Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
File:                     TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json)
Hash identifier:          rf7POKJtkPgsRgE0KjoiFffHgfVdHU91nGfF6G2ih+A=
Subject key identifier:   D6:DE:67:4C:C9:67:54:44:1C:03:B0:6D:71:C4:56:F9:E8:99:29:A8
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Certificate issuer:       /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
Manifest number:          0103
Signing time:             Fri 17 Apr 2026 05:51:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:51:31 +0000
Manifest next update:     Fri 24 Apr 2026 05:51:31 +0000
Files and hashes:         1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: 58HfChs9ADuTVoY1ijvPwBRRRVTd9Jycuxc7n1VA03s=)
                          2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
        Validity
            Not Before: Apr 17 05:51:31 2026 GMT
            Not After : Apr 24 05:51:31 2026 GMT
        Subject: CN=69e1ca63-65f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:f2:de:ed:2c:cb:06:9d:ed:e6:bc:f6:6f:
                    ed:d8:00:03:87:10:c4:70:bf:3a:db:1d:f4:f6:51:
                    e9:c8:d0:04:e9:21:5f:02:4e:67:1d:07:36:c0:61:
                    53:35:c7:6a:34:5c:c0:9b:c7:54:1c:4a:43:2f:b1:
                    fd:da:ea:7f:38:e5:37:df:e7:57:a9:0b:90:6e:fa:
                    69:b3:d1:28:ee:74:3c:dc:89:7c:06:bf:3d:4d:6d:
                    3e:a2:1c:e5:ff:f6:4e:81:e6:e9:55:5a:6a:9d:ed:
                    17:0b:16:35:be:82:b6:86:f6:99:aa:56:5b:9f:4c:
                    e9:d3:9c:91:32:f6:92:93:93:af:a9:87:1c:a1:73:
                    a5:d3:42:86:fb:3a:ce:e2:3a:88:8d:c9:7c:8d:8e:
                    07:93:fe:77:4f:0a:cd:45:8f:54:18:d7:48:02:5e:
                    82:c8:95:74:4e:80:58:a6:60:09:17:7e:3b:d5:f9:
                    4a:48:eb:fd:a2:1c:1d:9f:3d:18:d8:86:45:e3:c5:
                    c2:e3:0a:cc:dd:71:8e:df:99:ed:a9:d0:e3:0c:7b:
                    5d:f7:a6:cc:82:4a:15:a1:00:78:3f:c6:f0:b0:86:
                    7c:ce:23:78:1d:dd:f7:94:fa:f5:42:0d:1b:70:af:
                    8d:df:d8:9d:a2:b6:d3:ad:04:43:e2:cc:c1:d7:81:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DE:67:4C:C9:67:54:44:1C:03:B0:6D:71:C4:56:F9:E8:99:29:A8
            X509v3 Authority Key Identifier:
                keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:40:39:48:43:8d:ff:f0:7e:11:b0:5e:f6:5c:37:ac:44:e1:
         cd:b8:68:c2:c4:aa:b9:3e:e3:15:17:4e:6a:23:13:42:ef:9e:
         aa:64:57:27:d6:2a:c0:bb:9f:ae:a1:de:d1:b9:59:68:4a:55:
         15:56:c3:6d:84:e1:32:12:0c:ff:89:fb:ce:0f:73:02:b5:36:
         4a:6a:2d:12:8b:7f:f2:82:dc:bc:89:b3:45:a0:a2:c4:cb:75:
         91:f0:b4:2e:53:67:1e:9f:7d:1f:cf:ef:18:fc:82:94:20:b1:
         22:8f:2f:06:a5:e2:8c:c7:c4:c7:2b:38:69:0e:6c:bb:19:cd:
         51:73:f0:93:2c:63:41:98:1c:8b:6e:3b:70:61:de:fb:98:ff:
         49:1d:47:64:a2:a8:20:18:c3:8b:70:02:25:2a:bd:04:e7:e6:
         11:d4:3a:2a:7b:0e:d3:2d:91:82:e5:73:b6:01:f7:7a:66:cc:
         6a:15:8d:5f:51:85:9a:62:8e:db:bf:3a:30:02:64:40:ea:57:
         39:c2:35:ec:5e:41:ba:cf:fb:28:36:a3:8c:0d:cb:c7:08:88:
         2f:bf:26:a6:19:24:11:3d:73:9b:fb:6d:bc:ee:7f:a1:27:67:
         3d:43:da:ab:ef:cd:93:a7:29:e5:13:bc:e3:96:64:7d:b8:e7:
         64:11:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:04 2026 by rpki-client