Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
File:                     TIqaNuqRWzx9UgH9An2-bMHe9H0.mft (raw, json)
Hash identifier:          ad4algDrFioJaSAUZumNkFI5lO7Q+6WKmamaXw+cWpc=
Subject key identifier:   98:D9:37:7E:4E:0B:36:BB:AE:03:1E:10:6B:3C:90:8F:8D:50:36:E4
Authority key identifier: 4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D
Certificate issuer:       /CN=A919B8FD/serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
Manifest number:          18
Signing time:             Fri 17 Apr 2026 08:40:53 +0000
Manifest this update:     Fri 17 Apr 2026 08:40:53 +0000
Manifest next update:     Fri 24 Apr 2026 08:40:53 +0000
Files and hashes:         1: TIqaNuqRWzx9UgH9An2-bMHe9H0.crl (hash: JduU++VvzoLJuTb+rKi//fIvL0EeVoyXjPgUN6gt8DA=)
                          2: 8565C302193411F1A01740F4343D8C67.roa (hash: Xa8aNC8yN08FK0E304SMW4mGgVgv5gPY8tv9Z+LN8jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.crl
                          rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B8FD, serialNumber=4C8A9A36EA915B3C7D5201FD027DBE6CC1DEF47D
        Validity
            Not Before: Apr 17 08:40:53 2026 GMT
            Not After : Apr 24 08:40:53 2026 GMT
        Subject: CN=69e1f215-66c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:18:3d:56:00:a1:5b:62:e4:22:cf:78:88:
                    e4:a3:e6:71:5a:76:1f:27:f8:15:da:39:48:16:e8:
                    ef:4a:28:6d:34:90:56:77:2a:cf:c6:d8:01:eb:c2:
                    65:27:b7:76:73:7f:27:57:92:aa:d4:e0:08:48:00:
                    f0:34:1c:1f:2e:38:a3:14:74:ce:a5:79:8a:45:44:
                    91:7f:48:df:0a:e0:51:07:18:e0:2f:74:1e:5a:05:
                    4e:bd:25:0f:e5:36:27:ef:54:86:f1:ac:0f:ac:2a:
                    2f:fe:02:2d:d9:76:97:f0:e6:ae:20:9e:3a:d8:60:
                    a3:e1:a7:4d:69:6a:e1:87:2d:4c:0b:c9:75:61:77:
                    8a:2f:5c:29:b0:e0:b4:53:5a:a9:3e:41:c3:35:c4:
                    b2:7b:05:1f:dd:01:fd:48:5b:4a:5e:54:e1:ef:23:
                    39:2d:0c:fe:7a:24:fd:7d:4f:99:ac:aa:b5:c4:92:
                    09:05:80:e2:a2:b3:3b:1e:51:13:e2:7b:64:a2:07:
                    13:8f:71:93:50:31:f8:59:65:d1:e9:99:5b:7f:e7:
                    d4:23:13:23:82:76:5b:50:36:21:72:b0:f9:61:e1:
                    02:ab:f8:6b:58:e1:36:b5:fe:3f:f8:2c:83:24:8d:
                    56:6b:69:55:24:ff:82:a9:7f:17:3b:78:26:df:ab:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D9:37:7E:4E:0B:36:BB:AE:03:1E:10:6B:3C:90:8F:8D:50:36:E4
            X509v3 Authority Key Identifier:
                keyid:4C:8A:9A:36:EA:91:5B:3C:7D:52:01:FD:02:7D:BE:6C:C1:DE:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TIqaNuqRWzx9UgH9An2-bMHe9H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B8FD/495914F4193411F193CFDC94333D8C67/TIqaNuqRWzx9UgH9An2-bMHe9H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:fd:e1:d5:dd:aa:44:17:1d:fc:74:d9:1b:80:32:13:ac:
         f5:39:88:66:c4:07:07:86:67:dd:58:07:9d:71:c9:84:e4:76:
         5e:e3:5b:04:0d:62:60:f2:b2:13:21:54:97:a6:ee:fe:24:ff:
         8a:b1:ff:f1:75:cf:00:13:e6:d4:60:66:2c:d4:c6:6b:03:12:
         dc:85:2a:b5:a1:ee:f2:4f:23:c8:92:ad:13:23:c5:cf:97:41:
         a9:cc:6d:ef:7c:01:19:6f:78:7f:10:56:69:ce:d5:16:de:52:
         c2:40:67:f6:f1:31:4d:54:2c:eb:39:86:20:0b:91:d1:7f:20:
         ab:6b:0d:7a:46:e5:c4:c4:88:e4:70:7b:9e:e3:ce:24:61:db:
         7e:25:6c:94:3a:2a:3c:1f:a2:21:99:50:c4:03:db:09:5f:23:
         cf:25:aa:31:33:5e:99:c3:f7:e4:81:ae:bd:f6:39:37:10:b6:
         39:cc:f0:74:a7:0a:ac:fd:7c:a0:ba:9a:c7:b2:2a:63:3e:16:
         0f:30:a6:41:74:74:cb:70:24:32:d8:01:3b:be:ca:af:51:b6:
         4b:bb:b7:19:8e:89:76:c8:8c:10:4f:00:56:8a:f8:b9:60:d4:
         73:9e:12:19:0a:63:63:2c:3b:67:4a:de:53:d3:17:85:e7:77:
         45:10:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:57 2026 by rpki-client