Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft
File:                     TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft (raw, json)
Hash identifier:          KqyvD7AYdF3+0vilY5UkNFFXpqHdLQGeWjsxYAny+HQ=
Subject key identifier:   73:C8:D8:16:EB:08:1B:2C:B7:E1:E9:4F:BD:0C:7D:F2:5D:C2:13:01
Authority key identifier: 4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B
Certificate issuer:       /CN=A91D0FCB/serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft
Manifest number:          0120
Signing time:             Wed 15 Apr 2026 05:17:58 +0000
Manifest this update:     Wed 15 Apr 2026 05:17:58 +0000
Manifest next update:     Wed 22 Apr 2026 05:17:58 +0000
Files and hashes:         1: TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl (hash: QhJQKoS30fJmoIgd3yIi4gQMiaVqtQ8uk1peDsjoCuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl
                          rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0FCB, serialNumber=4CB51EE87C822E8E6CB054284CB07E4CF24F921B
        Validity
            Not Before: Apr 15 05:17:58 2026 GMT
            Not After : Apr 22 05:17:58 2026 GMT
        Subject: CN=69df1f86-f5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f5:60:d3:00:9b:7a:21:f6:f5:bf:89:0b:
                    a4:84:18:7c:d0:e7:c1:ca:ab:c1:3b:d8:b7:ad:85:
                    1a:25:f3:39:c3:6d:20:cf:64:83:ff:90:41:32:1c:
                    b8:4f:1b:f0:e7:bb:81:52:3d:17:4e:e7:8f:50:bb:
                    01:a7:67:46:ee:94:9a:6e:e1:81:bf:ad:2d:1f:64:
                    95:8e:04:c6:7f:78:a8:98:b5:89:9b:55:0d:02:fa:
                    47:b1:d6:12:5a:44:76:24:11:35:e9:d4:cc:1d:56:
                    dd:8b:88:49:f5:39:d6:c2:3d:86:4a:6a:75:ee:24:
                    33:56:09:d5:d3:ae:e8:2a:43:9c:f9:06:ed:e2:07:
                    b8:fa:33:4f:3b:1c:f5:5b:f0:b8:e6:9f:ff:e1:8a:
                    25:a3:aa:ec:56:51:0b:73:a1:a7:c2:9f:cc:ee:3f:
                    e3:f7:ec:4d:b0:27:11:78:dd:5b:0f:10:40:e4:14:
                    1c:89:6e:ee:9d:b6:0a:57:df:95:97:be:49:37:05:
                    0d:d4:09:2b:c8:c3:f0:6d:10:43:5c:3a:61:ff:a4:
                    f0:a2:a3:ca:64:df:12:40:17:38:a8:b1:81:a0:53:
                    90:2d:53:ba:a8:30:35:9c:2f:21:16:66:f7:c5:f2:
                    4a:59:e1:5b:5d:39:e4:82:9f:d3:b1:09:07:22:aa:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C8:D8:16:EB:08:1B:2C:B7:E1:E9:4F:BD:0C:7D:F2:5D:C2:13:01
            X509v3 Authority Key Identifier:
                keyid:4C:B5:1E:E8:7C:82:2E:8E:6C:B0:54:28:4C:B0:7E:4C:F2:4F:92:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLUe6HyCLo5ssFQoTLB-TPJPkhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/92DFFC78816911EF8213FB0CC4F9AE02/TLUe6HyCLo5ssFQoTLB-TPJPkhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:d4:9d:5b:8e:b8:00:66:f2:8c:30:08:00:da:2c:cb:f0:
         5a:5e:8e:09:42:80:fb:a8:99:7b:12:6c:e6:61:5c:4b:39:2d:
         b6:32:8e:df:e2:b4:4b:38:7c:a7:8e:bd:0b:7b:b6:19:d7:9e:
         c6:5e:d2:1b:91:09:ca:7d:6c:fa:c8:a0:3f:fb:40:e9:7d:f3:
         79:f1:e5:e4:d2:6c:fb:61:1d:67:b8:23:ef:ef:ae:9e:3d:b2:
         83:1c:d7:77:41:68:22:f8:13:b7:94:04:a5:7e:0f:84:37:18:
         82:08:90:4a:bc:37:04:10:a4:31:e5:dd:42:47:65:29:33:06:
         eb:13:a7:19:28:43:78:7f:d0:d6:14:38:46:f0:35:d7:74:ac:
         04:02:02:ca:6a:3a:19:d8:78:f3:61:4f:5d:78:36:31:af:45:
         31:f3:b2:bb:aa:c5:73:62:fc:38:53:e4:3c:bf:7a:2d:23:17:
         7a:2b:38:08:e8:f8:95:96:28:0d:c5:3a:5b:d5:65:2f:a5:6c:
         8e:a9:8c:01:0e:0d:dd:e0:e5:d5:5f:e9:ca:1e:98:75:94:e5:
         3d:7b:aa:e0:d6:cc:2e:69:60:5e:1b:03:ee:a8:90:ca:d8:1c:
         5a:22:de:50:d7:3b:83:c3:8b:6f:e5:f4:9c:4c:d1:8b:28:24:
         0d:0e:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:02 2026 by rpki-client