Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
File:                     tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json)
Hash identifier:          zFJJyn90mCwaiG09OhRvwOXouwjkHRw3oe2ERZKVLiw=
Subject key identifier:   8E:93:DF:29:F6:3B:75:65:FE:C3:54:DE:F4:B9:AD:6C:95:F5:D6:05
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Certificate issuer:       /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
Manifest number:          0255
Signing time:             Fri 17 Apr 2026 02:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:39 +0000
Manifest next update:     Fri 24 Apr 2026 02:01:39 +0000
Files and hashes:         1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: F+GqB7nT6XnXbFpqDnm9o4b0Q/Tk08srRWGUkE/em7U=)
                          2: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: eZ7E672T6C2NAQF7FO/EpOxkj6QwEhrMyFrT7Izg/p4=)
                          3: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: S3mtiXgsL+/eI/0ypZKkTLQQz8Kl0Q3Gz9IYr9ftMk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
                          rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
        Validity
            Not Before: Apr 17 02:01:39 2026 GMT
            Not After : Apr 24 02:01:39 2026 GMT
        Subject: CN=69e19484-a660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:8c:5a:47:6a:43:17:7b:91:62:e8:1f:17:
                    2b:a1:8c:31:f8:ae:7d:23:f0:c5:29:7c:e4:c0:29:
                    a2:d2:48:6c:b5:97:68:9e:53:65:e5:3d:e1:3e:d4:
                    a5:93:c2:71:19:44:ce:dc:c1:f4:5e:64:17:88:5f:
                    72:a4:53:0f:13:85:55:e5:98:fd:c1:ec:51:af:66:
                    3b:47:ad:71:0e:55:ca:7b:da:a2:17:28:06:94:f7:
                    b3:c3:c0:3c:67:c4:7e:ec:b6:91:c7:f0:d2:bd:60:
                    11:49:ee:29:1e:86:e3:d2:d0:89:bf:ab:89:ed:90:
                    0f:c3:55:2b:94:69:11:0a:99:d8:bd:db:e2:12:6d:
                    45:10:c1:d0:12:41:68:02:2a:62:dd:29:71:7c:16:
                    59:6c:2f:39:81:8b:3f:bd:87:5b:e4:00:cd:40:32:
                    b8:cd:3e:ab:a5:4f:75:95:9b:46:97:cc:bb:58:27:
                    ce:ab:2f:b0:de:7f:d5:8a:95:3a:5d:12:0e:39:e2:
                    cd:66:cc:ba:bb:cc:13:b9:59:69:7b:37:a5:26:75:
                    65:a7:c7:20:ec:51:65:79:a8:26:28:6d:c7:8e:0e:
                    48:08:e1:97:09:bc:dd:dd:ad:c5:04:72:2f:de:c2:
                    34:c9:8a:39:06:b3:db:75:46:e2:1d:d6:37:fc:77:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:DF:29:F6:3B:75:65:FE:C3:54:DE:F4:B9:AD:6C:95:F5:D6:05
            X509v3 Authority Key Identifier:
                keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:71:1e:f4:ea:f3:4f:12:1a:71:69:9f:3f:d6:5c:5e:0b:ae:
         cf:f5:63:90:46:ff:17:55:5a:8e:07:5c:07:cc:aa:a0:78:cf:
         67:cb:fc:5e:a2:db:f0:64:ff:3d:3d:31:6b:ee:c7:9d:85:3e:
         e3:5a:e8:fb:55:59:13:ed:4f:32:d1:2e:69:5c:84:7b:73:91:
         93:aa:ca:cc:8d:c8:28:e4:45:d8:64:2e:78:c7:c3:05:27:f2:
         49:4f:82:84:22:75:bf:cb:89:c5:2b:cd:34:42:5b:b8:8b:ef:
         d8:e2:46:86:2c:3e:d7:72:d4:37:08:cc:b0:6c:d0:36:46:a5:
         46:10:7b:73:fb:45:47:6d:91:22:80:49:7c:b0:8f:84:7f:af:
         a4:05:65:3b:07:a9:a6:1b:78:dd:3f:90:69:9e:35:92:b1:76:
         75:4a:12:ec:85:5d:df:19:bc:c2:d4:0f:ce:32:4d:88:f4:f2:
         57:9f:a0:a1:43:9e:a6:0c:aa:ba:e2:a5:a2:51:c5:3c:75:d2:
         a6:fb:e4:c3:1b:8e:e2:79:4a:00:e2:90:82:0b:79:ea:9a:08:
         d4:25:fb:45:97:c6:73:09:8d:c2:ca:a1:d2:45:97:52:b2:25:
         e2:f5:c6:4b:af:30:0a:f7:e5:98:6f:d8:78:03:14:55:ef:20:
         41:c4:22:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy
NEI2OUI5MDAwHhcNMjYwNDE3MDIwMTM5WhcNMjYwNDI0MDIwMTM5WjAYMRYwFAYD
VQQDEw02OWUxOTQ4NC1hNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGyMWkdqQxd7kWLoHxcroYwx+K59I/DFKXzkwCmi0khstZdonlNl5T3hPtSl
k8JxGUTO3MH0XmQXiF9ypFMPE4VV5Zj9wexRr2Y7R61xDlXKe9qiFygGlPezw8A8
Z8R+7LaRx/DSvWARSe4pHobj0tCJv6uJ7ZAPw1UrlGkRCpnYvdviEm1FEMHQEkFo
Aipi3SlxfBZZbC85gYs/vYdb5ADNQDK4zT6rpU91lZtGl8y7WCfOqy+w3n/VipU6
XRIOOeLNZsy6u8wTuVlpezelJnVlp8cg7FFleagmKG3Hjg5ICOGXCbzd3a3FBHIv
3sI0yYo5BrPbdUbiHdY3/HcgcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6T3yn2
O3Vl/sNU3vS5rWyV9dYFMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC
NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL
Vmk2ZDM5NUFremNrdHB1UUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACHEe9OrzTxIacWmfP9ZcXguuz/VjkEb/F1VajgdcB8yqoHjPZ8v8XqLb8GT/
PT0xa+7HnYU+41ro+1VZE+1PMtEuaVyEe3ORk6rKzI3IKORF2GQueMfDBSfySU+C
hCJ1v8uJxSvNNEJbuIvv2OJGhiw+13LUNwjMsGzQNkalRhB7c/tFR22RIoBJfLCP
hH+vpAVlOweppht43T+QaZ41krF2dUoS7IVd3xm8wtQPzjJNiPTyV5+goUOepgyq
uuKlolHFPHXSpvvkwxuO4nlKAOKQggt56poI1CX7RZfGcwmNwsqh0kWXUrIl4vXG
S68wCvflmG/YeAMUVe8gQcQisw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:40:33 2026 by rpki-client