Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
File:                     TA-99pF0oywUEWcaumPJ6rdWs4E.mft (raw, json)
Hash identifier:          q+UPkws71h7e34gPW+c+pPRUWo9VC946kEbTJX+dg+0=
Subject key identifier:   FB:30:DF:DC:B6:08:9A:9A:73:73:A2:82:3E:4C:7B:01:E4:CA:ED:36
Authority key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
Certificate issuer:       /CN=A915F38F/serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
Manifest number:          4B
Signing time:             Wed 15 Apr 2026 07:57:12 +0000
Manifest this update:     Wed 15 Apr 2026 07:57:12 +0000
Manifest next update:     Wed 22 Apr 2026 07:57:12 +0000
Files and hashes:         1: TA-99pF0oywUEWcaumPJ6rdWs4E.crl (hash: K73OStN4MR+Ior4jNLeKuEpoOaPzEwZwOVA+bCTFV2U=)
                          2: 75576E0ED0E911F0BF43FD85C4F9AE02.roa (hash: n9H3Oa87Ri4QtUGXpCdNLeaiuqAhKzQ3NEWHotM4whY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl
                          rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
        Validity
            Not Before: Apr 15 07:57:12 2026 GMT
            Not After : Apr 22 07:57:12 2026 GMT
        Subject: CN=69df44d8-dd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:90:f8:e6:0c:9a:c3:36:f1:18:9f:04:51:
                    b3:3b:d0:2b:be:6f:96:a5:d4:16:39:1c:32:07:77:
                    fa:1f:6f:00:99:f7:9f:46:2e:36:16:ae:2d:41:e5:
                    b6:00:5b:a8:fc:da:8a:95:00:2a:2a:77:88:cb:3d:
                    c9:34:85:6e:3f:19:1e:b3:ca:75:3d:00:e1:1e:ae:
                    61:e5:8f:d5:28:8a:b1:d6:c0:3e:d5:6b:d2:99:e2:
                    2d:06:80:d0:e8:31:ee:09:c9:9a:67:3f:7d:ba:af:
                    08:9b:ec:f2:35:d5:54:43:5b:2f:3e:da:cc:25:e5:
                    6c:7a:f1:a0:26:bd:d6:25:62:ff:47:9a:89:7d:01:
                    a8:ca:48:0d:7e:5d:57:25:9d:ae:5b:a7:52:b7:0e:
                    be:e4:ff:83:63:70:fc:95:f2:ee:8d:a6:3a:56:87:
                    b6:ea:5f:f1:ec:3b:f0:26:5d:85:1a:fe:70:70:76:
                    38:21:a0:fe:42:f3:ff:02:76:2a:c4:f9:2e:a9:87:
                    d5:79:87:bb:30:f6:ac:e5:32:62:84:12:9b:86:40:
                    c2:34:01:c9:5a:7c:fc:a6:ef:73:ea:17:9d:e6:55:
                    84:4d:e7:f3:51:15:19:5c:f1:95:ae:d6:9e:20:e0:
                    71:f5:23:f1:41:6f:f2:15:0c:22:99:b6:a1:6d:1c:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:30:DF:DC:B6:08:9A:9A:73:73:A2:82:3E:4C:7B:01:E4:CA:ED:36
            X509v3 Authority Key Identifier:
                keyid:4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:db:fa:17:02:c6:b8:e9:4c:60:ca:67:26:2b:62:d3:a3:
         cd:4b:86:9d:5e:1f:8f:35:15:64:b2:fd:35:20:a0:95:a3:f7:
         09:6b:6e:16:cc:c2:4f:9c:4e:b9:23:0b:d7:78:44:15:ef:5a:
         68:1b:4f:a2:b7:9f:28:7f:c4:d3:0e:8d:46:4e:eb:74:be:31:
         65:3d:d4:b5:d6:8b:bc:a0:9b:9e:dd:b2:d0:0c:14:36:17:29:
         46:3f:a6:15:88:c4:f7:3d:60:5a:2a:38:96:b6:4d:25:1c:a5:
         f3:5d:96:04:06:c6:a4:12:c9:74:7d:69:da:04:19:07:a9:5b:
         5f:9c:21:10:10:0d:3d:fd:3c:e2:bb:06:1e:9e:a1:42:bd:55:
         ea:47:cc:a1:ab:4a:83:d1:b4:8b:06:61:32:25:1c:3e:1b:5e:
         80:d2:43:a0:58:30:22:8a:8f:14:aa:2f:e8:0e:fb:1c:20:8c:
         e1:33:8d:5b:84:03:07:4f:69:bb:fe:d7:4c:da:05:e9:5e:d6:
         fc:27:66:2a:e7:4a:a6:77:6b:fb:96:e3:d6:d1:72:78:49:6e:
         a2:d6:0f:2a:f5:ad:b4:b8:54:ab:f6:a1:e7:ae:ab:74:0d:6e:
         ba:76:12:39:d0:e2:0d:10:fb:fa:38:d7:25:27:4a:2c:71:c6:
         df:67:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:48 2026 by rpki-client