Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
File:                     tGgNFzsLuF80uLi77cMmOXlY2O4.mft (raw, json)
Hash identifier:          gNax4c4PYYYlBoJDtJ4Sak0iLoBWlXtqQahl3Och69s=
Subject key identifier:   3F:11:13:35:06:02:8D:16:73:76:E9:34:8D:74:18:C2:91:3E:93:DB
Authority key identifier: B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE
Certificate issuer:       /CN=A913F474/serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
Manifest number:          58
Signing time:             Sun 05 Apr 2026 07:28:01 +0000
Manifest this update:     Sun 05 Apr 2026 07:28:00 +0000
Manifest next update:     Sun 12 Apr 2026 07:28:00 +0000
Files and hashes:         1: tGgNFzsLuF80uLi77cMmOXlY2O4.crl (hash: wTcCOcuYiz80oftU7ljSl5yICcKwBerETFLANREKCrA=)
                          2: F265F888AE6C11F0B33E1454C4F9AE02.roa (hash: ivFBlHevdOFVbW9nrBvKz99BRl68lGOgg9a7LXkf38s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl
                          rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F474, serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE
        Validity
            Not Before: Apr  5 07:28:00 2026 GMT
            Not After : Apr 12 07:28:00 2026 GMT
        Subject: CN=69d20f00-59d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:56:e7:76:b7:a4:3e:dd:fd:e3:a3:95:ea:79:
                    55:61:b7:11:59:bf:50:a1:1f:01:3e:11:e4:69:04:
                    79:6b:b2:5b:80:63:7b:39:7a:bc:ff:c1:85:e3:4c:
                    a0:3d:00:e7:82:f0:2b:63:db:e1:a1:0d:1b:5a:08:
                    fa:20:b0:14:97:27:1d:f9:7b:75:86:86:f1:10:fe:
                    f2:4d:96:3a:6c:c6:50:c3:15:a1:dc:31:b1:b9:a1:
                    58:0f:80:d9:d0:88:0b:dd:f7:2b:c4:65:fd:46:d4:
                    83:4b:b8:ad:6e:af:1c:69:e8:df:be:9e:d8:a2:73:
                    7e:e8:8e:ab:f6:47:59:f6:fd:89:f5:7f:c4:7f:73:
                    ef:e3:53:45:5f:c9:34:4f:f0:46:c7:fe:ff:2f:28:
                    fb:9c:55:dc:98:7b:e5:94:87:af:22:59:7c:2e:1a:
                    5e:1d:2e:18:5e:cf:a7:cc:f3:5d:63:31:77:60:c0:
                    a9:3b:a7:c5:3e:95:57:df:60:51:50:23:40:7f:51:
                    41:03:65:fb:d4:f2:0a:a3:f0:99:bb:9b:88:c6:d2:
                    0b:68:a2:b9:75:2e:a6:8b:eb:a6:1a:fd:e0:86:83:
                    9d:55:06:83:8c:45:fe:aa:71:56:93:27:15:8d:87:
                    c2:5d:22:19:07:52:81:9f:30:9b:b7:f4:b2:8e:4a:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:13:35:06:02:8D:16:73:76:E9:34:8D:74:18:C2:91:3E:93:DB
            X509v3 Authority Key Identifier:
                keyid:B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:cc:77:49:50:ea:1a:74:d6:d4:38:c2:2e:b4:11:b1:9e:
         cd:6d:96:ce:43:3d:26:4e:d9:20:b5:1c:0f:5f:bb:60:60:bf:
         77:98:4c:33:cb:77:65:bd:0e:1d:ed:3b:00:f1:24:d2:4d:e2:
         4a:f3:9a:50:98:b7:f5:74:d6:b0:2f:a3:2d:33:ef:89:02:ce:
         40:1c:ef:91:73:16:94:e8:de:fb:6a:d8:84:c7:ec:5a:32:ec:
         8a:e5:17:47:89:a3:03:f4:ec:f0:a8:0b:f2:4d:c4:7c:51:f4:
         96:33:b3:cf:d4:4f:1d:06:d5:0a:f6:1b:6f:0e:e0:12:9f:7f:
         e6:6f:23:34:fd:00:73:80:ab:68:9c:4a:c8:90:f0:9f:00:5a:
         3c:30:6b:65:bc:06:3c:ec:5e:3b:9c:90:92:19:9c:ea:4c:90:
         31:ae:03:6a:d3:fb:44:0b:8f:33:ec:16:9e:52:18:da:32:a6:
         20:8a:b1:40:f6:bb:7a:f7:83:82:af:da:52:54:f0:92:2c:6c:
         d4:08:62:b6:88:96:9c:e2:72:57:50:f0:a0:21:f5:f9:34:3f:
         73:b2:cb:d2:a9:0f:8a:ef:da:46:ad:52:e0:5b:3a:b7:ba:bb:
         35:c4:81:f7:5e:fe:32:db:71:04:da:a7:bf:a3:67:a1:08:e2:
         e1:7d:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:13 2026 by rpki-client