Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
File:                     TAV55XydHpSk4-TgZlZmIOww4qc.mft (raw, json)
Hash identifier:          5cCrw/+QbqVL1ER0BZm27irulTrsxD+ScrKu7hZs528=
Subject key identifier:   31:E5:B3:30:ED:04:37:08:04:76:7A:4E:1C:76:0B:1C:DC:3E:13:8D
Authority key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7
Certificate issuer:       /CN=A917C34D/serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
Manifest number:          073E
Signing time:             Sat 04 Apr 2026 21:32:45 +0000
Manifest this update:     Sat 04 Apr 2026 21:32:45 +0000
Manifest next update:     Sat 11 Apr 2026 21:32:45 +0000
Files and hashes:         1: TAV55XydHpSk4-TgZlZmIOww4qc.crl (hash: DxN4M5UmAxuxfTFTQYFcUNWHejojcEZIJWL3WoTMkYo=)
                          2: 00F7933C6F3B11EBA740F268C4F9AE02.roa (hash: s/2DoIpcOiXHmZ/+KE5myA7kBVq4IytAgITPwjdjfgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl
                          rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7
        Validity
            Not Before: Apr  4 21:32:45 2026 GMT
            Not After : Apr 11 21:32:45 2026 GMT
        Subject: CN=69d1837d-710b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:76:2e:52:af:91:51:93:ea:0f:84:7c:84:
                    32:14:08:16:89:3b:69:fc:e4:e5:90:c1:1f:bc:f6:
                    da:b8:22:6f:43:b4:d3:ff:71:8c:8a:b2:20:12:1c:
                    d0:f8:df:d3:b4:11:70:c2:37:14:42:dd:2e:b5:c6:
                    aa:57:52:1a:60:27:3c:9a:57:a2:22:4b:30:39:b5:
                    54:b9:04:f4:76:fa:97:64:ba:13:59:d4:21:d9:0e:
                    fd:69:52:28:9c:36:66:c2:c8:ab:6a:42:61:17:f3:
                    95:38:3b:eb:3b:00:b0:0d:71:4f:49:7f:04:f3:97:
                    c1:9a:1d:20:2b:dc:3a:71:33:53:8a:e0:c8:9f:38:
                    74:37:77:66:de:3e:6e:23:87:54:e8:6f:95:4f:06:
                    31:58:0a:cb:93:8a:99:75:5d:18:ad:1d:75:b5:b8:
                    b2:67:c3:8f:d3:b3:9c:0a:95:b3:10:57:ba:40:4f:
                    1b:0f:12:e6:4a:c6:54:9d:fc:cc:24:db:00:fc:d4:
                    57:af:0e:7a:db:c8:0b:99:4f:50:11:55:38:c0:e3:
                    0a:f4:b6:7b:21:8b:1c:d7:90:38:52:eb:e8:3d:d6:
                    3d:2f:3d:e2:bf:1a:af:55:a9:73:72:0b:04:b9:9c:
                    55:d0:67:31:23:bc:fc:11:88:99:5d:7e:ec:03:ea:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E5:B3:30:ED:04:37:08:04:76:7A:4E:1C:76:0B:1C:DC:3E:13:8D
            X509v3 Authority Key Identifier:
                keyid:4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:21:b7:c2:ae:d6:67:06:97:ad:7c:95:38:4c:54:c9:c2:79:
         9b:35:07:0e:4d:03:d9:fb:6e:00:24:e1:d5:80:a7:0f:51:13:
         a7:aa:0e:c6:ea:0d:e3:86:fb:e5:ef:fb:e5:2f:64:ab:73:53:
         a6:f8:40:2e:f3:27:60:2a:ef:39:6b:32:72:93:9a:96:bc:1d:
         b0:f5:88:30:fa:27:f7:db:8d:fa:de:7d:0b:7b:81:31:cc:e5:
         2a:68:27:cb:2c:46:0d:20:ac:c6:d3:2e:ea:9d:2d:26:c3:ff:
         ed:e7:70:0d:16:36:db:89:31:cb:48:93:21:76:4e:ea:87:3d:
         ae:8d:bc:63:08:11:5b:da:11:2c:f3:f7:30:a6:e6:1c:c7:fa:
         ad:06:82:14:a1:62:70:d6:09:2a:ba:90:ec:84:6f:04:2c:58:
         d7:8c:ef:94:ff:2b:97:6d:a7:05:d8:e4:bb:33:f9:99:23:b1:
         ba:2a:b4:4c:b7:9f:cf:d7:58:d4:92:4c:28:86:50:a0:09:77:
         c2:23:5d:d1:a6:c7:c6:1e:ff:ae:93:5e:11:00:ff:f1:e1:26:
         f0:8c:d7:6b:df:67:b3:2a:bf:58:c3:86:6a:80:81:16:a0:e5:
         71:db:b2:7d:c8:74:fc:ea:66:dc:ed:9b:09:26:60:88:b3:d9:
         09:03:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:57 2026 by rpki-client