 Jun 2026 00:17:25 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: jN80Yo42y4KeUw3KGjFe+3oBx04Xv55BUnKHpwj1XFk=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Jun 13 00:17:25 2026 GMT
            Not After : Jun 20 00:17:25 2026 GMT
        Subject: CN=6a2ca195-adb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:19:fd:9a:50:41:b9:30:17:41:ad:00:76:
                    bf:88:05:30:a8:1d:ca:30:4d:d3:1c:99:f7:c9:51:
                    50:62:19:9c:e0:41:bb:cc:8e:2b:c2:10:13:0c:6f:
                    53:d4:5f:ce:27:5d:fa:22:77:79:97:22:c4:93:f8:
                    1e:bd:28:21:6c:b4:73:cd:10:45:d6:fa:3f:72:ed:
                    33:21:5b:9f:9b:08:c1:e8:0a:75:86:3d:92:0d:67:
                    36:1c:76:18:55:7b:97:57:9b:68:77:2e:85:ca:14:
                    12:13:2c:d1:52:bb:46:cc:eb:3c:04:a0:d5:63:80:
                    7e:82:d6:fb:34:d8:da:e2:9e:45:69:9e:b7:91:36:
                    81:7e:d1:c0:78:a2:f3:7e:34:1a:6e:49:56:9b:dc:
                    62:2e:cc:91:5b:48:a4:62:bc:f5:08:4b:c6:da:cc:
                    9b:21:46:39:0b:6d:be:f5:20:58:ba:03:23:c3:ff:
                    51:ff:c9:4e:12:70:57:57:78:31:ed:76:4b:2a:48:
                    63:f6:62:7f:b3:26:e2:0f:f1:4a:25:1c:6b:2f:91:
                    49:51:ae:23:aa:45:e0:e1:5f:11:51:1b:a2:cd:6b:
                    34:f3:da:b6:58:05:9f:39:1d:00:14:98:a3:e0:c6:
                    33:8c:b7:e1:c7:1f:61:a7:a6:fc:ab:24:df:12:20:
                    c7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:F0:73:17:E4:BC:BF:30:DB:5C:BC:61:8F:12:9E:C5:0D:3D:A9
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:37:04:08:23:28:d9:1a:c8:4f:da:8b:cb:13:85:62:2c:82:
         a4:5a:32:55:e1:e1:30:bc:4b:f2:f8:66:5a:2f:8e:f3:ef:c8:
         00:56:45:2a:dc:89:83:57:66:51:5c:bf:ae:e1:4c:38:39:99:
         80:9f:38:f0:81:65:58:de:d4:bb:ff:60:83:39:9c:71:34:af:
         62:07:94:35:c8:6a:ea:6a:f0:5d:b2:e4:51:8c:bd:97:63:0d:
         3f:09:09:14:c6:1c:a3:1b:9d:ca:a4:bb:7b:57:c2:50:56:cd:
         1a:22:94:53:24:0b:15:0e:0a:a2:53:ae:b9:be:76:a7:d6:97:
         94:d0:81:23:4b:ea:11:f7:2c:38:de:56:8f:70:c3:a7:18:61:
         bd:ae:ed:1b:cb:af:15:b2:f8:58:5f:17:70:48:d2:3d:ab:58:
         7b:ba:18:6d:82:3e:07:bd:ed:98:6e:bc:ce:1d:70:3a:9d:0c:
         bc:14:b6:94:2f:56:d8:62:1d:f2:a8:06:73:f4:a3:1c:4b:5c:
         3a:03:97:33:77:b3:d9:69:e6:48:d9:c8:4d:2f:a9:2e:0c:42:
         77:75:42:12:49:eb:d1:f3:08:aa:4b:01:a1:e5:68:6b:93:6b:
         e0:fe:39:dd:c4:6a:07:0b:8a:3a:f7:f2:58:77:ec:7e:db:a2:
         6f:58:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:55:35 2026 by rpki-client