Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft
File:                     tkuBBCq0EWB9hgdv78nllia7iBY.mft (raw, json)
Hash identifier:          cM/lTt96AqV9hUeRi9MMy7SVvGsCR9SBTnhAexcow+w=
Subject key identifier:   D4:24:B6:88:E7:38:B3:E3:F6:2D:AC:1A:57:E2:3B:BE:24:E7:1D:B1
Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16
Certificate issuer:       /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft
Manifest number:          76
Signing time:             Fri 17 Apr 2026 07:31:43 +0000
Manifest this update:     Fri 17 Apr 2026 07:31:43 +0000
Manifest next update:     Fri 24 Apr 2026 07:31:43 +0000
Files and hashes:         1: tkuBBCq0EWB9hgdv78nllia7iBY.crl (hash: JcOVxS03uyFmD48oJsrBgGMvYh7uhEf6UQh6u5+RDtQ=)
                          2: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (hash: oQE4lKjrb9uBnPjONyf7ZrBM9Hns2uL/UwtMTK49Mk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl
                          rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816
        Validity
            Not Before: Apr 17 07:31:43 2026 GMT
            Not After : Apr 24 07:31:43 2026 GMT
        Subject: CN=69e1e1df-e41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:5c:ba:c8:fe:aa:0f:9b:b8:ab:0d:23:1a:
                    89:16:3f:60:f5:d0:a3:c1:dc:63:5f:ad:f0:57:c9:
                    45:82:f8:f0:3b:7a:e5:4a:50:34:8c:78:e9:2c:8a:
                    18:d0:ac:7b:24:dd:2e:6c:ca:ce:af:05:69:6f:d8:
                    f5:d6:dc:0e:cf:58:2a:c8:69:35:4a:3c:b7:14:d5:
                    26:18:2a:12:61:6d:e4:25:0e:a2:86:71:21:e5:50:
                    66:27:87:34:e7:29:c6:48:94:8f:9a:0b:23:57:1d:
                    7e:a7:30:30:d8:f4:42:85:ef:28:cb:3b:32:d5:94:
                    09:5c:1a:9f:44:25:68:74:4d:78:1a:a5:80:25:1c:
                    53:d3:de:a5:bb:b2:0c:fb:9e:ba:4b:26:4e:f3:47:
                    c0:81:20:41:dd:d9:2b:5d:94:71:c6:d9:69:1a:e2:
                    88:72:84:54:f4:57:72:54:21:ff:6b:0c:f7:a2:bc:
                    8a:89:3b:fe:df:50:cf:5a:d3:c9:8a:3c:5d:b2:59:
                    e5:c6:18:2b:69:40:9a:1e:53:99:f6:bf:8e:31:68:
                    c1:6b:7d:cc:a8:b4:f3:3f:06:90:b8:aa:f5:8f:89:
                    44:01:60:75:30:8f:77:36:7b:ce:15:69:dc:7d:b7:
                    15:12:24:a9:d8:76:7f:4e:4e:c7:52:08:ba:c9:65:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:B6:88:E7:38:B3:E3:F6:2D:AC:1A:57:E2:3B:BE:24:E7:1D:B1
            X509v3 Authority Key Identifier:
                keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b5:16:d2:31:70:83:84:3d:26:98:44:e5:08:b2:da:05:0a:
         9c:36:54:c2:5b:c1:dc:32:fb:46:a5:85:4f:27:9a:79:6b:de:
         33:fa:68:f0:7c:ba:f6:d1:ca:9e:3c:f9:45:5e:53:58:c8:a7:
         b3:e8:72:fc:fe:0b:41:97:ef:c3:5b:3b:14:25:83:fc:b9:de:
         e6:45:ad:a5:42:f0:c7:59:32:84:5f:c1:c8:12:8f:c6:45:7f:
         f4:7a:18:61:e7:74:1c:c9:f7:37:9d:98:9e:95:2f:f2:af:f0:
         21:d8:49:49:18:67:cd:4c:d7:54:4d:14:92:1b:56:a5:32:98:
         8b:ac:97:4d:23:29:b2:87:68:8d:2d:15:35:e0:2e:4e:da:64:
         d7:c5:8d:6d:d6:54:5c:9e:9e:5c:e4:95:53:9d:d2:cd:0b:d4:
         a5:d1:58:87:dc:cd:29:e0:31:b3:7f:45:7f:06:8f:93:a1:f4:
         42:8e:a0:ec:e7:a7:21:f8:d5:cf:c7:6f:e3:c8:20:9a:2a:34:
         b0:32:09:ce:36:31:be:df:75:24:d6:c3:f5:16:da:0b:fc:54:
         2d:78:db:f6:81:b8:4a:b4:23:71:66:9f:88:85:8d:88:29:3c:
         dd:0f:df:83:1c:f8:51:87:24:cc:07:8b:d5:5b:78:61:63:a7:
         cf:df:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:44 2026 by rpki-client