Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
File:                     Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft (raw, json)
Hash identifier:          UzaLtlty8auHtKYQGUYbAGYCKAbQz09Vm+Eb7spEav0=
Subject key identifier:   B5:DA:05:66:76:2E:A8:CF:0A:3A:48:E7:9A:88:84:5B:89:33:D1:AD
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1ABA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
Manifest number:          1A97
Signing time:             Fri 12 Jun 2026 16:17:50 +0000
Manifest this update:     Fri 12 Jun 2026 16:17:49 +0000
Manifest next update:     Fri 19 Jun 2026 16:17:49 +0000
Files and hashes:         1: Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl (hash: lgDcB+Spwqo3xWcsGVXNIHKAXe4imMonlvR639a+d40=)
                          2: 185EA954250011F192DC095DB9833773.roa (hash: 2AaTMthNI8//OFxx2zubXvRWC7z2s1zUcn+OTlBk4TE=)
                          3: 17751640250011F192DC095DB9833773.roa (hash: DBHQ67/774/B2H1i6/aJzjKS/WICHCleCoK8CNyi6t8=)
                          4: 1F34B5C0250011F1A608795FB9833773.roa (hash: g5vttMWt0+XQbj5GazBAdpSevdiy5U6hlhse6ij41HQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6842 (0x1aba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Jun 12 16:17:49 2026 GMT
            Not After : Jun 19 16:17:49 2026 GMT
        Subject: CN=6a2c312e-c06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:bf:bd:2b:84:a1:da:da:c5:c1:a7:e8:26:
                    76:07:94:4b:87:d5:6b:b4:ef:30:29:05:4e:0b:c0:
                    07:2a:79:91:24:43:c9:f2:cd:11:bc:8f:ba:41:4f:
                    d9:25:ca:1d:5f:18:c0:c7:d2:98:ab:26:80:10:4b:
                    78:0b:8e:04:ed:70:10:3b:ea:26:c4:9d:a7:a6:e7:
                    59:77:19:17:a4:34:33:f4:10:21:79:b2:08:fb:02:
                    51:48:ae:7b:fa:57:4c:14:dc:75:88:8d:1b:99:48:
                    97:b8:7d:3c:04:aa:af:88:bc:62:87:de:31:a8:aa:
                    96:99:ac:d8:b5:56:57:0b:c5:c0:ee:88:1b:84:1f:
                    25:ac:30:e4:2c:71:b8:b4:dd:8b:c6:63:4f:98:31:
                    d1:ed:cb:f4:82:09:d6:0e:7b:ad:25:07:cd:34:41:
                    1c:63:c3:f2:da:e9:a8:14:2c:16:81:16:80:ca:e6:
                    86:45:b8:fd:63:4d:4e:ae:16:b4:88:3f:94:b5:f0:
                    ff:93:95:35:c3:9e:f4:11:ee:8b:2f:29:f1:66:2e:
                    11:6b:0e:4f:8c:76:84:0c:51:ab:4a:29:3c:af:d5:
                    ac:dd:46:4a:9c:af:28:af:64:02:9b:0b:74:c0:b2:
                    d5:7c:57:30:4c:f0:af:59:ca:b6:c6:25:dc:8c:a2:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:05:66:76:2E:A8:CF:0A:3A:48:E7:9A:88:84:5B:89:33:D1:AD
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:35:43:dd:56:04:5e:a9:57:74:b8:18:e4:ce:df:75:cf:31:
         f0:9a:4c:a2:c0:ea:c5:b7:75:34:a6:08:2d:08:b3:4e:08:b0:
         41:ad:60:cb:0a:6a:2f:f2:fd:f1:1f:cd:a5:05:49:c5:e1:10:
         f7:7a:9c:f3:f3:ee:46:a4:bf:87:18:bc:d0:39:37:b1:f3:d0:
         c1:de:3c:63:0f:5d:e4:83:24:49:52:e5:3d:db:22:eb:df:e9:
         3d:03:96:cd:fe:5a:b2:91:b9:7b:dd:80:4c:b5:1f:0b:9a:7e:
         db:fe:fc:a2:9e:e6:19:31:a2:2f:56:b9:b2:5c:95:1d:0b:01:
         6e:b8:fc:ff:f8:7e:1c:d9:7d:26:a4:3d:4d:2e:f8:74:7b:27:
         65:b1:23:cd:20:b1:86:ad:dc:84:df:d9:97:74:2b:e9:d2:cb:
         2a:f0:7f:fc:9f:cc:ad:08:c3:d0:6d:b3:f7:7b:6b:36:7c:ca:
         6a:c1:8a:d6:c2:9c:d5:71:bf:96:61:4d:77:5d:06:1c:74:c2:
         dc:5b:27:b0:90:c1:57:7b:95:3c:50:dc:19:0f:b2:78:4c:5e:
         da:c4:47:a2:bd:a8:1d:2a:7e:b8:e1:f6:b9:66:62:39:d7:91:
         d2:43:9b:85:f7:97:a1:e4:9b:e2:a6:3b:25:2a:04:e4:1f:ba:
         7b:4f:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:02 2026 by rpki-client