Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
File:                     tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft (raw, json)
Hash identifier:          b2Bs1RHxIuVJNvjASMwnS6EP3MDMDDs5QtsJFSDmzCQ=
Subject key identifier:   6A:68:E9:98:A4:FB:6D:3C:AC:18:D4:32:CE:08:11:2C:22:F5:79:4F
Authority key identifier: B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6
Certificate issuer:       /CN=A91B637A/serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
Manifest number:          26
Signing time:             Thu 11 Jun 2026 11:09:53 +0000
Manifest this update:     Thu 11 Jun 2026 11:09:52 +0000
Manifest next update:     Thu 18 Jun 2026 11:09:52 +0000
Files and hashes:         1: tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl (hash: HUYq4OUGejHC93kZJ0jjbc29YCAkhLfmVYcVEM/s8Z0=)
                          2: D0F478D02E7011F1B3CAF1C4A3833773.roa (hash: bM7Q3Goo2yIx6mUK1MyLG8gg5MzYy2/CvHGPwmnvAsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl
                          rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B637A, serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6
        Validity
            Not Before: Jun 11 11:09:52 2026 GMT
            Not After : Jun 18 11:09:52 2026 GMT
        Subject: CN=6a2a9781-b27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:fd:6e:c2:72:44:54:44:9b:79:4e:fc:48:
                    66:2f:e5:25:38:bc:7f:f0:2d:2e:de:7f:24:9b:26:
                    b5:bd:1f:16:e1:e2:58:94:c3:98:6b:a1:83:99:81:
                    c8:f5:f7:00:2e:68:5e:96:db:4d:89:4e:29:ac:05:
                    6f:1b:57:e1:2d:4e:2c:81:ef:c5:a5:80:44:ba:6f:
                    a8:01:80:3d:8a:82:73:9c:51:b8:20:57:3d:29:af:
                    7c:39:9f:c0:36:8a:e4:42:89:52:87:1f:8b:1e:38:
                    a7:20:e1:bd:bd:4a:95:ad:01:dd:4d:35:c5:9a:4d:
                    f8:8c:e4:88:a2:b9:6f:7a:96:68:32:14:68:3b:2a:
                    a4:2d:c0:13:ae:b6:ef:dd:87:35:9b:62:b2:71:3c:
                    02:73:67:81:3e:95:0e:3d:98:80:9d:db:fe:a9:82:
                    20:56:5b:58:b7:42:fa:53:34:8d:94:09:22:88:db:
                    8e:30:1b:ed:b4:62:67:93:fd:cf:e8:ca:75:33:8e:
                    1c:36:e5:89:5e:44:ea:fc:03:14:01:b1:5a:e9:b4:
                    e7:90:0d:f8:bf:e6:ab:d4:3e:87:af:37:52:91:ec:
                    43:0f:1d:f5:f9:b7:c9:fc:6f:95:8a:af:bb:0c:af:
                    e3:71:e2:12:33:75:eb:c6:7f:5a:18:40:0e:71:8c:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:68:E9:98:A4:FB:6D:3C:AC:18:D4:32:CE:08:11:2C:22:F5:79:4F
            X509v3 Authority Key Identifier:
                keyid:B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:05:91:2c:cd:4f:d5:de:e8:78:92:0b:43:2c:2b:f3:48:a2:
         06:57:5d:76:0d:ea:f3:9e:b8:30:b4:61:b1:12:8a:09:c5:27:
         f9:f9:bb:4c:49:82:fd:1a:93:b4:81:83:81:f1:ae:ea:a2:b2:
         d0:29:b3:96:cc:fe:aa:29:e2:8e:88:6a:44:1a:80:f5:00:38:
         00:49:2e:b4:f8:ff:b0:12:59:fe:23:e0:87:36:19:2b:92:d8:
         e4:8e:23:1e:a6:ab:1e:c4:d5:01:33:7c:0b:2e:65:de:7e:b6:
         d7:d4:e6:9a:e5:c7:79:2d:71:b5:7a:0e:59:da:63:24:47:4f:
         40:de:3d:86:52:55:7f:a8:93:03:01:b9:a5:a3:4e:2c:5a:56:
         06:0b:f2:0f:21:25:6c:ec:80:e3:56:aa:ac:d2:18:90:9b:b3:
         9b:ad:55:05:c6:36:f9:0c:ca:63:74:86:a9:a8:40:53:31:46:
         f6:0f:74:40:8a:76:49:c9:2e:aa:fc:1d:62:01:6c:93:57:29:
         69:0f:dc:7e:c2:4f:43:6e:26:1f:61:dc:2d:3d:26:ae:df:9c:
         eb:92:68:98:d2:ac:b8:28:55:4e:2f:92:be:c1:9b:dd:e0:b0:
         a0:8d:fe:60:f3:b2:97:95:b0:b3:95:aa:b2:14:92:d3:c4:d7:
         5f:11:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:09 2026 by rpki-client