Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File:                     tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier:          l37nHeKgcNoquqA/kVjTjJyzad+rSgCKiJVIGxd3BHE=
Subject key identifier:   DD:4B:06:83:27:64:82:0C:DD:D8:B4:E4:8B:B4:37:DD:C5:D5:F3:18
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer:       /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial:       2A22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number:          2A0A
Signing time:             Fri 12 Jun 2026 15:33:42 +0000
Manifest this update:     Fri 12 Jun 2026 15:33:42 +0000
Manifest next update:     Fri 19 Jun 2026 15:33:42 +0000
Files and hashes:         1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: KYg4AhEA5+h2nRI6zj8aqOofKYO3+9ifuwQ9iUTftaI=)
                          2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10786 (0x2a22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
        Validity
            Not Before: Jun 12 15:33:42 2026 GMT
            Not After : Jun 19 15:33:42 2026 GMT
        Subject: CN=6a2c26d6-981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7c:a5:6a:87:27:bb:b3:16:1b:f8:be:07:af:
                    61:d3:10:7c:e7:ea:74:f1:8a:f8:15:82:a5:28:dd:
                    02:b3:54:5e:1e:3c:59:76:f3:be:b0:12:64:3d:3e:
                    2c:26:55:a5:04:46:4d:db:c2:cc:aa:85:69:0e:8d:
                    71:bc:18:53:cd:4c:01:64:f6:87:a3:55:4a:1c:d6:
                    f6:19:f0:5b:bb:50:53:b5:6d:78:69:bf:d9:38:8b:
                    2b:c5:3f:79:e6:ee:03:4d:78:1c:da:aa:67:ea:49:
                    b7:0c:b4:e6:81:13:64:d1:18:7c:59:43:38:f3:91:
                    f2:b6:49:d2:35:60:ad:c7:20:00:b9:0b:e6:32:79:
                    de:9d:db:a8:29:90:75:81:2a:a4:d3:5b:3d:aa:16:
                    3c:60:62:b4:e6:49:09:c7:13:e3:28:c3:ee:f9:9a:
                    95:42:db:b7:a7:06:72:ab:41:ae:ca:95:6a:e1:bf:
                    85:76:e1:67:20:14:43:39:8f:1c:99:66:4a:65:ff:
                    0a:2d:5a:3b:98:ea:fe:f2:e3:bb:fb:e0:05:2e:23:
                    21:0b:12:e1:47:40:9d:8e:59:d5:77:d5:77:41:af:
                    94:22:2f:6b:47:3c:3e:83:37:62:4e:7f:33:2a:d7:
                    4a:f1:e1:5e:e6:6d:3b:e5:0c:0a:d7:72:25:77:6e:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:06:83:27:64:82:0C:DD:D8:B4:E4:8B:B4:37:DD:C5:D5:F3:18
            X509v3 Authority Key Identifier:
                keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:f0:83:fa:9c:4c:5b:41:e0:0c:82:3d:7a:60:f2:95:aa:
         6f:86:d7:17:9e:86:86:07:c3:25:34:3d:86:0e:25:a0:97:ec:
         7a:a9:45:e4:fa:a8:5b:6a:c0:8c:15:7b:d9:3e:fb:66:13:b1:
         42:7f:81:da:06:ce:20:ed:23:f3:ae:c7:28:9a:c2:05:0b:72:
         31:55:17:8c:16:05:95:f7:0a:17:ba:63:d8:a7:23:51:1a:a7:
         01:e2:64:6e:e5:1b:6a:d4:fd:b3:88:21:6b:43:11:76:76:36:
         a2:2d:62:60:1c:a5:fd:a8:97:93:ca:3d:7d:c0:06:bb:ac:33:
         53:15:9c:ff:82:41:4e:40:ae:df:a9:78:2f:7f:0a:53:cc:6d:
         c3:16:e1:cf:85:d5:83:e5:eb:e4:4d:e3:ca:ec:c3:ad:14:ff:
         f0:88:dc:bf:de:d8:77:c4:b3:91:09:0f:58:ad:4f:c4:7b:88:
         d3:68:e1:f0:64:93:9e:59:a9:72:95:f6:f8:3e:f5:96:ef:87:
         89:e5:40:ad:4b:20:1e:7b:33:3a:25:78:26:09:f9:ac:6a:0c:
         ef:18:5f:59:fb:17:57:44:5c:a9:08:20:54:bc:22:d9:37:83:
         02:ff:d2:f5:90:34:ed:5e:e3:32:58:14:f6:9c:40:cb:0d:d9:
         ba:57:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:25 2026 by rpki-client