Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          /yl5YoYG5lyO6fmwh9VYG0emGGJj8n7zht2PS25cuZs=
Subject key identifier:   E6:97:8A:7D:A8:F0:E2:BC:C7:5F:87:94:89:BB:97:79:A9:30:15:32
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0437
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          042F
Signing time:             Fri 17 Apr 2026 00:15:21 +0000
Manifest this update:     Fri 17 Apr 2026 00:15:20 +0000
Manifest next update:     Fri 24 Apr 2026 00:15:20 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: s1YOe39Jttdm3O7eaRsk0a+phHn5hWZ5SQVSuT4Q1ws=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: fOVVIFjJvtGXdWvi8prpmgPz6YpqGlf3motP4AlsEzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Apr 17 00:15:20 2026 GMT
            Not After : Apr 24 00:15:20 2026 GMT
        Subject: CN=69e17b99-13a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:81:40:32:37:ef:74:f1:20:c2:a2:75:c5:
                    42:4c:fb:02:75:3a:20:c4:0c:ca:c3:7e:b3:8d:d0:
                    e6:52:20:67:f5:eb:4b:f6:39:df:9d:d7:fc:0c:50:
                    db:33:57:bf:3d:1b:43:31:09:2f:10:3b:ba:ee:e6:
                    4a:29:3f:34:7d:cf:60:bc:1f:e8:87:57:43:ef:1a:
                    19:20:fb:3d:0d:6f:70:da:a7:a0:42:ab:77:cf:29:
                    e9:8d:3d:03:41:10:2b:c1:9c:3a:59:b2:a7:df:64:
                    cc:fc:6a:b8:9d:71:f1:ab:c7:ae:ef:54:09:0a:14:
                    12:8c:2e:c2:ed:cb:62:48:14:a8:32:c3:23:69:14:
                    85:ba:fe:4d:7d:6d:cd:13:0a:3f:5f:6b:82:55:7c:
                    b0:8c:44:6f:2a:a5:74:4a:6b:70:6b:6e:2a:8b:65:
                    73:e8:af:21:91:ef:01:33:39:c4:fb:6d:d6:52:d9:
                    25:e4:4a:8b:c6:13:b4:3a:05:67:ac:e4:34:c9:53:
                    29:52:24:cd:85:9b:24:06:e4:2d:b1:82:27:1b:0a:
                    88:38:40:aa:00:a7:75:fd:5b:e0:97:71:31:b4:0d:
                    68:2b:fd:d4:63:12:3d:36:10:1e:d9:24:4e:5a:5f:
                    c3:8c:db:db:d0:af:88:1b:20:4a:1c:3f:61:7f:ce:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:8A:7D:A8:F0:E2:BC:C7:5F:87:94:89:BB:97:79:A9:30:15:32
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:99:48:ef:f5:b2:f3:d6:f3:89:5c:d0:a5:4d:f9:7b:89:
         43:96:8c:3a:2f:43:db:6c:7d:62:7d:08:61:d9:ba:f4:30:d6:
         6b:2c:e3:56:5e:a3:a5:74:3d:4f:f4:dc:07:b6:f0:d1:15:94:
         75:b8:9a:17:5f:b0:81:d6:aa:7c:d6:4e:6f:d0:2d:a5:52:cc:
         d0:21:85:89:8b:e2:b2:38:46:4b:77:00:1d:99:39:09:8c:be:
         c3:0b:6a:32:be:e3:07:82:53:73:78:fb:6b:91:d7:e6:c7:3a:
         b1:fe:af:fb:57:e9:4c:99:17:26:50:8a:8a:7b:0e:d4:0f:a2:
         d3:23:a8:80:53:0e:47:3c:2b:bd:e3:26:27:fe:77:26:61:57:
         1f:98:d8:8c:23:df:5b:2c:f5:ff:c8:c6:b4:da:a7:b4:00:c6:
         f0:89:f3:98:ba:10:c2:73:90:1c:32:46:76:73:d1:eb:e3:b8:
         73:d9:55:d9:25:32:10:63:45:66:63:87:b6:0b:30:cf:3d:5c:
         bf:0e:65:a7:af:ff:a5:e3:47:ca:2f:41:6c:ac:b7:c1:78:ad:
         63:f4:4e:68:4f:ba:e4:3a:18:7d:75:a1:90:f6:ab:5d:f8:1c:
         9a:9f:34:87:67:c5:c2:59:00:e2:47:0c:2b:fc:c6:13:2f:cb:
         a6:18:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:13:36 2026 by rpki-client