Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
File:                     TMGqg6KKEDdySbbqS4nZ7doGqXE.mft (raw, json)
Hash identifier:          4FkHFfrzfKUPQ2MDA+ggEG7QzKaXhqp/1Q8T+YNzhYs=
Subject key identifier:   5A:52:C5:C6:0C:9F:86:4F:83:93:44:19:19:C1:9F:7F:4D:28:7E:33
Authority key identifier: 4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71
Certificate issuer:       /CN=A91EA7E3/serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
Manifest number:          12
Signing time:             Fri 17 Apr 2026 08:45:22 +0000
Manifest this update:     Fri 17 Apr 2026 08:45:22 +0000
Manifest next update:     Fri 24 Apr 2026 08:45:22 +0000
Files and hashes:         1: TMGqg6KKEDdySbbqS4nZ7doGqXE.crl (hash: HngQbGu4xbl5ezIbtd/vQ3kx7Zw8sAwRicQjmwuReA8=)
                          2: 5BB88D38245A11F18A931CD8C3833773.roa (hash: dO+a4nQRE+isJxtzRbplPM324KVyASEgu6GREHrp+RM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7E3, serialNumber=4CC1AA83A28A10377249B6EA4B89D9EDDA06A971
        Validity
            Not Before: Apr 17 08:45:22 2026 GMT
            Not After : Apr 24 08:45:22 2026 GMT
        Subject: CN=69e1f322-30a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:87:cf:00:d5:e5:9f:f2:6b:1c:d4:b0:15:
                    86:60:e4:26:0f:04:d5:71:ac:61:61:56:42:54:3d:
                    68:a9:ef:0b:7b:6e:53:ed:29:bc:3f:4c:e5:53:57:
                    97:67:5d:07:b4:d2:26:68:da:c0:89:8e:3f:92:45:
                    77:80:c8:af:ac:b8:f0:10:99:02:2d:87:32:5e:e2:
                    2e:07:7e:52:03:44:1c:2c:8a:15:38:a8:d4:48:71:
                    b4:79:29:cd:39:dc:2b:88:c4:35:8e:78:92:a1:aa:
                    ce:a9:50:24:30:11:fe:df:5c:37:64:71:2b:34:13:
                    02:c0:7b:bc:4b:6b:3b:0a:29:d0:ee:12:71:3a:16:
                    23:ef:53:f6:67:b9:8f:30:58:0f:6e:db:c4:6f:56:
                    70:94:38:b3:2e:21:5a:ea:10:04:57:d4:cf:a9:29:
                    3f:03:5a:64:7e:65:6f:24:99:5c:67:c7:f7:d7:14:
                    9d:3a:f7:cc:61:cd:a3:1e:5d:92:4f:e8:0e:81:93:
                    59:70:4f:c9:72:63:f7:54:69:2d:e5:bf:eb:33:3f:
                    61:90:08:fb:ba:3d:6a:39:a6:26:1f:35:d0:3a:48:
                    58:65:47:cc:da:10:02:83:a7:49:80:0b:8d:9a:8c:
                    99:d3:b2:8a:50:10:33:19:de:58:0c:63:a9:be:51:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:52:C5:C6:0C:9F:86:4F:83:93:44:19:19:C1:9F:7F:4D:28:7E:33
            X509v3 Authority Key Identifier:
                keyid:4C:C1:AA:83:A2:8A:10:37:72:49:B6:EA:4B:89:D9:ED:DA:06:A9:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMGqg6KKEDdySbbqS4nZ7doGqXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7E3/EADC019A245811F193E0E18BC3833773/TMGqg6KKEDdySbbqS4nZ7doGqXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ac:aa:3a:42:f0:6c:dd:51:c2:26:e4:bc:27:b8:f8:83:98:
         df:6f:46:13:23:23:f4:53:01:f8:0b:3f:dd:fc:cb:70:e2:ed:
         9d:93:52:ff:29:4e:5f:52:5a:ae:75:fc:7d:fa:d2:e2:ab:6e:
         a8:bf:08:62:44:14:c4:f3:7a:a7:72:89:22:bd:fb:db:1d:29:
         1d:b4:66:76:ec:28:66:87:80:b2:72:ef:a4:a0:e5:d8:4a:e6:
         54:80:ec:46:6b:94:b7:52:62:06:0c:97:d5:55:cc:1d:11:1b:
         ac:f7:99:06:4a:c5:d3:1b:a5:f1:58:fc:b6:6b:58:7c:e8:53:
         34:77:38:2d:5a:da:41:87:6b:c8:92:86:e1:8c:8e:ed:a1:13:
         07:95:bc:96:17:8a:e3:5e:6a:28:ed:d8:9a:03:bb:fd:a1:b4:
         24:03:e6:45:63:55:df:ed:96:55:9f:94:4b:e4:24:1e:f5:ce:
         14:4d:78:9c:60:ee:58:60:cf:f6:c7:d2:f1:0f:8e:4f:7c:6c:
         59:25:18:7d:32:a0:03:61:0a:05:5d:08:5e:3d:80:81:a3:34:
         d7:8c:04:22:5c:51:47:73:fd:5a:18:67:b2:36:33:66:5f:b6:
         d8:b0:f8:43:e1:7e:08:31:65:ba:a2:ce:db:34:c8:1e:bf:b3:
         4e:72:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:27 2026 by rpki-client