Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File:                     tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier:          a4SPeUYjb+z+VNmRG/7mMLbqJe0YNtrF2JEv0lsi3Mk=
Subject key identifier:   1F:09:AD:A5:15:65:59:77:41:A6:79:7A:71:F4:F2:89:8A:95:D0:95
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer:       /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial:       2A05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number:          29ED
Signing time:             Thu 16 Apr 2026 15:33:27 +0000
Manifest this update:     Thu 16 Apr 2026 15:33:26 +0000
Manifest next update:     Thu 23 Apr 2026 15:33:26 +0000
Files and hashes:         1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: /TQkXOECyCyFyAZIkOEvs5F0tDWrsfRyjVxRY3V1FkU=)
                          2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10757 (0x2a05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
        Validity
            Not Before: Apr 16 15:33:26 2026 GMT
            Not After : Apr 23 15:33:26 2026 GMT
        Subject: CN=69e10147-d6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:93:14:39:77:b6:a0:42:45:38:a2:84:09:49:
                    d5:28:d2:23:4d:be:f3:a9:41:31:ac:2e:95:a6:c7:
                    c3:d5:ef:80:0a:07:a2:51:4f:ed:35:6b:6b:36:14:
                    a3:65:e4:c3:01:97:0b:7a:84:73:1b:64:23:78:30:
                    30:fd:78:6a:22:3a:76:a3:73:a9:d6:38:02:41:6b:
                    6a:1f:47:36:c3:0e:32:5b:c7:01:6d:75:be:da:88:
                    fa:2c:2a:87:d0:12:60:cc:72:35:5d:29:f2:a5:7b:
                    ec:57:ba:b6:45:82:54:e2:99:f8:b5:a5:41:aa:dc:
                    f6:c0:cf:b9:25:e1:cd:91:ed:1d:8e:1b:72:18:d0:
                    1b:08:2b:7a:4a:3e:a3:28:de:5b:95:b3:1e:07:01:
                    ce:a9:9d:1d:35:b9:10:cd:56:b9:80:6d:56:ba:67:
                    47:4b:61:83:6d:2b:80:1d:8b:d0:b6:2f:df:14:62:
                    5f:7a:68:4c:c0:fa:b5:3b:72:72:48:43:fe:0e:3f:
                    39:bb:f4:73:77:69:81:b2:b3:6f:ae:af:cb:99:39:
                    ec:43:27:0a:01:e0:27:c2:5a:8d:41:b8:c7:61:1e:
                    9d:ef:0e:e1:3b:12:a5:11:cd:51:69:59:5e:82:1d:
                    b3:d5:35:9e:57:e6:93:d4:99:69:db:12:05:f9:35:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:09:AD:A5:15:65:59:77:41:A6:79:7A:71:F4:F2:89:8A:95:D0:95
            X509v3 Authority Key Identifier:
                keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:89:1d:fd:93:5f:f9:2a:ac:20:ce:9d:f3:0f:8f:a6:17:c4:
         b0:3d:d3:84:27:7c:f2:8c:b4:cd:a2:ae:02:4b:a2:27:37:59:
         5c:81:98:32:ac:de:a9:0d:02:f0:aa:97:bd:4b:82:74:9d:a5:
         08:49:11:6e:e0:4a:00:0e:35:76:bd:5f:01:8e:18:7b:ea:98:
         55:73:db:3c:77:b8:23:35:97:db:a2:58:ea:99:3a:2a:e9:b6:
         00:6a:66:db:40:f2:17:aa:de:f1:9b:51:24:d1:9c:0a:f9:89:
         63:e2:c3:eb:1a:ee:6b:a3:b7:60:75:da:88:f4:f4:30:2b:7d:
         36:87:8f:48:58:c1:04:26:cc:c2:61:f9:2d:3b:46:c5:9c:09:
         f8:3f:f7:61:9a:b7:e0:48:a3:a4:16:02:2f:62:b8:7c:53:43:
         47:68:45:6e:68:9b:25:0d:e0:aa:f6:ba:a0:ee:29:2f:b1:bc:
         9b:41:0e:a1:4a:a6:4a:03:3e:80:d8:09:f7:51:e4:18:29:cf:
         14:7a:08:c3:fa:47:a5:2f:02:53:6d:f1:81:ca:e9:f5:bf:07:
         41:72:06:58:1b:f0:63:6f:25:e1:e1:a2:7c:e9:70:6e:67:81:
         95:06:ca:ca:3b:93:c3:10:f7:7b:69:2b:6d:07:ea:1c:59:14:
         59:be:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:39 2026 by rpki-client