Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File:                     TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier:          Bo0bNww5TZ82REXwcz0P5cOtG/fV+M9jaegH2ctYobQ=
Subject key identifier:   1F:2E:AB:2D:8C:D4:9F:6A:A6:F3:57:9C:04:15:44:CF:6F:E2:65:88
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer:       /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial:       0943
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number:          0938
Signing time:             Fri 12 Jun 2026 20:14:10 +0000
Manifest this update:     Fri 12 Jun 2026 20:14:10 +0000
Manifest next update:     Fri 19 Jun 2026 20:14:10 +0000
Files and hashes:         1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: gmQn1mCDTxOoKL+hWRC7EvwM2qowLGhC3OfmPqGvCjM=)
                          2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: pJ8W3JL1SvT+9bYhgevlA/zqowg96Jc82pj7ld8nZi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
        Validity
            Not Before: Jun 12 20:14:10 2026 GMT
            Not After : Jun 19 20:14:10 2026 GMT
        Subject: CN=6a2c6892-fb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:f8:8c:81:c3:1f:e8:7d:89:7f:a6:a6:eb:
                    8d:c5:a1:01:7f:9f:bb:d6:27:c4:17:c9:ee:03:8a:
                    81:d1:6c:fc:fb:15:51:f6:37:93:02:b5:37:ec:b1:
                    b0:a6:61:ce:ad:a2:17:1f:e6:50:7d:bb:34:5b:9d:
                    f1:37:1c:1d:f0:52:25:5c:ce:76:d1:e3:fb:23:a9:
                    28:93:43:40:23:34:82:00:3f:03:70:99:26:c5:82:
                    94:f3:0d:de:a8:f5:aa:c1:af:09:56:ba:30:4c:d7:
                    dc:5c:39:28:cf:cd:29:97:62:fa:42:7f:37:51:92:
                    6d:b8:f9:1a:b3:00:eb:b2:46:65:75:e1:40:4a:62:
                    2b:3f:74:92:1d:4a:1b:c5:6e:ce:a5:1d:b8:e0:23:
                    e5:83:9f:b1:a6:e9:b8:c8:6b:9b:4c:4a:57:46:69:
                    b6:dd:9d:06:58:39:b3:bd:a8:54:5f:7d:ef:8b:0d:
                    7c:5b:8b:f3:60:b3:c1:2c:60:7e:0e:f6:99:3c:0d:
                    66:59:29:5e:58:42:41:5a:9f:5d:0b:41:3f:ca:21:
                    32:50:2b:a4:2a:f3:6d:bd:8b:2c:38:b6:39:f5:ee:
                    9d:e3:7a:2f:9c:97:c2:b9:af:61:7e:b6:d0:1f:9f:
                    7a:b3:30:a4:59:01:bf:7c:43:aa:da:16:1d:09:58:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2E:AB:2D:8C:D4:9F:6A:A6:F3:57:9C:04:15:44:CF:6F:E2:65:88
            X509v3 Authority Key Identifier:
                keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:23:e4:52:10:56:6d:4c:cf:5e:ad:c7:b0:2d:36:09:02:
         c5:8c:8b:a3:8c:21:8f:57:4c:31:70:05:aa:56:e4:d4:56:c4:
         a7:7d:c1:3d:e4:8a:92:7c:cb:fc:c0:c3:54:0e:44:8d:2b:cf:
         35:1c:65:20:c5:91:af:9e:6f:98:33:87:4f:cf:02:ca:fd:9a:
         66:e1:09:a4:35:7f:b5:4f:a9:0a:55:20:52:d4:3c:f4:50:67:
         cc:71:ab:b5:00:8e:ec:a6:ab:0c:ee:18:a0:68:73:fd:d6:e4:
         26:16:8c:8f:40:99:0e:ff:36:9b:e6:24:19:06:fc:22:14:a6:
         a0:4b:70:9e:86:0f:c8:fa:6d:07:6f:47:53:b9:9b:44:d8:e0:
         f6:be:20:bd:d6:a0:f8:4c:3e:ca:90:30:6d:b0:59:12:9c:ce:
         98:86:16:27:f6:e2:0f:18:cc:c1:6e:24:54:6c:f6:d3:f4:66:
         fe:da:7e:94:83:aa:07:7a:f2:2e:cf:f0:77:83:ed:c2:35:3d:
         c5:28:fa:e2:9a:a0:b2:79:d8:11:82:0a:7f:94:ec:ea:1c:ce:
         9e:ea:4f:14:ca:01:83:e9:87:ef:e8:1b:f9:1c:d6:aa:09:cf:
         d8:dc:4d:b7:11:4b:11:61:47:2e:5e:09:e7:7b:62:ab:d1:32:
         29:92:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:45 2026 by rpki-client