Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
File:                     tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json)
Hash identifier:          xTeVr1WsZn8vwt1s8oFWg7+j1y7JRv8r7ejn9Lu8VZc=
Subject key identifier:   12:E4:8C:D0:E7:3E:A7:DE:B2:C6:65:95:D8:26:4A:31:2D:C2:B4:BB
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Certificate issuer:       /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
Manifest number:          01D3
Signing time:             Fri 17 Apr 2026 03:20:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:20:27 +0000
Manifest next update:     Fri 24 Apr 2026 03:20:27 +0000
Files and hashes:         1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: TgEWGtq+ng5gq0DzxcwW70s0Z8+fv4Kram8JOUQJkYc=)
                          2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: lItS9IhoLUedBvAXuWgl/Rf34kmfafMEcysHbipPcpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
        Validity
            Not Before: Apr 17 03:20:27 2026 GMT
            Not After : Apr 24 03:20:27 2026 GMT
        Subject: CN=69e1a6fb-45ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:30:43:1c:c4:31:e0:b5:25:f1:1a:26:a0:41:
                    f2:85:0a:91:2f:df:1f:03:94:10:4e:34:13:c6:0b:
                    f2:9c:4f:aa:91:bd:93:55:c4:c1:30:f1:7b:4f:b3:
                    c7:11:be:95:82:01:b2:c3:8b:03:a1:71:c6:9e:c7:
                    c3:a4:f2:74:f2:10:75:73:85:a6:22:8f:89:5d:9d:
                    c4:29:7c:b4:23:6b:02:24:34:75:ab:26:f7:19:16:
                    12:27:d1:d1:0e:f1:51:2b:9f:d7:b7:ea:07:56:9e:
                    c4:24:3d:9c:f0:13:00:60:5b:1e:60:57:47:07:56:
                    eb:d5:e3:5a:11:e4:62:8b:5d:c5:09:9d:6d:3d:86:
                    2c:64:68:50:9d:2b:99:e4:c4:4f:12:ef:22:c6:6d:
                    2c:88:42:a1:df:8b:6d:cf:e9:6f:be:67:5c:c4:26:
                    4c:0f:61:e1:09:81:fe:21:b5:17:b5:97:de:d1:1e:
                    da:59:8d:69:c4:42:62:d9:cf:1d:1a:4e:61:31:91:
                    9f:91:73:41:3c:1b:3e:24:d7:b0:24:66:ce:42:f0:
                    bd:a2:45:63:77:66:f4:e8:c7:10:2d:44:c3:ac:26:
                    5e:46:0e:cc:8d:b3:c7:7e:72:9e:11:52:73:32:42:
                    b4:c4:1c:a7:07:8c:a9:c7:31:02:88:17:a4:14:90:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E4:8C:D0:E7:3E:A7:DE:B2:C6:65:95:D8:26:4A:31:2D:C2:B4:BB
            X509v3 Authority Key Identifier:
                keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b4:56:11:25:76:91:03:d7:30:16:d1:92:e6:4d:11:c3:ed:
         24:2f:6c:d2:64:3c:0e:c8:a2:61:ca:22:49:74:5c:65:ab:a0:
         5b:e4:5c:18:b2:16:d3:82:37:d0:98:c8:c3:fd:88:aa:0d:d8:
         40:23:f4:af:4b:49:b4:3b:b9:25:1a:29:d6:a4:15:08:90:64:
         d8:a3:34:2a:2f:77:28:3b:9f:b0:f5:2b:f9:12:c1:59:a9:3e:
         2d:98:f2:da:e5:f2:37:7e:a5:74:5e:cb:d3:f0:31:6c:8c:60:
         fe:0c:d6:d1:f9:d2:40:f7:30:7b:59:6e:0f:b9:28:d7:01:c4:
         34:99:df:1b:57:c2:ea:7c:95:51:de:46:0f:dc:db:f6:2d:b6:
         16:b3:68:0e:15:59:30:36:a7:65:b1:8e:83:9f:aa:b9:37:b2:
         64:a6:97:68:bd:b6:2b:c0:d1:dd:ff:29:11:c0:75:11:d3:e6:
         dc:8e:ca:93:f2:21:5b:ff:be:b3:96:bf:be:06:ce:b7:97:88:
         f7:c4:c9:77:59:83:cb:dc:35:71:b0:cb:63:69:a9:06:55:ee:
         78:be:9b:be:62:49:a9:55:67:15:e4:92:c4:5e:94:3a:11:c2:
         e9:59:2a:32:9d:f6:22:38:50:6c:27:b0:41:67:c5:5f:c5:35:
         29:9e:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:47 2026 by rpki-client