Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File:                     TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier:          AzoPW0ipbuFxBNFOUQi6PzAeICiWNWnMwvrO0kFD/nU=
Subject key identifier:   11:F1:70:52:73:49:80:91:9A:CA:EA:64:1D:F7:81:F8:C0:44:3E:26
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer:       /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number:          0238
Signing time:             Sat 13 Jun 2026 02:41:35 +0000
Manifest this update:     Sat 13 Jun 2026 02:41:35 +0000
Manifest next update:     Sat 20 Jun 2026 02:41:35 +0000
Files and hashes:         1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: jx0reChqqfZp/WAUZqzHyDlc7L8VbjL2jxMaNA4SvVY=)
                          2: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: GJOKnnR35/W//5xyyD5B9yPrJQet8eLCLqSkDmsdIrE=)
                          3: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: Jas/B/HKgv6Ds9cxbOl0LkWTFVaps0+gG/0AuMhiV68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
                          rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
        Validity
            Not Before: Jun 13 02:41:35 2026 GMT
            Not After : Jun 20 02:41:35 2026 GMT
        Subject: CN=6a2cc35f-63c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:2e:d6:a2:e6:43:c5:d2:97:81:8c:58:c0:
                    64:26:ac:29:b1:e7:3b:3b:57:51:b6:a7:65:09:23:
                    fe:79:5c:39:3e:6e:9f:5e:f7:cb:09:99:6e:ad:52:
                    4b:63:db:49:86:fd:e8:fa:8a:7f:2c:ec:c3:90:b3:
                    aa:38:9b:4b:e8:bf:b5:57:9e:bc:19:29:fa:8b:9d:
                    57:73:fc:8d:e8:48:42:30:ff:93:2a:38:7b:34:2c:
                    77:f8:5d:64:2c:b2:27:e0:6b:88:02:d4:f4:e2:11:
                    73:a3:fb:c2:0e:52:ae:9f:7e:fa:8b:8d:1f:1f:7b:
                    48:5e:19:0a:7a:d6:ee:10:27:d8:39:1e:03:cd:0f:
                    8f:b2:2d:de:f6:ec:38:07:1a:23:7f:b8:7a:99:44:
                    21:51:75:14:1b:48:1f:ab:b2:2f:9c:21:f0:85:b9:
                    08:a5:ce:19:c1:22:ba:a8:b1:34:1c:af:22:75:7e:
                    0e:92:e9:f8:e1:31:cb:f7:5b:a7:f0:ab:9c:0b:3a:
                    21:a6:88:c6:2f:2b:2f:83:d7:cd:55:da:e3:04:e2:
                    8f:dc:f2:89:11:c5:69:10:79:59:4b:d4:eb:db:8f:
                    9b:aa:f2:fb:cc:1b:f0:e1:e4:09:1a:5b:90:b6:1d:
                    20:82:ab:58:04:37:2a:e3:2b:1c:ab:0d:ca:9d:3a:
                    61:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F1:70:52:73:49:80:91:9A:CA:EA:64:1D:F7:81:F8:C0:44:3E:26
            X509v3 Authority Key Identifier:
                keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:a6:ce:12:b8:07:99:6c:74:61:3e:16:ca:b6:6c:7e:7e:
         98:14:01:d8:58:ed:16:8c:66:98:57:88:4b:af:7c:1f:76:01:
         0d:0e:ae:1a:16:b9:18:88:c0:3f:06:98:24:d6:1a:e0:67:6d:
         51:79:e4:7c:64:af:68:6b:4d:a1:e7:51:d0:07:25:ce:14:de:
         29:56:09:e0:77:ad:a5:f8:f6:a7:cf:c2:66:1b:44:e5:4b:6b:
         f4:50:b8:56:e7:f6:2e:79:87:2a:2e:a8:5b:97:01:b9:30:15:
         df:38:f9:1e:45:15:1a:63:c7:b3:f6:ab:a4:f8:2e:66:8a:13:
         87:e6:b3:b5:e1:2a:72:86:53:1a:87:18:79:38:77:61:bc:b3:
         42:61:08:cc:7e:b0:40:6e:8f:07:97:b0:c0:bb:bb:c0:93:13:
         35:f1:36:49:c6:89:f5:8a:f7:0f:9a:d6:d0:8a:b5:1d:00:66:
         92:c2:5c:60:93:92:fb:8e:03:ea:6f:7e:0e:08:09:78:3b:4e:
         36:6c:72:53:5d:6f:fb:e2:75:7f:b5:00:46:95:52:87:d1:b1:
         ed:21:1b:1f:99:50:32:e3:ff:1e:c8:c5:e6:a8:31:16:8d:89:
         7a:31:bf:cf:61:ae:4c:2d:13:ee:cd:57:40:1c:99:e9:4c:14:
         4b:70:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:45 2026 by rpki-client