Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File:                     tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier:          o0P0/kLLNd89Bl4XP1xHoJ1xF49NsU9RF8RnDDTQWpg=
Subject key identifier:   ED:FD:F8:AC:03:43:EF:40:22:55:EA:2C:4D:A0:06:13:AB:F6:B3:FD
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer:       /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number:          0229
Signing time:             Sat 13 Jun 2026 02:49:48 +0000
Manifest this update:     Sat 13 Jun 2026 02:49:47 +0000
Manifest next update:     Sat 20 Jun 2026 02:49:47 +0000
Files and hashes:         1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: KJmKPq6KDPOw7phonVBPlYTWpVdLmriuDjBf5rhgWUE=)
                          2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: JgjENRgm+cP4ig92SSnsnPe7s2x9TXGIP7ad+E5lw4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
                          rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
        Validity
            Not Before: Jun 13 02:49:47 2026 GMT
            Not After : Jun 20 02:49:47 2026 GMT
        Subject: CN=6a2cc54c-f830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:80:ec:17:87:70:1b:98:03:c8:bf:eb:be:
                    a1:1b:5e:af:46:b2:b9:96:05:cc:62:c9:ac:55:9c:
                    81:aa:09:bf:ee:c5:dc:4f:ba:6a:6c:67:c0:97:5b:
                    71:fd:8f:20:26:c0:34:f3:dd:ca:7d:85:c8:c5:89:
                    d0:9b:30:89:92:39:a9:45:55:3e:87:23:ea:fa:68:
                    1d:f2:07:7b:e0:ef:e8:5f:4b:ed:25:0b:bc:d4:5e:
                    37:ca:8d:a4:13:d1:e5:58:90:62:53:8b:55:b8:50:
                    95:9c:de:74:4b:8f:0c:2a:6e:a0:7f:6c:cf:4b:ef:
                    eb:d7:2b:80:b5:e2:b1:07:9a:3a:0d:eb:88:a4:4c:
                    1e:81:3d:7f:97:73:a8:e4:5b:c5:e3:ad:dd:a8:5b:
                    a7:b4:a5:21:d8:7a:6d:0f:8f:85:0b:2c:e4:c3:22:
                    36:92:de:c5:8d:e4:26:43:ea:cb:d6:56:57:08:7c:
                    ec:75:f2:b3:6e:30:d0:1a:79:a1:34:16:a0:e4:03:
                    7e:43:fd:c8:bd:93:44:a6:3b:84:2a:7d:84:9b:f0:
                    45:d3:cd:bb:6e:a1:7f:3c:a5:91:86:96:90:6c:fa:
                    ff:f6:b7:ae:c3:f1:ac:08:82:1c:ea:fe:d7:3a:67:
                    0e:e8:68:9d:1d:89:e7:93:56:cd:3f:7c:dd:5f:95:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FD:F8:AC:03:43:EF:40:22:55:EA:2C:4D:A0:06:13:AB:F6:B3:FD
            X509v3 Authority Key Identifier:
                keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:86:4c:f1:57:a9:a3:1e:85:b1:1b:83:16:c6:c1:77:bc:09:
         b2:d7:8b:86:53:13:53:91:89:de:cf:b5:52:64:3d:cd:07:01:
         fd:bc:ea:6e:b1:88:f0:df:f4:83:61:28:63:cd:de:b8:80:f9:
         61:ad:9b:9a:dc:c3:f3:b7:4a:ec:ae:08:1f:76:da:35:00:04:
         16:74:89:d4:f8:61:b0:70:e5:b7:68:53:f3:0b:db:1f:2d:91:
         80:a5:9c:3b:e5:85:85:93:01:39:96:be:2d:59:a8:cd:e4:67:
         4a:0b:9d:5e:ba:99:58:1d:b9:12:82:c9:3d:e7:e9:09:58:bb:
         f3:32:db:cb:83:af:fa:58:ff:0f:76:2f:07:cf:dd:ae:4b:5e:
         19:30:f5:d2:89:5b:95:22:9f:17:02:33:68:e7:c3:47:cf:e0:
         1f:d0:0e:8e:8b:22:b7:d0:10:f4:29:ea:47:ff:c6:17:16:cc:
         e5:57:bc:fa:15:cb:d4:22:32:4d:0b:35:d9:e4:77:4d:ed:f6:
         97:a9:dc:ba:55:9d:b1:9f:f4:63:90:ab:65:8e:7b:9b:5d:72:
         39:b6:ef:64:2c:9b:2f:cb:cb:e4:5f:74:d2:49:b6:f5:c9:ae:
         c0:e5:f9:5d:8d:6d:5c:5b:f6:f7:6b:74:3c:6e:58:71:9c:a6:
         89:f9:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:57 2026 by rpki-client