Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File:                     TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier:          102x6Lr7Y9C4VpSWZPhbsL2cC8ElB0LIzcGK3DEn/Pg=
Subject key identifier:   10:0C:EA:D1:61:4F:11:A5:86:03:E2:43:DB:58:91:DB:EA:BA:C8:F5
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer:       /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial:       04B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number:          04A8
Signing time:             Thu 16 Apr 2026 23:50:56 +0000
Manifest this update:     Thu 16 Apr 2026 23:50:56 +0000
Manifest next update:     Thu 23 Apr 2026 23:50:56 +0000
Files and hashes:         1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: yVP9pQZw9t5dtSlNOQYRSYMDFwgQ5SWtTFAGkt8bZ9Q=)
                          2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=)
                          3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
                          rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
        Validity
            Not Before: Apr 16 23:50:56 2026 GMT
            Not After : Apr 23 23:50:56 2026 GMT
        Subject: CN=69e175e0-4576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:a8:b1:69:b1:06:5a:95:fe:a4:9b:01:a0:
                    4a:0d:a2:15:d9:eb:8c:ef:02:8d:56:55:86:0d:f1:
                    0b:25:42:55:03:ac:fe:f5:6e:7e:3b:ba:ed:84:32:
                    75:9e:de:9c:c5:0e:df:8f:e7:21:77:2b:f4:17:bb:
                    7b:b2:a0:13:9b:91:6c:30:25:eb:7f:3d:a9:e5:07:
                    33:36:e6:7c:e5:bf:a2:59:1f:3f:ca:aa:2f:e3:09:
                    6c:ee:50:eb:84:3c:98:f6:49:05:55:98:ef:4b:d9:
                    af:b3:7e:d8:75:1a:6d:63:ce:2c:c0:c9:4f:ce:c2:
                    f5:27:17:57:cc:a0:7d:46:79:7d:3a:94:4f:fc:28:
                    50:c8:50:a6:6d:53:76:fe:7f:23:b2:73:41:1c:3f:
                    3e:ad:fb:d4:6f:24:e8:1c:ab:98:24:f8:c1:c5:00:
                    15:d7:7f:10:ec:44:8c:2b:61:73:15:41:d9:4a:cf:
                    5f:35:9b:c0:28:58:62:d8:87:a5:1a:31:12:2b:17:
                    c9:96:40:fd:5e:c7:79:eb:d1:dc:48:43:e5:a5:7e:
                    ea:07:fa:be:ca:26:e4:d3:88:33:61:ce:e2:b5:be:
                    b1:cb:5f:44:77:bd:66:d3:84:d0:bc:05:dd:a1:b3:
                    5b:4a:15:e6:fe:ae:7c:40:ca:08:3b:0a:88:cd:76:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0C:EA:D1:61:4F:11:A5:86:03:E2:43:DB:58:91:DB:EA:BA:C8:F5
            X509v3 Authority Key Identifier:
                keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:d1:14:e4:56:11:d6:a5:48:e9:e3:37:d3:78:61:7e:d4:
         cb:bb:80:aa:0b:3d:97:9c:08:76:11:7e:81:85:20:33:53:a9:
         7e:ba:74:12:cc:4e:80:e3:96:75:8f:e6:2e:51:01:c7:76:80:
         1c:59:4f:30:c4:7c:36:06:5e:b6:1a:6f:37:94:ab:33:92:30:
         53:bd:b8:6b:37:0e:bf:b6:d2:95:26:71:66:0f:db:ff:2f:ee:
         90:1a:da:00:2f:47:c9:43:dd:0f:3e:61:2b:42:91:dd:ee:47:
         33:7e:a7:74:39:b9:65:df:cb:30:ee:2f:72:f8:e8:32:f7:35:
         01:01:51:a9:db:4e:38:de:bd:e1:3e:d7:67:03:12:cd:bd:ee:
         e8:70:50:19:eb:43:82:e4:8d:73:9c:51:49:27:19:0d:0f:71:
         c4:e3:26:a3:88:36:8a:70:17:fc:96:2a:e9:b3:5b:b2:35:f2:
         63:aa:78:93:b1:16:9d:2c:5a:56:83:76:e6:4c:74:34:06:0f:
         56:47:89:e4:da:a2:80:50:dd:e3:d8:2f:79:d4:55:52:84:87:
         92:50:9f:d3:69:ce:3c:e9:9d:a4:90:09:91:09:a4:9a:c8:6c:
         cd:50:ae:d7:19:ee:44:fd:9a:ba:48:df:02:e1:b3:72:39:88:
         fb:32:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:10:43 2026 by rpki-client