Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
File:                     TIqaNuqRWzx9UgH9An2-bMHe9H0.mft (raw, json)
Hash identifier:          F/o0mL6zP76kajrjgYVP6sRSzv4IOPceAvrY1kW7+yA=
Subject key identifier:   6B:39:9A:7D:84:A5:2E:50:86:F1:68:AE:7F:60:E2:69:EF:29:CC:5C
Authority key identifier: 4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D
Certificate issuer:       /CN=A919B8FD/serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
Manifest number:          33
Signing time:             Thu 11 Jun 2026 10:58:34 +0000
Manifest this update:     Thu 11 Jun 2026 10:58:34 +0000
Manifest next update:     Thu 18 Jun 2026 10:58:34 +0000
Files and hashes:         1: TIqaNuqRWzx9UgH9An2-bMHe9H0.crl (hash: WGwdzvD1XSpqbGAENTaFOI4cSkRu6RCn7vqWC2qE/ek=)
                          2: 8565C302193411F1A01740F4343D8C67.roa (hash: Xa8aNC8yN08FK0E304SMW4mGgVgv5gPY8tv9Z+LN8jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.crl
                          rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B8FD, serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
        Validity
            Not Before: Jun 11 10:58:34 2026 GMT
            Not After : Jun 18 10:58:34 2026 GMT
        Subject: CN=6a2a94da-f718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:af:d8:35:4a:bf:7b:04:4a:96:19:8d:96:
                    b9:cd:d8:59:06:12:14:d5:98:98:7c:76:fc:71:1c:
                    c4:67:d6:cf:2d:49:cc:c5:e7:a2:21:ff:50:b8:6e:
                    5a:20:a7:db:72:9f:cc:35:0c:c0:8d:59:a7:d8:a5:
                    cd:3b:88:45:6a:78:fe:59:d5:2f:da:ce:ea:e1:53:
                    43:ca:ee:95:8a:27:0a:25:1c:f6:82:bd:0a:c1:54:
                    96:47:ac:6c:31:80:97:fd:03:17:93:43:62:9a:05:
                    56:57:ae:33:f1:dd:1c:a0:a8:05:00:35:e6:e6:94:
                    71:23:06:b9:29:27:b9:45:fb:0e:95:b0:e5:12:8c:
                    08:22:89:82:e4:5f:23:a7:09:e8:0a:e0:e4:13:ac:
                    09:04:88:8b:2c:7f:ac:0e:b3:8f:b6:75:f4:e7:41:
                    5e:13:72:40:7f:e2:33:6a:0e:d1:90:32:52:f0:cf:
                    98:a3:03:ce:e0:66:55:ac:ff:7a:c0:bc:37:6f:33:
                    78:76:37:b8:1f:3d:1d:c1:cc:8e:ed:67:cc:6c:54:
                    6c:9a:8e:09:37:d6:e4:f3:ad:5d:86:3b:25:71:d4:
                    4b:51:3c:60:13:d0:fc:e3:22:e1:b0:13:e4:f2:0d:
                    f8:41:ca:d1:4e:87:e4:77:ab:1d:08:a8:6a:e8:ed:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:39:9A:7D:84:A5:2E:50:86:F1:68:AE:7F:60:E2:69:EF:29:CC:5C
            X509v3 Authority Key Identifier:
                keyid:4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:6f:2b:a0:28:9e:90:ae:8b:59:c5:4d:dd:1d:6e:32:54:
         3a:10:d6:38:3b:49:e7:91:ec:21:14:1e:a7:34:5b:7d:14:a3:
         de:b7:72:72:d3:48:bf:fb:3d:5f:62:0a:0f:71:d0:b4:2c:ff:
         ca:70:3a:83:86:6b:9f:1b:46:60:d3:64:f1:26:31:f4:cb:71:
         30:9e:98:cc:e8:be:a8:a6:0f:9a:f8:7e:e0:72:95:15:f3:c1:
         2a:dd:24:99:75:fd:c5:a2:95:03:f0:eb:c0:e2:7f:4c:40:b2:
         97:85:41:51:83:d9:bd:c8:7e:ed:89:34:67:42:82:b9:54:e6:
         6f:58:d5:56:f3:f9:39:b0:ad:53:06:dc:3b:4e:eb:2c:18:25:
         b1:c4:1b:23:3f:78:8d:da:72:a6:c1:f4:92:68:aa:e1:62:6f:
         2c:46:cf:c8:cc:65:fd:b4:1a:e1:ef:89:42:a6:91:b0:0f:c2:
         79:5a:dd:f1:f7:5e:1d:4c:a7:19:b8:ab:6a:f4:8c:b6:74:06:
         18:45:bb:56:4f:a2:3e:34:c0:2f:95:40:40:b1:15:84:4e:b4:
         58:3d:f6:09:79:01:19:50:26:12:8c:6a:dd:30:93:28:72:44:
         1f:e6:fb:36:6b:ae:ad:bb:d8:ee:ff:78:d0:76:63:42:79:20:
         2e:9e:0c:8f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QjhGRDExMC8GA1UEBRMoNEM4QTlBMzZFQTkxNUIzQzdENTIwMUZEMDI3REJFNkND
MURFRjQ3RDAeFw0yNjA2MTExMDU4MzRaFw0yNjA2MTgxMDU4MzRaMBgxFjAUBgNV
BAMTDTZhMmE5NGRhLWY3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwe6/YNUq/ewRKlhmNlrnN2FkGEhTVmJh8dvxxHMRn1s8tSczF56Ih/1C4blog
p9tyn8w1DMCNWafYpc07iEVqeP5Z1S/azurhU0PK7pWKJwolHPaCvQrBVJZHrGwx
gJf9AxeTQ2KaBVZXrjPx3RygqAUANebmlHEjBrkpJ7lF+w6VsOUSjAgiiYLkXyOn
CegK4OQTrAkEiIssf6wOs4+2dfTnQV4TckB/4jNqDtGQMlLwz5ijA87gZlWs/3rA
vDdvM3h2N7gfPR3BzI7tZ8xsVGyajgk31uTzrV2GOyVx1EtRPGAT0PzjIuGwE+Ty
DfhBytFOh+R3qx0IqGro7Tx3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUazmafYSl
LlCG8Wiuf2Diae8pzFwwHwYDVR0jBBgwFoAUTIqaNuqRWzx9UgH9An2+bMHe9H0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCOEZELzQ5NTkxNEY0MTkz
NDExRjE5M0NGREM5NDMzM0Q4QzY3L1RJcWFOdXFSV3p4OVVnSDlBbjItYk1IZTlI
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVElxYU51cVJXeng5VWdIOUFuMi1iTUhlOUgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC
OEZELzQ5NTkxNEY0MTkzNDExRjE5M0NGREM5NDMzM0Q4QzY3L1RJcWFOdXFSV3p4
OVVnSDlBbjItYk1IZTlIMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBitG8roCiekK6LWcVN3R1uMlQ6ENY4O0nnkewhFB6nNFt9FKPet3Jy00i/+z1f
YgoPcdC0LP/KcDqDhmufG0Zg02TxJjH0y3EwnpjM6L6opg+a+H7gcpUV88Eq3SSZ
df3FopUD8OvA4n9MQLKXhUFRg9m9yH7tiTRnQoK5VOZvWNVW8/k5sK1TBtw7Tuss
GCWxxBsjP3iN2nKmwfSSaKrhYm8sRs/IzGX9tBrh74lCppGwD8J5Wt3x914dTKcZ
uKtq9Iy2dAYYRbtWT6I+NMAvlUBAsRWETrRYPfYJeQEZUCYSjGrdMJMockQf5vs2
a66tu9ju/3jQdmNCeSAungyP
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:21 2026 by rpki-client