Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
File:                     tw3qbHe56OzOWDkTKBnvkTc_xSc.mft (raw, json)
Hash identifier:          55+WE66U4IxYBvGquv74nJJKM5qzPfY6KmkD1zrWMQE=
Subject key identifier:   61:27:29:AE:99:DB:C0:C3:5D:E9:29:22:28:24:A7:23:35:76:95:09
Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27
Certificate issuer:       /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
Manifest number:          018B
Signing time:             Sat 13 Jun 2026 04:26:36 +0000
Manifest this update:     Sat 13 Jun 2026 04:26:36 +0000
Manifest next update:     Sat 20 Jun 2026 04:26:36 +0000
Files and hashes:         1: tw3qbHe56OzOWDkTKBnvkTc_xSc.crl (hash: AK2rXjXnfZKYYVmCi5T6KvmiSUS0eEYSVsblV6qSQB0=)
                          2: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (hash: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl
                          rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527
        Validity
            Not Before: Jun 13 04:26:36 2026 GMT
            Not After : Jun 20 04:26:36 2026 GMT
        Subject: CN=6a2cdbfc-b7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:10:35:3a:7f:b1:c4:4d:45:4a:81:6c:5c:
                    7e:12:8b:b0:ca:81:55:72:01:63:14:b4:e2:9a:ba:
                    46:dc:85:6d:1f:02:72:b0:3b:02:d6:ca:44:3e:53:
                    70:f7:72:32:60:47:86:1a:3e:4a:b1:7c:92:be:a8:
                    d9:ed:05:b7:8a:d3:9d:4b:20:f9:ae:2a:8d:9c:49:
                    0b:e1:17:e7:84:fe:69:27:c5:52:b1:47:9b:7a:f9:
                    dc:0f:c4:74:6e:a9:af:cb:57:a5:67:71:c2:cd:6b:
                    85:a4:32:ee:14:43:a2:a4:35:d8:db:d6:e3:22:ef:
                    fd:9e:63:dd:67:e5:df:b6:e8:d4:d2:cf:51:87:02:
                    a9:f9:4d:e7:e2:c3:27:38:f7:66:4c:e3:4e:b9:b5:
                    15:b4:75:ab:a2:75:ea:0f:eb:02:a6:79:eb:b9:02:
                    6f:1a:85:ae:6a:1c:8c:6a:ba:6c:e2:e7:b4:7a:30:
                    97:f1:43:81:6e:aa:9d:03:16:47:95:ad:11:84:f0:
                    63:a3:1f:4a:dc:e1:14:7e:c3:a9:85:ea:32:76:05:
                    fc:55:51:07:f4:b4:5f:ec:ed:aa:ba:40:44:07:d2:
                    66:9d:58:85:dd:37:8c:f0:6e:d3:83:0c:d1:5c:01:
                    e9:43:2d:23:73:8f:7c:de:83:3b:6f:c0:6b:c0:6b:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:27:29:AE:99:DB:C0:C3:5D:E9:29:22:28:24:A7:23:35:76:95:09
            X509v3 Authority Key Identifier:
                keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a9:f9:6c:c9:12:cd:7c:ea:16:0c:2c:1a:88:79:d1:74:1a:
         87:fb:6d:0f:ea:72:d3:23:b4:22:3c:6e:44:6d:7f:71:16:f5:
         c7:53:cb:54:aa:27:2e:e0:51:e5:1b:14:d4:1b:79:18:1d:c4:
         a7:fa:3f:45:0f:7d:74:a4:be:8e:4e:64:19:9d:9b:e0:13:0b:
         30:d9:dc:7c:f4:4e:13:97:6d:6a:d0:63:8f:10:aa:0b:86:31:
         74:91:e7:d0:7c:53:fc:8b:bf:f4:c2:5f:05:e6:1a:89:2b:e7:
         96:c0:16:3c:90:cc:04:da:e5:1e:5d:13:34:81:d2:e8:0e:13:
         6c:4d:26:ab:aa:81:91:b6:e9:4e:e2:46:eb:3f:57:30:7b:fc:
         96:d1:5a:d2:9e:d2:0e:3b:02:be:d1:b7:a4:30:57:c6:06:de:
         58:25:d9:69:62:31:35:01:b4:48:75:ff:c6:86:bf:4e:90:b3:
         a0:fe:1e:24:f3:88:ce:5d:e1:5c:5a:62:7e:b6:c0:91:00:b0:
         f2:0f:db:e0:b6:40:5c:53:45:59:95:31:22:c8:c5:86:a0:f5:
         b1:9a:9a:29:1d:be:92:4c:31:4d:40:a8:c0:83:2e:e8:e1:c2:
         05:3a:b5:ef:51:87:e8:98:c8:1f:41:f2:55:a9:cf:74:fe:dc:
         c1:ec:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:57 2026 by rpki-client