Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
File:                     TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft (raw, json)
Hash identifier:          p24CSdEh97OYHPAJiELFdtkIIyGyQeXJicZ/CfxJNc0=
Subject key identifier:   98:36:2F:E1:92:60:D9:86:5E:E2:D0:7C:43:0E:0F:3E:1A:D1:92:AE
Authority key identifier: 4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96
Certificate issuer:       /CN=A91ADCB5/serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
Manifest number:          2B
Signing time:             Sat 13 Jun 2026 08:50:47 +0000
Manifest this update:     Sat 13 Jun 2026 08:50:47 +0000
Manifest next update:     Sat 20 Jun 2026 08:50:47 +0000
Files and hashes:         1: TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl (hash: 6AonRJIby4ME4RZ5OasVe4fbw1oAy8nDiuY6lKtaa3k=)
                          2: 444120CE2D6111F1A40866B8CB833773.roa (hash: ZAH3UvNZsRyQgkmq6DAPegLexqNQ6jKxjrSkeAlJ2aM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADCB5, serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
        Validity
            Not Before: Jun 13 08:50:47 2026 GMT
            Not After : Jun 20 08:50:47 2026 GMT
        Subject: CN=6a2d19e7-d37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:e1:01:90:7d:d7:ab:87:40:32:18:96:a7:
                    87:bf:71:3e:f7:81:6f:1f:18:21:6b:ed:4e:d8:bc:
                    23:48:eb:9c:60:84:a8:3f:12:0f:32:d5:33:66:85:
                    16:b6:dc:fe:53:87:4b:d0:79:25:38:bb:96:ba:7a:
                    11:0b:c1:be:63:a9:91:05:6a:6c:bb:7f:bd:83:fc:
                    52:21:de:a6:84:ed:f7:f4:ee:82:2d:fb:97:2d:00:
                    e0:46:29:6f:88:03:62:19:6b:b5:c2:f0:b4:f3:34:
                    27:a4:92:2f:a8:6e:b0:fd:9f:23:37:af:11:22:3d:
                    81:2e:f7:d8:02:14:24:25:2c:b5:26:e2:2c:34:8f:
                    79:f7:9d:43:e2:24:ed:76:06:0a:e4:d4:17:ff:53:
                    56:8c:a4:53:0a:b6:3b:d3:b2:93:3a:5b:fb:ba:82:
                    a8:3c:7c:98:e4:fe:b4:d4:ee:75:b6:8f:9a:b2:33:
                    07:ee:f0:8c:84:9e:0c:ad:d4:45:f0:4a:2b:d0:b3:
                    4c:4a:4a:b1:b8:7b:ef:40:fe:aa:19:dc:c9:7e:13:
                    0b:2f:08:89:8b:dd:9d:5c:18:97:47:a5:34:3b:ee:
                    d4:16:59:9c:7d:c2:fa:0b:31:94:2a:e7:71:5d:36:
                    a8:76:02:c1:dc:10:82:ec:4e:54:21:e9:73:db:df:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:36:2F:E1:92:60:D9:86:5E:E2:D0:7C:43:0E:0F:3E:1A:D1:92:AE
            X509v3 Authority Key Identifier:
                keyid:4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:f0:dc:36:af:42:6a:a3:05:e0:4f:5a:98:16:23:82:c8:
         ce:5d:36:dd:4b:52:3b:37:26:cf:31:91:3a:37:08:25:5a:41:
         29:7b:57:99:70:1a:95:b5:42:eb:c6:b4:d5:a6:f7:90:01:c2:
         e6:f1:5e:8c:18:9c:bb:bf:af:52:27:33:d2:4e:ba:a5:13:68:
         41:02:09:9f:b8:2b:4e:1e:21:48:c8:8a:bf:4d:0c:fe:90:34:
         a5:8e:71:28:a5:b7:f3:07:8e:68:70:55:23:26:43:7f:2b:d9:
         5e:b7:81:40:88:b6:d9:05:c5:3c:5c:af:2b:20:c2:4d:97:1e:
         27:fa:f1:9d:81:95:b4:55:a6:2d:bd:53:88:88:92:b7:ba:71:
         52:8b:4c:08:66:db:a2:d4:2d:23:08:83:22:a1:4d:eb:22:14:
         74:39:ff:8c:e1:31:09:4d:4a:2f:b5:43:b6:4c:5e:4a:7e:92:
         72:c4:c3:1e:e3:ce:44:c1:23:20:8c:c3:69:1b:e2:8d:a2:8a:
         fc:30:b2:f1:f7:24:07:35:ba:3d:9a:58:e0:3a:07:c7:87:bf:
         6c:3d:90:fe:34:4f:45:a1:07:49:3a:d6:5b:b9:1b:d6:74:a7:
         f9:39:06:38:ec:18:9a:c7:d1:59:ad:95:19:13:7d:a3:35:4c:
         4d:ba:64:4c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RENCNTExMC8GA1UEBRMoNEREODAzQTJCMTQ5NjkyNTg5QzhCNTkzNUJFNTMwMTBG
ODZGM0Y5NjAeFw0yNjA2MTMwODUwNDdaFw0yNjA2MjAwODUwNDdaMBgxFjAUBgNV
BAMTDTZhMmQxOWU3LWQzN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw3uEBkH3Xq4dAMhiWp4e/cT73gW8fGCFr7U7YvCNI65xghKg/Eg8y1TNmhRa2
3P5Th0vQeSU4u5a6ehELwb5jqZEFamy7f72D/FIh3qaE7ff07oIt+5ctAOBGKW+I
A2IZa7XC8LTzNCekki+obrD9nyM3rxEiPYEu99gCFCQlLLUm4iw0j3n3nUPiJO12
Bgrk1Bf/U1aMpFMKtjvTspM6W/u6gqg8fJjk/rTU7nW2j5qyMwfu8IyEngyt1EXw
SivQs0xKSrG4e+9A/qoZ3Ml+EwsvCImL3Z1cGJdHpTQ77tQWWZx9wvoLMZQq53Fd
Nqh2AsHcEILsTlQh6XPb3yHDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmDYv4ZJg
2YZe4tB8Qw4PPhrRkq4wHwYDVR0jBBgwFoAUTdgDorFJaSWJyLWTW+UwEPhvP5Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEQ0I1LzA5MjdDRUFDMjg1
MjExRjFBNEMwN0NDODk3ODMzNzczL1RkZ0RvckZKYVNXSnlMV1RXLVV3RVBodlA1
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVGRnRG9yRkphU1dKeUxXVFctVXdFUGh2UDVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE
Q0I1LzA5MjdDRUFDMjg1MjExRjFBNEMwN0NDODk3ODMzNzczL1RkZ0RvckZKYVNX
SnlMV1RXLVV3RVBodlA1WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCBwfDcNq9CaqMF4E9amBYjgsjOXTbdS1I7NybPMZE6NwglWkEpe1eZcBqVtULr
xrTVpveQAcLm8V6MGJy7v69SJzPSTrqlE2hBAgmfuCtOHiFIyIq/TQz+kDSljnEo
pbfzB45ocFUjJkN/K9let4FAiLbZBcU8XK8rIMJNlx4n+vGdgZW0VaYtvVOIiJK3
unFSi0wIZtui1C0jCIMioU3rIhR0Of+M4TEJTUovtUO2TF5KfpJyxMMe485EwSMg
jMNpG+KNoor8MLLx9yQHNbo9mljgOgfHh79sPZD+NE9FoQdJOtZbuRvWdKf5OQY4
7Biax9FZrZUZE32jNUxNumRM
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:28 2026 by rpki-client