Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File:                     tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier:          L7sFsgayeX/pNzcbnDKYCT9duOY6GphdjPtpXss4qjE=
Subject key identifier:   5C:8C:C4:EB:D2:07:E1:A2:B0:0B:F7:CE:19:14:9E:71:32:2F:19:35
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer:       /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial:       05CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number:          05BB
Signing time:             Thu 16 Apr 2026 23:03:02 +0000
Manifest this update:     Thu 16 Apr 2026 23:03:02 +0000
Manifest next update:     Thu 23 Apr 2026 23:03:02 +0000
Files and hashes:         1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: xYNCVrry/wIPzH5rnx8vvdJu4xgItSTf48lGkUZRoBk=)
                          2: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: ZwaaaCTB5MJnKC+ti5oXMWpTHrYQMXviyJGrRl6G7v4=)
                          3: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: 39dWXtJ3zNJllsdeoKvUITiTmTYBuJqx9UsYIBiECf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
                          rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
        Validity
            Not Before: Apr 16 23:03:02 2026 GMT
            Not After : Apr 23 23:03:02 2026 GMT
        Subject: CN=69e16aa6-47d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:fb:c4:b3:e8:50:b9:d5:c9:fb:d0:ae:37:
                    bb:30:ea:ae:65:b2:22:a5:74:19:31:a3:0a:77:57:
                    7d:fa:96:b6:3a:3f:4d:bb:5d:2d:17:a8:e3:c5:47:
                    1a:45:74:a3:c2:30:a4:01:4a:09:cc:ff:72:62:cc:
                    de:b1:7a:68:24:0d:bf:43:67:0c:15:87:55:54:48:
                    e4:3b:a7:86:fc:87:41:33:b7:c0:c8:a5:06:07:cd:
                    8e:49:a4:53:1f:d7:94:8b:ff:c3:23:21:d6:c6:b9:
                    26:cb:df:17:e7:4b:e1:5e:7b:c8:73:aa:19:f0:53:
                    c2:7c:af:66:69:be:05:47:37:a9:6e:ab:90:a6:a2:
                    54:15:a0:10:54:c2:e2:d3:f3:82:7f:a6:12:bf:e9:
                    ae:c5:1a:5d:0d:df:ae:45:15:55:94:3e:bf:6b:2e:
                    e8:90:3d:c6:69:11:b0:84:c6:fa:10:15:5b:ac:87:
                    8a:a8:33:fb:a3:88:73:95:ff:1a:c5:0f:57:2a:6b:
                    c6:5b:bc:65:15:8a:7a:16:c1:ed:49:e0:43:f4:c7:
                    cf:18:16:c4:b6:bc:2d:d1:3f:a1:e9:55:f1:fe:aa:
                    37:cb:69:37:86:9b:e7:c4:37:ed:90:1d:7c:1d:6e:
                    b6:c1:3f:ab:fb:9f:68:02:2a:c6:5f:5d:fc:11:ce:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8C:C4:EB:D2:07:E1:A2:B0:0B:F7:CE:19:14:9E:71:32:2F:19:35
            X509v3 Authority Key Identifier:
                keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:58:2a:5b:cd:a4:89:06:a2:b0:0e:1d:f8:01:69:25:57:
         22:35:91:6b:84:f4:02:8d:d8:b5:a7:14:c0:ed:67:99:c9:99:
         d3:2b:b9:34:75:21:8c:ec:dd:6c:c6:61:f2:0e:6e:d0:e7:85:
         67:37:d9:14:c6:24:76:41:17:48:ad:39:2a:46:d3:71:4e:62:
         cf:16:54:44:d0:6d:aa:db:4f:22:ed:bd:5e:a5:7d:33:77:9e:
         de:2b:9b:9d:f2:d9:46:10:00:4a:56:dc:ed:26:c2:40:ee:c4:
         d3:f4:54:cc:eb:af:43:b4:bf:a8:49:be:c8:35:58:7b:f2:75:
         ab:a2:06:8d:e8:a5:96:93:c0:3e:80:71:2e:13:2c:d0:8c:51:
         18:0b:56:04:c1:cf:1e:5c:cd:86:1c:df:fc:92:96:c2:70:13:
         5d:b5:d5:7c:b9:b1:42:ef:ce:a3:1d:96:4f:47:e7:a7:c3:49:
         3c:79:5b:9a:3c:15:58:99:cb:27:da:42:e8:56:98:ff:4c:44:
         76:d5:40:22:a1:34:9a:08:63:71:92:81:ab:1a:cc:5b:da:75:
         8f:a5:05:f2:73:1f:ce:0a:b7:ff:c5:d0:c0:fe:c1:fe:f2:5a:
         5e:d0:1f:69:8d:de:de:e5:37:c4:92:b5:11:c7:94:14:e7:1c:
         21:58:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:37 2026 by rpki-client