Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
File:                     TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json)
Hash identifier:          hpFk+tJV7Gj9Xk9JQD1UqKdrpwysf150gDeICq8QDow=
Subject key identifier:   00:07:13:3D:CA:98:52:4D:B0:64:8D:FC:02:A5:D5:36:77:0A:6D:E7
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       199A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
Manifest number:          1955
Signing time:             Thu 16 Apr 2026 16:23:36 +0000
Manifest this update:     Thu 16 Apr 2026 16:23:35 +0000
Manifest next update:     Thu 23 Apr 2026 16:23:35 +0000
Files and hashes:         1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: jpJEMsk1SBlusi5PGZPQ89ZwM235ywvPXcBmnLckGrw=)
                          2: 974F9BA0A87011EFB3944C13C4F9AE02.roa (hash: NzpnX1WtE2mpf3lFdoR3wJBuVxtYUfmLPisZNTkOWjQ=)
                          3: 9680FCD2A87011EFB3944C13C4F9AE02.roa (hash: w+b4Zgmg30gS69MI8U4GqE5qtsO8Z+Rqu1UuRVApfYQ=)
                          4: 8BE1358E350111F1850F2A1285EE528E.roa (hash: Wot74Yhz0AUHTlwE/GCNR2qDk9eiDYMFoNBTC2K9mpI=)
                          5: 8AE56254350111F1850F2A1285EE528E.roa (hash: EVL8w1VZpVQdj+EsP8KpnsmrCBSTcfGw4trEyAyrKbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
                          rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6554 (0x199a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Apr 16 16:23:35 2026 GMT
            Not After : Apr 23 16:23:35 2026 GMT
        Subject: CN=69e10d08-0793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:7d:12:b5:48:c5:1f:d4:0a:6b:fa:3e:5f:
                    29:be:5f:dc:a9:6d:aa:d6:f3:57:70:3b:e5:88:e0:
                    81:a1:5b:11:eb:16:22:ae:99:10:d0:80:29:52:87:
                    dd:95:11:ab:4a:a5:4a:36:32:9e:3e:dd:e1:69:97:
                    58:34:cb:bc:61:0a:59:97:16:ae:47:77:d6:f5:a8:
                    9e:e4:31:2d:e3:39:31:e1:70:8d:9d:1e:49:4a:bd:
                    b8:95:0b:21:53:00:f6:88:09:36:bc:88:b5:fe:8e:
                    4c:de:8c:82:3b:00:4d:6b:07:a9:39:9f:73:6e:d9:
                    44:f8:4f:9c:fb:5c:7d:af:bc:0d:f0:c3:a5:86:ac:
                    5c:63:7d:d8:66:ad:a5:17:62:0f:5a:a2:e4:ab:ed:
                    cc:1a:a2:5a:4c:c2:96:05:7c:80:09:a2:ed:6d:4b:
                    48:97:64:e8:cf:aa:3e:9f:dc:6b:81:1a:0f:9b:a3:
                    52:52:65:a3:7e:09:3d:af:6c:74:3c:8b:ac:02:d5:
                    76:a3:92:34:91:c1:4c:d2:d2:c5:f5:0c:77:5c:b0:
                    2f:55:cd:92:04:2f:c5:19:58:b5:5b:c6:af:6c:d7:
                    ba:75:08:9c:61:93:40:5e:ae:3e:e1:18:b0:9d:86:
                    1b:a4:7d:ee:2f:f3:1f:95:89:7d:f5:cf:45:99:f3:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:13:3D:CA:98:52:4D:B0:64:8D:FC:02:A5:D5:36:77:0A:6D:E7
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:27:bc:7f:98:e8:05:68:23:60:30:5d:44:a4:c5:75:fb:
         6c:69:b6:ba:5c:8f:1b:1c:f9:ba:89:d6:b7:23:5e:82:cc:85:
         4c:48:40:45:a2:36:1c:94:10:62:d2:56:9a:de:1f:63:1a:c3:
         08:28:50:13:9e:7c:96:c3:43:da:5b:67:bb:79:4b:98:f7:f6:
         0b:e9:11:dc:ca:a4:1e:86:d3:23:65:fd:30:49:c8:84:e2:be:
         67:79:c1:51:e1:9d:1d:35:5d:6e:aa:27:00:2d:52:78:b7:bb:
         90:84:ce:9b:cf:75:a4:e4:22:72:41:6e:90:2e:68:00:da:f3:
         e1:41:d1:28:2c:6c:69:56:b2:d9:64:b8:38:bd:f7:64:fa:bf:
         ca:50:4d:19:3d:58:6b:93:e8:fd:8d:e3:ef:57:fa:a4:77:c6:
         aa:b1:34:e2:d8:6d:7f:36:48:8f:09:70:b0:c3:0b:b4:43:2c:
         4a:22:33:9a:af:21:ee:36:86:f5:4a:58:3a:7e:f8:50:c3:71:
         ec:ba:71:e0:ab:cb:de:7e:84:39:01:1a:aa:3e:58:90:ff:a4:
         2f:c3:1c:3c:6f:17:ff:1c:d1:ac:64:1a:40:fd:20:e2:81:2a:
         cc:db:d7:5a:9c:79:28:2c:9e:e2:0b:07:28:cb:77:17:ca:91:
         d9:02:a6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:04 2026 by rpki-client