Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
File:                     TTnePlBgaMODagBUgVVBPmgllbM.mft (raw, json)
Hash identifier:          LYDLPTB4bFHBgfsXph3W3O+MCHVF9B3N3yQfWfJyij4=
Subject key identifier:   E9:6F:84:7B:98:44:75:9D:F9:59:9B:D4:FA:B2:F2:15:E4:A9:7B:68
Authority key identifier: 4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3
Certificate issuer:       /CN=A916C4FA/serialNumber=4D39DE3E506068C3836A00548155413E682595B3
Certificate serial:       03F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
Manifest number:          0643
Signing time:             Sun 05 Apr 2026 00:16:54 +0000
Manifest this update:     Sun 05 Apr 2026 00:16:53 +0000
Manifest next update:     Sun 12 Apr 2026 00:16:53 +0000
Files and hashes:         1: TTnePlBgaMODagBUgVVBPmgllbM.crl (hash: QZuZ6RcT+La2RpMrWsxWeJnck3U8UrwJX1yliGDRiv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl
                          rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4FA, serialNumber=4D39DE3E506068C3836A00548155413E682595B3
        Validity
            Not Before: Apr  5 00:16:53 2026 GMT
            Not After : Apr 12 00:16:53 2026 GMT
        Subject: CN=69d1a9f6-bb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:20:f5:eb:a1:7e:a1:ea:4a:13:48:8a:4b:
                    bf:2e:bc:b9:82:23:2e:8c:51:51:eb:2d:8e:2c:03:
                    79:5c:04:55:73:9f:93:bf:fc:6c:9d:40:bf:ba:cb:
                    dc:18:60:a9:f9:2a:77:be:bd:9b:30:46:5a:34:7f:
                    65:0c:4d:63:2b:91:cb:90:15:fe:91:53:be:d6:dd:
                    cf:30:59:d4:e2:17:eb:2d:72:ee:49:bf:7f:15:f2:
                    12:96:6a:be:34:76:fd:cd:d9:b8:b4:d8:d0:84:ba:
                    42:b5:76:2e:91:00:39:69:36:d3:dc:a5:ca:c2:a3:
                    eb:26:bb:4b:f6:9a:00:97:00:9b:2b:78:44:6b:2b:
                    e2:ce:27:7e:fc:f0:1f:ba:b9:a5:b4:77:73:99:b2:
                    df:54:97:f8:f6:10:ec:47:8d:07:f2:e2:fa:64:06:
                    02:b6:35:cd:bb:1b:dc:8f:08:a3:2a:24:38:0b:12:
                    50:37:67:b2:89:82:6b:cb:db:4d:97:8b:ad:e6:78:
                    a4:39:14:42:89:a2:78:7c:0d:f4:c3:06:04:81:7e:
                    2d:43:89:a6:d0:fa:a2:00:e6:2f:83:8b:a5:34:4b:
                    d3:85:48:f2:72:01:f3:37:75:07:3b:c4:75:35:3a:
                    c9:98:a5:88:43:c3:0e:28:4b:d6:56:bd:15:78:bd:
                    70:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6F:84:7B:98:44:75:9D:F9:59:9B:D4:FA:B2:F2:15:E4:A9:7B:68
            X509v3 Authority Key Identifier:
                keyid:4D:39:DE:3E:50:60:68:C3:83:6A:00:54:81:55:41:3E:68:25:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTnePlBgaMODagBUgVVBPmgllbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/TTnePlBgaMODagBUgVVBPmgllbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:34:04:a2:31:42:4f:30:0b:06:b2:1e:ec:9c:fb:a9:e2:
         74:48:7a:09:9d:6e:b7:67:14:74:6c:45:c9:f2:aa:dd:6a:82:
         84:20:be:77:c1:bd:3d:a1:9a:f1:14:38:87:1c:0a:1e:3b:ed:
         38:7e:de:57:69:2a:4f:3d:a9:70:93:ae:bd:66:57:cc:64:7b:
         b7:69:dd:f1:cf:f0:3a:76:e2:10:a9:8d:08:49:9a:c6:2a:8f:
         bc:a2:54:b3:42:66:82:00:70:54:9c:e8:6c:6a:30:15:4c:15:
         a3:d6:7c:91:c8:da:2d:0e:03:f8:17:34:fb:60:17:68:6c:87:
         39:d2:af:7f:20:ba:78:40:34:0d:08:6c:c2:e3:1c:73:de:0a:
         2f:79:fb:9f:2b:70:77:da:e1:68:4a:b3:48:18:45:3f:2c:98:
         cb:2b:4a:6f:fb:59:1b:a6:12:26:4d:d1:de:2d:f6:6f:99:93:
         fb:d7:a9:95:b6:da:f0:d4:29:9b:95:dc:20:f9:8c:78:15:5d:
         cd:fd:00:45:5d:1b:df:61:06:91:50:33:09:bc:ef:56:e9:d4:
         e8:1d:79:5c:e0:4c:82:2e:52:a5:41:cf:ca:5d:c5:25:01:5e:
         82:3e:33:37:5c:ac:81:0a:1e:58:dd:fa:6e:34:de:cc:ae:8d:
         55:c9:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:11 2026 by rpki-client