Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
File:                     TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft (raw, json)
Hash identifier:          hajm9THwYbVHuuLqHk0IWd/yuEoORMPr5NohVaJrUKo=
Subject key identifier:   51:48:59:82:EA:19:AF:2B:34:DC:EF:4F:BD:20:31:0F:F4:C6:07:06
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
Manifest number:          0268
Signing time:             Fri 17 Apr 2026 02:16:57 +0000
Manifest this update:     Fri 17 Apr 2026 02:16:56 +0000
Manifest next update:     Fri 24 Apr 2026 02:16:56 +0000
Files and hashes:         1: TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl (hash: nGYLZGqAu9oE1DXjP4MUC/IMkkioXI6Ju9Ed7TTCkew=)
                          2: B029CB28E36C11EF876EED6BC4F9AE02.roa (hash: Nk/g84duKOL84EOqCsGJGsJdoLwJbBNblBDdMjJDacY=)
                          3: AF4851DEE36C11EF876EED6BC4F9AE02.roa (hash: EtO6wbraksayLXE18v91zlhc7ewTBueQmyYuDQn9f80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Apr 17 02:16:56 2026 GMT
            Not After : Apr 24 02:16:56 2026 GMT
        Subject: CN=69e19818-324e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:17:d8:2f:d1:f6:f2:4e:fa:ca:6d:1c:86:
                    ac:56:3c:18:c4:9e:9b:86:53:ee:b3:50:9c:61:f2:
                    f2:1a:c0:5f:93:6d:1c:e1:75:3e:af:d2:3d:21:c0:
                    9e:6d:cc:ac:4c:19:e6:fb:2c:0a:7e:dc:3c:b7:72:
                    6a:08:7a:f2:b0:29:65:f0:d6:a1:c0:37:f6:49:5e:
                    f6:db:95:37:b5:c9:34:fc:9e:31:d8:87:af:48:c3:
                    af:01:33:99:c5:45:5d:37:98:f4:8b:52:a2:f2:8d:
                    c2:84:81:2c:ee:ca:5a:43:a0:24:be:3a:9d:64:1d:
                    7e:f9:0c:8c:d6:ff:e6:cc:7f:3c:af:99:b1:fc:62:
                    56:97:00:37:d6:64:01:de:82:ac:81:f5:c8:fe:8b:
                    79:b8:92:c4:4b:4a:cc:73:d5:61:63:3e:c1:4f:13:
                    df:20:f5:00:4b:57:fe:bf:33:73:3e:cc:71:a8:6d:
                    30:8e:8a:c7:cc:7e:74:59:c2:23:5f:3a:67:f7:4e:
                    a5:e8:77:87:db:89:9e:63:f4:7b:4a:24:a6:2a:a2:
                    e3:c3:1e:08:44:90:32:f8:22:a6:23:d1:d7:48:ca:
                    cf:ab:a4:97:0b:7a:d3:61:c6:88:0f:8e:19:89:49:
                    8a:10:a9:81:f9:21:7f:04:54:64:dd:fa:1b:c9:fc:
                    0b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:59:82:EA:19:AF:2B:34:DC:EF:4F:BD:20:31:0F:F4:C6:07:06
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ab:5c:e9:14:23:1c:8c:c0:90:09:3e:e3:c0:92:0d:a9:c6:
         5f:2c:35:00:c8:b8:ed:aa:0d:03:79:6e:74:51:00:5d:14:1a:
         d2:a0:10:4d:58:71:13:8b:57:ab:d9:3b:4e:73:26:6c:a5:cf:
         bb:af:2e:ba:74:c2:3a:0d:85:f8:05:03:32:48:9c:a3:9e:02:
         36:e6:96:4c:95:ec:be:dd:36:db:c4:2d:9a:46:72:35:29:d9:
         25:ab:ad:7e:89:cd:63:18:5e:bd:ac:10:6d:dd:2c:51:f5:3d:
         f4:5f:fd:9d:bf:8f:ec:4a:72:fd:36:b5:54:5a:2d:a7:0a:1d:
         65:b4:29:cd:a5:a7:c7:d4:ae:18:21:81:22:b9:ca:e7:bf:76:
         be:4b:ba:6e:2b:f4:fb:ca:fb:cb:9f:86:47:48:84:65:36:34:
         c2:a7:d7:03:b1:a3:2a:aa:00:9f:82:c0:0d:76:9f:31:74:95:
         50:a3:8f:25:53:c3:99:88:1c:df:ca:b2:ad:e7:f1:c3:73:a5:
         58:89:7d:30:2e:5a:9f:74:2d:61:c4:d1:1f:8a:bd:1e:2a:0b:
         72:a5:4b:8e:35:c7:37:05:11:b6:e7:db:0e:a2:55:25:91:61:
         0e:c5:7e:5d:dc:26:0d:00:e7:71:34:4c:22:87:df:85:12:95:
         8d:36:89:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:55:12 2026 by rpki-client