Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
File:                     TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft (raw, json)
Hash identifier:          bKUxvSZYU77lSRlpZc8zZrrXsXtRLHOJ2sAyjhToSsc=
Subject key identifier:   5E:26:F8:B8:71:C4:43:33:1C:BA:18:02:AA:4C:82:B4:3D:53:58:53
Authority key identifier: 4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31
Certificate issuer:       /CN=A919FC57/serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
Manifest number:          09
Signing time:             Sat 13 Jun 2026 09:15:04 +0000
Manifest this update:     Sat 13 Jun 2026 09:15:03 +0000
Manifest next update:     Sat 20 Jun 2026 09:15:03 +0000
Files and hashes:         1: TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl (hash: f8sdWCVdgScs5AJjLltHkVQdMIKijxDOQ3yqWefPKIU=)
                          2: 7F6617725EE411F1B0096E1CFD79AC22.roa (hash: iEtERU/YxbdfzHAt/g+SXbLAaj7SO/HjyfXDuyj6Hkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl
                          rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FC57, serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
        Validity
            Not Before: Jun 13 09:15:03 2026 GMT
            Not After : Jun 20 09:15:03 2026 GMT
        Subject: CN=6a2d1f97-725c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:89:2e:13:57:fb:3a:03:b9:9a:24:60:e4:
                    b7:aa:e4:cb:43:92:5b:1b:20:43:f8:be:9b:e6:2f:
                    39:d9:b5:7a:ae:ae:2e:99:1d:a2:66:c0:93:30:45:
                    db:40:c3:f8:c0:d6:86:a8:19:9f:9b:cb:f1:62:bd:
                    ef:17:de:cd:f7:cc:72:1b:bf:46:47:92:dc:a0:d5:
                    c8:06:2e:c8:65:e8:88:cf:ac:b3:b3:db:d2:47:4d:
                    60:0c:b7:0c:ea:1c:1b:92:49:7c:8a:37:f1:1b:51:
                    ed:70:fe:82:c3:33:f1:d7:63:44:a3:a6:49:77:5a:
                    d4:3b:22:8c:2a:8a:38:73:cc:51:56:d7:06:b4:bd:
                    55:84:4f:36:28:f7:e5:78:b7:01:c7:3a:21:a3:30:
                    23:ad:9b:71:fa:96:f3:6d:a0:7f:f9:cc:61:62:65:
                    6b:0e:c8:04:24:b3:eb:14:29:4b:72:6f:0b:4d:84:
                    3d:f1:79:ab:e3:ee:a9:35:44:b8:cf:11:2d:23:0c:
                    89:c2:d6:11:a7:5b:1b:1a:9f:75:fa:e0:f3:b1:d1:
                    e7:98:69:37:38:3d:5b:d8:e8:41:66:7d:ea:76:27:
                    cd:9d:33:5f:87:09:53:78:f1:c4:9c:92:b8:70:3d:
                    a4:6c:76:fe:e8:96:88:8a:ee:47:a6:3c:38:4e:cb:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:F8:B8:71:C4:43:33:1C:BA:18:02:AA:4C:82:B4:3D:53:58:53
            X509v3 Authority Key Identifier:
                keyid:4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:6b:a4:00:d3:cb:e8:2a:9e:f8:dc:dc:b0:c8:9b:e5:f0:
         55:ba:0f:4e:4b:08:f8:73:d8:c7:51:be:ef:9c:d1:88:a6:bf:
         82:f6:9a:a8:64:58:37:a3:22:fe:f5:a5:61:34:55:ff:c9:b3:
         80:bf:4d:8c:23:12:cb:aa:dc:14:93:c5:4a:d7:59:6a:10:7c:
         d9:15:1f:5c:bb:7a:bc:7f:16:71:96:59:99:07:39:af:05:26:
         d5:75:90:33:8f:f6:bc:17:77:0c:fb:21:8b:25:f9:d3:40:32:
         05:8c:e3:71:a9:a9:f5:c0:35:ed:21:96:b5:6f:e8:2f:8c:95:
         f4:dd:23:7c:cb:a0:76:b8:f7:37:4a:d6:cc:92:42:57:a2:54:
         42:b0:66:27:75:87:46:6a:09:30:cf:32:56:ff:d0:a4:3e:2b:
         df:4f:c3:cb:a5:50:72:03:75:e6:18:2b:83:21:98:d3:9c:08:
         3d:d0:15:47:43:30:2d:ae:85:70:16:57:e5:ac:2a:6b:dd:73:
         eb:88:ac:74:93:3f:8b:da:77:f9:77:74:e2:54:98:36:1d:5b:
         7c:1e:9e:5e:90:05:d5:ad:1c:90:3f:3b:4a:c6:67:be:2d:1b:
         e2:cb:8b:fb:0c:e3:bf:e7:37:77:0d:8f:68:bd:b6:cf:f2:6d:
         e6:6d:1b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:40:30 2026 by rpki-client