Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
File:                     TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json)
Hash identifier:          uVXh5rnlAlYW1/OsBrPOY5OR7QWv7oZg7CIKoQkEx6A=
Subject key identifier:   4A:78:D8:33:EB:16:7F:BD:35:24:ED:C6:EB:8E:5C:1E:E4:64:9A:19
Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
Certificate issuer:       /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
Manifest number:          AA
Signing time:             Fri 17 Apr 2026 06:54:40 +0000
Manifest this update:     Fri 17 Apr 2026 06:54:39 +0000
Manifest next update:     Fri 24 Apr 2026 06:54:39 +0000
Files and hashes:         1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: mb7D7yNioZTN+sQm2VNU0mnUVM3fu0ZSNh5+WXyUrWU=)
                          2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: U6Gj26V+i3lpK2v7qmDyat8zRdsmA3qG+phGuDugByw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
                          rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
        Validity
            Not Before: Apr 17 06:54:39 2026 GMT
            Not After : Apr 24 06:54:39 2026 GMT
        Subject: CN=69e1d92f-87d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:b7:ad:1b:1f:e5:3d:09:e0:17:6f:43:21:
                    c5:a1:34:7a:d9:ea:00:ad:4d:de:c3:48:c2:bc:28:
                    ce:29:de:ea:5b:a8:a5:e1:95:8b:29:b1:5a:4f:b3:
                    e2:fe:80:45:88:62:1c:ca:a9:d7:22:1a:57:9a:7b:
                    b0:94:58:93:5e:de:5d:1e:5b:03:d2:05:9e:bc:20:
                    a3:82:05:4c:80:07:7b:18:4f:b5:fc:cc:d7:3d:6d:
                    94:7f:54:6d:74:a3:89:d1:33:a6:c1:53:c4:95:46:
                    b4:1b:8d:39:f2:2e:b3:d8:f9:c6:44:ba:02:fd:14:
                    10:da:8f:92:81:d3:03:2e:7d:41:b2:fb:34:8f:78:
                    17:36:08:e3:02:eb:04:1e:5c:77:5f:56:de:b1:b1:
                    d6:3a:2f:77:11:d8:d0:b4:ba:f1:a8:fe:20:e4:c6:
                    8c:94:59:3b:25:38:21:cf:ef:b2:09:29:a0:2c:a0:
                    21:16:d9:0a:40:72:4b:e7:e4:5a:e5:47:a7:c7:0b:
                    90:b9:20:b4:87:5d:95:03:ab:f1:ba:ad:d8:8d:ee:
                    a6:0d:83:7d:91:15:71:80:30:4b:d3:41:cf:1a:f7:
                    81:dd:4d:22:dd:a9:a8:0a:6e:ec:a6:80:71:36:d7:
                    73:3e:ec:64:66:96:2a:61:0f:af:18:2d:e9:29:a1:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:78:D8:33:EB:16:7F:BD:35:24:ED:C6:EB:8E:5C:1E:E4:64:9A:19
            X509v3 Authority Key Identifier:
                keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:15:8e:c4:c1:5e:d6:da:ce:af:af:d3:a9:d2:ec:f8:fc:73:
         7e:f6:3f:f5:d1:af:02:59:71:76:50:21:10:d1:51:49:c1:fc:
         d4:e7:82:a3:77:2f:b9:69:f3:2c:50:7b:3e:11:4c:fd:99:ba:
         b5:da:b6:24:af:1f:52:89:8b:c3:79:93:f3:f0:49:04:7d:b5:
         f2:f6:8b:10:23:6d:4a:d2:a6:92:5d:05:bd:6f:9d:f2:55:f1:
         cd:e2:ed:3f:1d:6f:ce:21:82:a1:e5:0d:fc:fa:2f:b6:96:36:
         21:dd:1b:d4:80:a6:d6:43:19:e4:2d:86:aa:2e:10:fc:e2:53:
         22:4c:c1:a8:9e:30:c8:81:2e:00:f3:7c:20:db:ca:87:ea:70:
         95:4c:4a:b1:db:b7:b1:6c:04:e1:58:dc:ee:5d:06:9d:3f:cb:
         0f:cb:c2:f0:65:2a:b1:c4:e0:29:fd:62:73:21:9f:80:7f:69:
         70:57:a4:8b:11:4b:01:ec:0b:42:56:9a:f8:58:08:cc:cd:f7:
         d3:fb:19:1b:ff:1c:db:24:7b:9e:81:75:86:cf:ca:da:fb:a4:
         15:68:d9:ab:4e:ab:73:ad:f2:22:3c:43:2b:18:d6:3f:7e:c3:
         d4:89:3a:c5:0c:65:18:ad:65:10:f6:34:ff:3e:98:79:4e:73:
         8e:b8:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:39 2026 by rpki-client