Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File:                     tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier:          k1f0OwLyXwJyDAG5kRgAU/0RgIcTXWgSMTZyD9khSxM=
Subject key identifier:   89:56:A0:1F:48:B1:61:AE:B0:46:AF:00:CD:48:9D:CF:0F:17:BB:B4
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer:       /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number:          082A
Signing time:             Fri 12 Jun 2026 21:05:19 +0000
Manifest this update:     Fri 12 Jun 2026 21:05:19 +0000
Manifest next update:     Fri 19 Jun 2026 21:05:19 +0000
Files and hashes:         1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: +2RwJoXMs03FZvwWGf+mvIod7cdeuOyqoyeN0JMcPiM=)
                          2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
                          rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
        Validity
            Not Before: Jun 12 21:05:19 2026 GMT
            Not After : Jun 19 21:05:19 2026 GMT
        Subject: CN=6a2c748f-6c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:84:8c:b3:b6:0f:38:c5:1f:c2:8f:a3:b5:
                    0e:f9:d7:95:de:aa:37:a0:2d:99:20:08:82:c9:9b:
                    bf:25:28:0b:bd:40:ad:d9:fc:e2:fb:1d:68:77:04:
                    fb:f9:89:30:03:64:73:c3:09:50:a8:59:d2:55:c0:
                    8a:07:8f:51:16:cc:cf:c3:8f:81:e1:9f:1c:84:18:
                    bb:6f:1e:99:8f:d5:0c:7d:57:53:cb:14:e9:2b:9e:
                    d4:33:8a:7e:86:08:d1:62:11:a5:34:08:83:f6:88:
                    7b:6f:2e:53:be:9a:2b:a4:fb:02:c1:aa:03:ea:f5:
                    36:41:e2:a1:52:77:2c:f5:12:40:dd:10:52:31:ef:
                    ec:ea:07:3d:29:5a:a9:08:fd:72:01:48:6c:b6:87:
                    c5:41:d8:39:34:a3:e4:fe:43:ec:7d:fc:7e:90:1b:
                    96:0d:83:74:b2:c4:39:3b:72:2c:19:b1:63:3a:ed:
                    89:d0:d7:f0:00:f4:d2:d2:04:ec:d7:46:fc:c5:34:
                    4a:e2:82:b7:81:48:3a:8f:fa:30:a5:41:20:1e:b0:
                    9e:94:3b:ad:1c:63:a0:de:d8:93:ac:ec:d9:d7:6d:
                    cc:d8:0e:b1:ef:e9:87:46:2d:57:96:ee:3a:41:9c:
                    9f:2d:27:ef:d1:cd:11:04:3b:3f:c6:82:00:13:0c:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:56:A0:1F:48:B1:61:AE:B0:46:AF:00:CD:48:9D:CF:0F:17:BB:B4
            X509v3 Authority Key Identifier:
                keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:a1:a0:e9:d5:ec:71:b7:a6:e3:13:b5:e2:c9:fe:a5:6a:
         a3:ec:b5:09:21:cf:f8:d4:f1:2c:3f:7a:f5:e4:d0:e0:bc:03:
         7a:f7:24:47:26:3a:cf:b6:fa:a0:4d:d0:9b:d9:6d:b1:ff:ea:
         c9:3b:9b:14:6d:5f:7c:17:bc:4b:4e:17:85:9f:f2:6f:0c:8f:
         2d:ec:7e:bf:3c:ff:69:f8:b4:88:2e:1c:f1:4a:7f:17:30:58:
         1e:fb:8d:40:9d:e7:b0:34:1d:1c:f4:b3:c4:12:cd:7c:b0:f9:
         bc:45:ba:21:4b:3d:43:e3:d0:b9:ed:2c:76:a0:9d:19:f7:cc:
         11:21:9f:82:ec:cd:f2:c4:72:0e:8e:b3:bc:04:f9:c3:4b:64:
         c9:56:05:5c:d8:d4:1c:9d:05:9b:73:89:ef:6d:99:53:47:e9:
         4a:19:27:e0:8d:c8:97:e6:08:cf:9a:6e:7f:2c:25:b7:7b:8b:
         cf:a2:73:e4:e9:62:28:d8:a0:d5:b6:44:54:34:70:82:9d:ee:
         d8:1d:a8:61:a8:6d:ef:9d:74:83:48:38:53:35:c7:d8:c9:3b:
         1b:cb:24:45:05:45:54:bc:34:0f:5b:2c:9a:1d:c8:9d:99:61:
         ee:7d:d6:7b:17:5b:ef:0b:59:54:b3:f4:d8:92:62:9f:50:d2:
         55:a5:63:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:45 2026 by rpki-client