Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File:                     TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier:          y+qDuEB3Qic7cYimy1tp54p4HOXPbEX8lNk5etfrciU=
Subject key identifier:   22:4D:A3:34:D5:59:75:E8:05:2D:E5:63:4E:87:F0:CC:C3:EA:23:D2
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer:       /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial:       357C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number:          3551
Signing time:             Sat 18 Apr 2026 14:29:37 +0000
Manifest this update:     Sat 18 Apr 2026 14:29:37 +0000
Manifest next update:     Sat 25 Apr 2026 14:29:37 +0000
Files and hashes:         1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: JA59ZADuqhTNozCkHq6AmZQH6K2sVka/m0DEDSUIX3c=)
                          2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
                          3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
                          rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13692 (0x357c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
        Validity
            Not Before: Apr 18 14:29:37 2026 GMT
            Not After : Apr 25 14:29:37 2026 GMT
        Subject: CN=69e39551-8fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:a6:df:76:53:06:b3:78:f1:67:b0:48:49:
                    84:90:46:fe:b0:22:48:1b:f8:09:2d:5b:07:a8:9d:
                    a6:50:87:a4:15:65:06:e0:9f:cb:81:c0:02:15:ab:
                    43:b2:20:04:63:da:f3:e5:ce:bd:3a:b2:10:03:b9:
                    87:d7:7f:7e:04:3b:e6:c5:3c:5d:54:23:35:35:a9:
                    1d:41:e7:41:3e:22:e9:5f:c9:93:25:54:fc:71:aa:
                    72:e1:45:58:d1:03:52:4b:e1:a7:0c:5b:33:36:ef:
                    25:82:d7:96:8e:c2:f4:df:d7:b4:be:68:01:fb:fe:
                    36:f7:93:13:fc:22:37:b1:1a:65:1f:0f:29:62:49:
                    c6:ee:e2:33:c5:8b:75:6e:49:56:67:08:f8:d3:f7:
                    0c:1d:69:dd:a6:10:f1:af:91:0f:e4:d7:8a:8d:52:
                    f5:6f:4d:15:0c:98:61:ec:b4:a7:84:a2:2c:c5:c3:
                    27:ec:24:44:7e:2d:8a:66:b2:28:fc:c1:23:68:63:
                    55:5a:7e:b5:69:d5:a9:50:ef:98:10:44:d2:80:21:
                    aa:03:b2:14:93:f6:5c:39:42:48:ce:2e:3d:6d:f3:
                    7d:e9:16:7c:29:ec:2d:9e:64:a2:58:77:d0:d9:b3:
                    b5:d5:c6:d7:7e:86:a6:7f:54:3d:f7:e2:0a:c6:b6:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:A3:34:D5:59:75:E8:05:2D:E5:63:4E:87:F0:CC:C3:EA:23:D2
            X509v3 Authority Key Identifier:
                keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:e8:5b:a8:bb:3b:48:22:7b:33:1f:c4:c7:17:e1:f1:23:
         52:25:b8:3f:e7:ea:f6:b4:a6:35:e9:55:35:23:3e:b2:57:6c:
         9c:25:e9:50:76:33:31:bf:81:cf:5c:19:8b:6e:f4:a2:23:a7:
         1c:a9:d5:2b:d5:67:7b:c0:56:4e:6e:15:e5:45:fa:50:f6:5d:
         d7:f5:02:5a:e6:96:d4:20:96:e6:03:5b:4b:4e:6d:09:d1:91:
         65:e1:90:b5:bb:c1:c0:17:f8:b2:56:76:6c:fd:7b:20:31:0c:
         58:82:5c:fd:d1:6a:87:86:cd:58:d6:54:cf:0e:8d:84:d0:ad:
         e4:bc:8e:88:64:44:a6:f5:6e:c7:32:ea:d7:23:fa:ce:51:3e:
         ef:8f:a1:3b:2c:3e:0e:fe:72:bb:db:da:cd:f8:e2:e2:6e:a0:
         77:db:f6:4a:8d:9f:c8:08:e7:df:10:7f:49:0b:97:8e:85:9f:
         42:6c:b4:ff:cf:8b:80:0f:f3:d8:fb:93:08:69:9f:20:2d:0d:
         03:fa:cb:eb:ca:3b:6e:09:a7:dd:6b:10:34:33:24:30:80:a9:
         6a:ba:da:cf:cd:e7:35:7f:1e:0b:63:1d:d3:66:64:88:0d:82:
         71:be:62:c5:33:7f:e5:c2:f7:75:3f:44:e1:8b:0d:bd:62:8e:
         01:4c:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:32 2026 by rpki-client