Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
File:                     tKtoly4-518HsSc9r-d6HC28-cs.mft (raw, json)
Hash identifier:          Jc4Iszfa6nbGKKbonu8Oje9x2fNG0H/A5u8PyivjzQc=
Subject key identifier:   7E:1B:2D:0D:84:B0:68:03:26:CD:E1:11:5F:14:6A:44:13:B7:5A:6B
Authority key identifier: B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB
Certificate issuer:       /CN=A91A2886/serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
Manifest number:          3C
Signing time:             Sat 13 Jun 2026 08:37:14 +0000
Manifest this update:     Sat 13 Jun 2026 08:37:13 +0000
Manifest next update:     Sat 20 Jun 2026 08:37:13 +0000
Files and hashes:         1: tKtoly4-518HsSc9r-d6HC28-cs.crl (hash: /V8wBox7Ts1te+kHXJDTNbd013/aasQmEaqgCTJ2QtA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl
                          rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2886, serialNumber=B4AB68972E3EE75F07B1273DAFE77A1C2DBCF9CB
        Validity
            Not Before: Jun 13 08:37:13 2026 GMT
            Not After : Jun 20 08:37:13 2026 GMT
        Subject: CN=6a2d16ba-8f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:4b:7e:2e:8f:c8:1a:a2:4e:34:27:8b:28:
                    a2:7d:a4:4c:d9:c4:54:a4:63:e9:a3:d8:5e:fc:8c:
                    91:90:dc:b0:5c:1e:4d:82:a4:77:39:e5:f2:d3:0d:
                    1b:97:e5:4b:c1:15:24:ef:08:38:de:ad:b3:6e:c9:
                    9e:18:38:6c:96:5b:8a:c9:e3:2e:fa:07:d4:34:d5:
                    d4:98:51:6b:d9:f2:68:3b:fb:fc:4d:cd:7f:ee:2b:
                    a8:5c:61:08:b3:f6:0b:7d:25:59:d6:55:8f:4e:22:
                    e9:ee:80:a3:b7:60:88:49:39:6f:44:bd:f2:8b:e3:
                    cb:35:b2:98:1a:43:4c:91:2d:7b:be:83:46:d8:4f:
                    21:0d:a5:82:8f:28:15:3a:9c:84:53:d7:25:61:d9:
                    66:7a:fe:89:70:6e:2b:db:0a:ac:ea:55:e5:78:c3:
                    08:0d:27:21:e7:fd:1b:a2:cd:58:04:31:67:55:4e:
                    0e:c6:be:2f:6b:f4:e9:fc:b0:f1:51:d6:64:00:5c:
                    c0:88:6d:35:75:03:9c:b2:8b:43:bd:a0:66:c4:b5:
                    95:8f:1e:0d:f6:8d:d1:c5:02:c2:13:aa:b5:86:e1:
                    a5:9f:cb:83:c2:b1:bf:67:d1:3f:f2:7f:09:73:57:
                    9d:43:b4:fd:dd:0d:ea:6a:87:34:a5:99:83:6e:58:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1B:2D:0D:84:B0:68:03:26:CD:E1:11:5F:14:6A:44:13:B7:5A:6B
            X509v3 Authority Key Identifier:
                keyid:B4:AB:68:97:2E:3E:E7:5F:07:B1:27:3D:AF:E7:7A:1C:2D:BC:F9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKtoly4-518HsSc9r-d6HC28-cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/6C55453410A311F1BE72B5AF393D8C67/tKtoly4-518HsSc9r-d6HC28-cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:22:91:17:be:fa:e8:21:5a:6a:91:51:b5:03:52:99:75:
         c5:9d:ad:bc:66:ff:d4:5b:f7:4f:e0:71:3a:0c:48:32:11:2b:
         ca:da:7e:9a:d9:1d:f5:d3:c8:2a:2d:37:4d:ea:19:b9:b0:30:
         38:21:0b:20:53:39:4a:26:b1:28:16:a7:2d:2f:35:7a:26:78:
         ed:70:ba:b1:99:0c:f7:93:3c:18:f2:40:5a:51:bb:e2:ea:28:
         2e:9e:d4:5b:9a:95:a7:2b:09:e2:dc:61:39:dd:69:93:a7:fe:
         38:37:7d:4e:14:2c:b5:7a:5f:38:c3:c5:b1:91:63:9c:3c:b8:
         68:60:23:c8:b7:6f:79:f2:c0:ff:38:b3:84:c8:b2:cf:c8:70:
         79:17:02:e9:48:32:eb:1e:fd:14:51:6f:22:b1:79:05:89:fd:
         5f:23:6b:e1:7b:d4:f0:3a:0c:f4:a5:78:bf:af:07:ad:a3:d3:
         26:7d:ad:26:0b:7c:ad:34:8a:71:3e:4c:98:81:e4:d4:55:c7:
         11:9e:25:e8:aa:af:b5:e9:30:e6:f9:4a:f5:0d:64:b4:4b:9e:
         73:07:fd:72:60:cc:4f:b4:4a:6f:9a:5d:58:b7:ed:50:5e:70:
         83:6a:aa:20:b3:00:44:a1:95:1d:36:1d:3d:39:ae:03:10:7a:
         c4:49:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:03:16 2026 by rpki-client