Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File:                     TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier:          eb3eP+1MKSc6MpsALfCYAyOBz64AZm1cnKeHlqgJRC4=
Subject key identifier:   F4:52:16:58:EA:AA:14:F6:55:AE:EB:34:02:98:70:F4:87:57:E4:F9
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer:       /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial:       07EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number:          07CC
Signing time:             Thu 16 Apr 2026 21:18:07 +0000
Manifest this update:     Thu 16 Apr 2026 21:18:07 +0000
Manifest next update:     Thu 23 Apr 2026 21:18:07 +0000
Files and hashes:         1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: DzYpeJfwXStDiI7iZTc7RX5lwPFe4wA6rwYqSvdbQ50=)
                          2: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
                          3: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
                          4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
                          rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
        Validity
            Not Before: Apr 16 21:18:07 2026 GMT
            Not After : Apr 23 21:18:07 2026 GMT
        Subject: CN=69e1520f-7949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:3b:38:9c:0a:bd:23:0f:02:d4:98:12:28:
                    8f:c9:6d:be:f6:1f:13:52:ff:6a:fa:91:1d:ce:04:
                    4f:78:cb:79:e6:34:2c:37:a6:39:56:c2:81:bd:a9:
                    cf:ac:11:b2:43:50:31:0c:ac:03:8b:83:c6:a5:44:
                    9c:bd:09:42:d5:2a:8a:ce:a3:10:ad:b3:b8:a1:44:
                    f5:ef:92:87:d3:b4:88:a6:f2:68:fe:fb:48:41:89:
                    a4:46:69:df:98:8b:bf:d8:22:18:78:9b:5f:2c:5d:
                    a4:31:2c:c9:7f:b2:0a:32:74:70:5a:2c:4b:42:c3:
                    7d:f4:48:34:d5:4a:c6:ea:f3:3c:26:14:99:51:7c:
                    bf:4c:42:09:8b:d4:f3:b2:d9:1a:5d:c3:68:9d:63:
                    bc:8e:69:27:a9:31:a0:d7:72:98:95:b4:e1:36:09:
                    c3:8e:cf:54:9c:16:f2:e3:94:58:1f:f9:3f:58:fc:
                    e2:6b:1e:8b:e6:2e:24:f9:e2:30:e2:7f:cc:d0:ba:
                    f0:a2:21:41:68:3d:4a:20:e7:10:c0:46:67:75:63:
                    09:eb:9e:68:cd:35:79:88:e4:bf:8c:e5:9b:35:4e:
                    a7:b7:b9:68:c3:c7:a4:d3:35:3e:50:2d:9f:0b:6b:
                    02:6f:50:c6:39:55:85:67:5e:e2:c1:60:b6:17:1d:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:52:16:58:EA:AA:14:F6:55:AE:EB:34:02:98:70:F4:87:57:E4:F9
            X509v3 Authority Key Identifier:
                keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:50:84:8b:1b:33:e5:d9:a4:8c:ef:7e:ea:93:0b:a0:be:9e:
         76:86:fe:19:83:77:da:51:d0:fb:8e:95:19:58:ec:e0:9a:3d:
         be:66:70:44:b4:73:b1:5c:48:27:e9:4a:ed:b7:43:70:dd:8a:
         f5:8e:56:96:bf:f3:53:2c:90:11:c4:2f:b4:ce:85:59:93:94:
         d9:15:8c:11:d8:e3:09:f7:dd:5f:67:a1:d0:5a:5c:77:74:e5:
         4e:1d:85:b2:2f:5d:b0:e6:4e:41:30:b7:86:c2:a4:fd:ce:d8:
         a0:a1:41:c8:a3:00:95:7f:78:e1:e7:46:e0:e1:88:3a:62:47:
         8a:a3:4b:da:21:d9:64:6e:33:04:64:48:6d:4c:0a:4b:ac:85:
         de:99:39:c6:b3:78:27:ad:c1:03:2d:3f:65:b7:7a:16:0a:84:
         a2:c0:9d:5a:15:8c:ea:17:38:71:ed:65:82:89:ea:ca:c7:51:
         ef:c7:77:93:c0:f3:0a:cf:8d:e5:93:89:a5:ef:cd:ef:3f:71:
         19:a6:5e:c8:8e:1f:6c:5d:03:d5:d4:7d:fc:01:d6:20:83:00:
         7a:7a:76:f1:3a:e7:59:ae:f8:f7:65:eb:d0:e5:cb:7f:08:3f:
         b5:6e:11:19:52:b7:46:70:5a:96:ac:01:97:cc:49:1d:d3:f3:
         b2:11:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:04 2026 by rpki-client