Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File:                     tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier:          gzHf0mPx/raIZ9Pm9k/deyBX1J5VV9fGQc9tVT7Wqi8=
Subject key identifier:   E0:F2:96:70:5D:87:DB:81:2E:02:51:15:D2:A6:55:98:91:7C:F1:9E
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer:       /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial:       02FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number:          02ED
Signing time:             Fri 17 Apr 2026 01:11:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:11:52 +0000
Manifest next update:     Fri 24 Apr 2026 01:11:52 +0000
Files and hashes:         1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: LnjMZ+FY1PpAr6uF4m6bGnq3CW8r/+n4HVvmgLyKH2c=)
                          2: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: k7oa0gyVDVstpxNJdtdSBjaevXmXY8KxLGB4YjxHPeM=)
                          3: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: zLRwlyYQoMCNATwicvYcavIJagOdRZfxbGUFbhuhVoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
                          rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
        Validity
            Not Before: Apr 17 01:11:52 2026 GMT
            Not After : Apr 24 01:11:52 2026 GMT
        Subject: CN=69e188d9-0c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:72:63:00:20:4a:66:94:46:ef:b5:3e:d0:
                    9f:dc:97:ac:bf:ce:ab:fe:ca:ab:f7:55:ba:fa:aa:
                    f5:90:6b:b5:fd:a2:2f:ef:4f:c3:11:0c:c7:ca:d2:
                    73:ac:a8:ec:4f:c1:e7:e4:e3:a2:36:0c:b2:15:31:
                    8c:51:ae:0d:10:17:ea:74:4b:dd:15:33:b0:0f:7b:
                    e2:c3:8d:b4:24:c5:bc:f7:d2:6f:95:44:5c:84:c8:
                    25:7c:6c:9e:b7:f5:9b:76:8c:ef:92:06:5e:31:c0:
                    1a:a2:3e:cc:ca:34:cd:26:3a:67:59:da:9a:35:11:
                    97:75:50:8b:7d:69:30:7d:d7:d0:a4:89:23:96:fe:
                    e9:d8:95:84:ae:bb:57:e3:a1:42:f5:66:6e:28:6b:
                    e3:ed:f3:66:e8:8d:9a:2b:0e:64:7c:92:3f:96:6f:
                    3d:fd:d8:7d:d4:98:3f:bf:d6:bf:50:0f:9b:11:e9:
                    a4:2f:9a:d5:87:05:8f:8b:f7:53:23:c8:b6:22:0e:
                    19:23:2e:8c:8d:2a:13:50:d5:3b:28:ed:d5:63:31:
                    40:aa:25:04:ae:5e:4b:9f:77:b6:fd:e7:26:e6:25:
                    cd:fb:e1:01:05:5a:25:89:89:98:b2:5a:84:0a:9a:
                    ce:b2:57:32:d6:24:c9:8e:ac:72:95:02:e5:74:d8:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:96:70:5D:87:DB:81:2E:02:51:15:D2:A6:55:98:91:7C:F1:9E
            X509v3 Authority Key Identifier:
                keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:86:da:53:59:5c:1b:86:8e:7e:a7:8d:41:fe:05:9c:72:
         78:93:38:64:1a:21:55:bb:99:53:d5:74:9a:d0:b8:6c:8d:9e:
         a5:eb:8e:0f:cc:be:c7:27:83:c3:d1:8e:b0:5e:c7:29:fd:93:
         6c:47:71:e1:3e:f1:88:a3:ae:56:7a:50:77:f5:00:99:5a:8f:
         ea:82:25:8c:ee:d6:ea:83:ab:61:e9:43:ae:13:25:4a:1d:1d:
         53:50:5e:f8:4b:4c:05:ea:32:51:8c:8c:ad:52:93:0c:b7:73:
         cf:6c:fd:74:63:96:c3:23:73:88:94:3e:16:f1:12:48:19:0a:
         ac:bb:59:82:23:2a:98:7c:cb:cd:9d:e7:6d:91:c1:57:05:08:
         3b:03:ab:9e:b8:05:26:7a:be:b5:b8:2b:df:e3:73:0d:10:57:
         01:44:e0:10:19:48:8c:21:a8:e7:c6:c5:10:46:73:b0:fe:b3:
         59:7e:9a:f9:b3:f1:f6:c6:90:72:a8:99:8d:b4:fc:8d:be:cf:
         e1:a8:fe:5a:bd:b1:fe:b5:a8:e9:e7:50:0d:0f:35:db:c8:a3:
         d6:48:23:14:3e:7d:ae:9d:64:fa:70:e1:e9:cc:06:25:9b:23:
         e6:7f:de:25:21:51:f7:06:25:ac:50:8e:be:38:24:27:a9:1b:
         26:13:4b:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjczNEIzODFDREVD
OTI4OTQ3NDgwHhcNMjYwNDE3MDExMTUyWhcNMjYwNDI0MDExMTUyWjAYMRYwFAYD
VQQDEw02OWUxODhkOS0wYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2k1yYwAgSmaURu+1PtCf3Jesv86r/sqr91W6+qr1kGu1/aIv70/DEQzHytJz
rKjsT8Hn5OOiNgyyFTGMUa4NEBfqdEvdFTOwD3viw420JMW899JvlURchMglfGye
t/WbdozvkgZeMcAaoj7MyjTNJjpnWdqaNRGXdVCLfWkwfdfQpIkjlv7p2JWErrtX
46FC9WZuKGvj7fNm6I2aKw5kfJI/lm89/dh91Jg/v9a/UA+bEemkL5rVhwWPi/dT
I8i2Ig4ZIy6MjSoTUNU7KO3VYzFAqiUErl5Ln3e2/ecm5iXN++EBBVoliYmYslqE
CprOslcy1iTJjqxylQLldNgZYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODylnBd
h9uBLgJRFdKmVZiRfPGeMB8GA1UdIwQYMBaAFLYBIUyWKMn0IdNnNLOBzeySiUdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTQ0Ri85MDEyQ0E0NDIy
ODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lmUWgwMmMwczRITjdKS0pS
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnRWhUSllveWZRaDAyYzBzNEhON0pLSlIwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZb3lm
UWgwMmMwczRITjdKS0pSMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe3eG2lNZXBuGjn6njUH+BZxyeJM4ZBohVbuZU9V0mtC4bI2epeuOD8y+xyeD
w9GOsF7HKf2TbEdx4T7xiKOuVnpQd/UAmVqP6oIljO7W6oOrYelDrhMlSh0dU1Be
+EtMBeoyUYyMrVKTDLdzz2z9dGOWwyNziJQ+FvESSBkKrLtZgiMqmHzLzZ3nbZHB
VwUIOwOrnrgFJnq+tbgr3+NzDRBXAUTgEBlIjCGo58bFEEZzsP6zWX6a+bPx9saQ
cqiZjbT8jb7P4aj+Wr2x/rWo6edQDQ8128ij1kgjFD59rp1k+nDh6cwGJZsj5n/e
JSFR9wYlrFCOvjgkJ6kbJhNLsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:56 2026 by rpki-client