Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
File:                     TA-99pF0oywUEWcaumPJ6rdWs4E.mft (raw, json)
Hash identifier:          xpSIGPbqX6c7lBVb+6ps6W/mylmU8iPDYpXHsgNf0Yg=
Subject key identifier:   EB:B2:0D:D5:56:D5:75:E4:EB:38:C6:B4:FC:D1:5B:C2:18:C3:EA:9A
Authority key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
Certificate issuer:       /CN=A915F38F/serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
Manifest number:          44
Signing time:             Sun 05 Apr 2026 07:47:10 +0000
Manifest this update:     Sun 05 Apr 2026 07:47:09 +0000
Manifest next update:     Sun 12 Apr 2026 07:47:09 +0000
Files and hashes:         1: TA-99pF0oywUEWcaumPJ6rdWs4E.crl (hash: lqxHFeSJgpmzl93a2s4G0iRH8TPgM7gIf49iR8FzrxQ=)
                          2: 75576E0ED0E911F0BF43FD85C4F9AE02.roa (hash: ipQdS/VlQkOxf1Hsp4sheFfGELACfRYo77XmCiNbqFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl
                          rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
        Validity
            Not Before: Apr  5 07:47:09 2026 GMT
            Not After : Apr 12 07:47:09 2026 GMT
        Subject: CN=69d2137d-faae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:56:bd:bd:1c:79:38:99:8d:58:1e:b3:20:18:
                    d4:e4:5a:45:5d:fd:ce:13:8f:b0:5c:01:85:27:a1:
                    62:68:76:0c:23:5d:f8:30:e5:40:2a:17:a7:6e:c4:
                    d5:81:d6:37:88:ea:ba:b3:c1:e0:7c:73:e9:db:4c:
                    6c:9a:33:9d:48:0c:d5:b2:84:28:a2:7b:9e:fa:d4:
                    e4:a1:93:c7:c9:ff:a6:a6:f0:bb:e9:23:87:8f:dc:
                    52:1d:fb:c4:46:fa:31:4d:8a:e8:d9:39:13:85:19:
                    56:0b:f5:5a:2d:18:aa:8e:d0:87:61:94:b0:c1:be:
                    59:b9:cf:22:58:55:99:87:b7:83:31:ef:85:29:da:
                    b6:96:df:b5:58:af:99:91:6c:95:50:9e:72:4f:6e:
                    16:0d:84:ee:26:32:96:f0:05:a0:34:91:dc:c4:6e:
                    e9:46:ee:d3:a8:f2:d9:0e:39:18:0d:d3:52:60:e5:
                    3c:1f:f9:09:89:83:d7:cc:d7:ab:ba:8d:1e:ac:bc:
                    a0:c5:a6:71:3c:20:88:c5:7a:00:f9:65:e7:64:f9:
                    07:c4:b7:8c:dc:23:65:69:c3:dc:e4:ca:28:ea:13:
                    2b:2a:0d:3d:f0:d4:07:26:92:ab:4f:b7:ed:b8:fa:
                    a3:fa:4b:23:92:54:3b:90:16:3b:50:8e:23:a5:09:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:0D:D5:56:D5:75:E4:EB:38:C6:B4:FC:D1:5B:C2:18:C3:EA:9A
            X509v3 Authority Key Identifier:
                keyid:4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:48:bd:d2:10:07:7a:4d:4d:c4:3b:e9:c1:db:0e:b8:9f:
         a8:58:19:dd:ed:c1:3b:a4:af:27:2e:c6:e1:4b:89:3f:b1:b6:
         f0:a9:80:e3:64:5a:29:04:d5:b9:84:a8:1c:42:95:eb:44:4e:
         69:b1:30:92:99:d5:29:e8:2f:8f:c3:62:45:75:69:6f:a1:39:
         a9:3d:42:48:29:25:5b:43:88:dd:bc:dc:b9:c4:e6:a8:3f:73:
         05:6e:bb:14:84:f0:e9:fc:9f:e4:7b:9b:04:74:cd:48:ea:af:
         43:a0:4c:c0:88:09:42:1e:1f:ab:31:d4:1c:fa:08:d0:b0:ba:
         f0:d9:19:99:38:e2:35:88:2b:ed:e1:c0:d7:08:37:f0:1e:1f:
         2c:84:e3:11:dd:17:af:2b:c4:78:97:0b:e0:8e:fe:6e:aa:59:
         a1:a9:80:3d:db:ab:fe:e6:d7:0d:8a:1e:9e:d7:cc:db:f8:3e:
         4e:07:af:47:71:8c:b8:31:cf:ac:4c:c6:4d:3f:d6:41:b4:ba:
         79:13:fb:a4:f9:18:9f:97:e2:96:0b:ef:5a:0f:c8:2f:99:e9:
         d6:eb:04:01:83:c6:62:0d:a8:8e:e7:d9:9f:01:ad:f9:86:fb:
         18:c9:27:88:87:93:4e:b1:2e:26:12:72:f0:6d:9b:f5:8a:61:
         69:45:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:10 2026 by rpki-client