Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
File:                     TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json)
Hash identifier:          q536jvkkrUXIX/wTJTJwituVUN0jgf+Is+wHUg2YB84=
Subject key identifier:   32:39:7A:BE:A0:2B:0D:6F:C4:9D:DA:AA:06:E5:7E:00:33:10:98:44
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Certificate issuer:       /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
Manifest number:          0141
Signing time:             Fri 17 Apr 2026 05:06:52 +0000
Manifest this update:     Fri 17 Apr 2026 05:06:52 +0000
Manifest next update:     Fri 24 Apr 2026 05:06:52 +0000
Files and hashes:         1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: K7tfXED7YHJAUG1iipH3sDgVsmD0c3zwLCCGswen69k=)
                          2: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: iQY38hYAmhqJkb6ZCEBZAdClrGW6LNCJUEQ4iP8bQ6k=)
                          3: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: jPNeK/T4iEnyu07qfGOB5hnamUYxNaGDvce1vSeeQew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
        Validity
            Not Before: Apr 17 05:06:52 2026 GMT
            Not After : Apr 24 05:06:52 2026 GMT
        Subject: CN=69e1bfec-0f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:ef:fa:0d:69:da:53:36:9e:60:70:84:60:
                    f2:3a:8e:ef:ce:d7:3d:08:d3:0e:00:ad:10:c2:cf:
                    b8:8d:9f:91:e7:f9:9c:64:42:3b:d7:b6:3c:ef:5f:
                    9c:22:8a:86:07:24:14:ec:01:3f:b6:71:bb:ca:b0:
                    17:33:f2:52:c6:66:d1:f3:85:b9:90:ad:d0:49:9b:
                    ce:87:90:59:f1:a4:e8:ac:b1:40:6e:20:01:50:a7:
                    23:1a:6c:5f:f7:ad:65:19:a7:7d:85:15:0e:7c:f4:
                    cf:22:1d:a2:d8:bc:11:0e:49:24:b0:8b:c4:75:1f:
                    00:23:b8:97:0b:a2:bf:0b:f5:8d:6f:97:4a:d7:77:
                    71:bf:a5:7e:14:24:c5:23:ba:36:c3:89:a6:3e:da:
                    55:0a:49:e0:69:c7:7e:98:b6:9b:92:4a:1b:48:a4:
                    53:84:88:91:26:ba:da:a2:e6:6c:c2:d4:14:f3:16:
                    f8:03:98:bc:e5:f8:83:4f:0d:29:d7:af:e7:46:de:
                    19:e5:fc:41:7b:1c:a1:54:ba:86:23:1e:76:ca:07:
                    2f:10:01:25:b7:ed:da:b7:cb:77:cf:3e:4c:7a:e7:
                    0e:a6:2d:15:2d:d5:b1:b1:fe:a6:e1:67:8e:d9:b4:
                    e1:23:e7:77:50:0e:09:5a:38:95:3c:ff:f0:cb:57:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:39:7A:BE:A0:2B:0D:6F:C4:9D:DA:AA:06:E5:7E:00:33:10:98:44
            X509v3 Authority Key Identifier:
                keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:80:87:82:58:30:fa:ee:c1:b3:65:50:96:32:eb:db:43:
         8f:98:a6:3d:30:14:ef:be:92:6e:5d:16:6e:59:c0:ca:6e:f4:
         b7:5c:af:da:94:bf:80:0a:b6:85:13:4a:44:cf:40:4f:bf:1f:
         7b:06:a2:f9:6d:2f:0e:ed:c0:df:8e:c1:70:19:80:ff:ef:ee:
         0e:89:c6:b5:b2:2c:63:c6:89:97:71:08:64:6c:db:37:ae:40:
         c3:82:48:43:2d:39:80:91:36:83:c7:5c:38:89:b7:5f:6c:82:
         ad:1b:fa:8f:31:84:b3:9e:5e:bd:c1:51:6d:4d:e0:84:57:40:
         fb:7c:02:4e:65:f0:55:b9:eb:58:c9:23:0e:6e:6f:89:14:1d:
         dd:22:51:47:62:5a:a7:64:69:1e:88:aa:89:3f:9d:da:fd:f5:
         26:7e:6b:a9:d3:82:85:30:68:6d:ec:5f:0b:bd:a0:e5:08:ea:
         b4:de:1d:ed:7b:4a:41:f1:ce:0d:0b:93:a0:05:7d:66:af:53:
         20:85:a3:08:fb:96:47:bc:b0:72:5d:cf:a6:f3:a6:16:cb:fd:
         be:66:a3:1c:d7:df:8a:ba:20:91:11:82:5c:84:a7:c5:c6:64:
         cf:7c:e1:17:f8:f5:05:fa:9e:36:66:ba:42:13:bb:bf:32:5a:
         45:2d:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:02 2026 by rpki-client