Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
File:                     Tusdx9KCFNMWqjN4seKV6RAbTKo.mft (raw, json)
Hash identifier:          QU0mbg8fvPzO1CCZqaTAeHr34XtkXtrThwh2RU4rgTI=
Subject key identifier:   21:40:8C:11:5E:8D:23:B9:4A:76:FF:D0:2D:17:FB:61:E1:52:CD:21
Authority key identifier: 4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA
Certificate issuer:       /CN=A91B6B4B/serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
Manifest number:          B2
Signing time:             Sun 05 Apr 2026 06:30:34 +0000
Manifest this update:     Sun 05 Apr 2026 06:30:33 +0000
Manifest next update:     Sun 12 Apr 2026 06:30:33 +0000
Files and hashes:         1: Tusdx9KCFNMWqjN4seKV6RAbTKo.crl (hash: RJRQpwOJ8tn87URInKvS+bWx9Y0kzYuuxJ3gjzdu9w4=)
                          2: B47FEDD024C411F0A4C45287C4F9AE02.roa (hash: MojY0BL42g+25RMVkptUnRgFYNWH3XV06u/QKeiFORg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=4EEB1DC7D28214D316AA3378B1E295E9101B4CAA
        Validity
            Not Before: Apr  5 06:30:33 2026 GMT
            Not After : Apr 12 06:30:33 2026 GMT
        Subject: CN=69d2018a-7020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6d:a6:90:dc:31:e4:1a:88:cc:91:76:0c:26:
                    20:42:a3:d0:dd:5a:25:35:6f:bc:9d:ca:1e:29:88:
                    e8:22:1c:eb:4c:c2:54:7b:e1:e9:57:8b:a5:6b:6d:
                    03:dc:ed:b3:2a:0e:7d:23:57:8b:88:46:ba:c3:0d:
                    20:30:07:30:1f:05:c6:6f:c6:fe:31:c0:13:b6:a4:
                    7d:c2:40:3a:a8:60:a1:63:ff:a0:75:8b:2d:7a:7d:
                    73:6d:88:04:5f:87:4d:00:71:8b:c7:eb:a6:d3:2f:
                    4c:33:06:b6:eb:70:5d:f0:8d:45:fe:1c:da:ac:40:
                    94:24:0d:af:f3:fe:b5:ea:9a:9e:ca:7c:7e:32:c3:
                    ea:95:d6:88:0f:b6:c9:bc:23:01:a9:df:ec:48:d9:
                    28:3e:9c:ad:50:7b:1b:ac:c9:1d:64:fb:26:8b:00:
                    bf:6e:90:bf:8c:76:bd:a2:35:02:6a:5a:5f:d0:31:
                    ed:73:e6:7c:76:89:6f:9d:cf:2e:35:bf:5b:6d:12:
                    d6:c4:ca:5f:26:f4:6f:a0:a0:42:b8:2b:7e:a0:4e:
                    99:2e:55:68:e7:8f:b2:1a:86:41:70:c4:8e:2d:ff:
                    a0:f0:6d:76:8a:85:0c:5a:df:ce:96:86:a5:00:3e:
                    c0:78:5a:62:a5:92:92:19:34:09:37:49:8b:44:8c:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:40:8C:11:5E:8D:23:B9:4A:76:FF:D0:2D:17:FB:61:E1:52:CD:21
            X509v3 Authority Key Identifier:
                keyid:4E:EB:1D:C7:D2:82:14:D3:16:AA:33:78:B1:E2:95:E9:10:1B:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tusdx9KCFNMWqjN4seKV6RAbTKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/C399FBC224C311F096C68481C4F9AE02/Tusdx9KCFNMWqjN4seKV6RAbTKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:af:53:d8:24:9b:ff:2e:c0:ba:58:b1:37:fd:ab:fa:fc:
         d3:a6:7d:c7:05:c5:9a:c9:6b:51:47:12:ff:fd:33:e8:47:df:
         98:94:8f:de:d1:79:40:48:e1:a1:51:11:01:f0:9f:1f:ad:39:
         f5:9a:44:61:78:a2:a4:52:71:0a:e5:03:64:b9:6d:90:00:b6:
         4e:bf:5a:38:0b:3d:68:d5:4a:20:4c:39:9f:d5:98:5c:33:7d:
         ea:2a:22:8f:90:72:a1:7b:a8:7e:0e:d9:85:11:2a:a2:45:dd:
         e0:51:df:10:bb:a0:e0:b4:5d:1c:0e:22:26:a9:8c:b2:fc:e8:
         a0:42:ee:4e:fd:6b:2d:df:87:67:98:53:a2:90:d5:29:ab:b2:
         dd:57:57:89:ac:a0:05:ee:1a:e4:95:c2:82:26:25:be:57:d0:
         32:eb:7e:29:79:7d:f4:52:f9:2e:1e:ba:d8:b8:b4:aa:ff:c3:
         ca:5b:7c:52:73:f8:ec:65:65:4e:b6:16:40:06:e2:4a:54:0f:
         ad:33:e9:02:38:ec:bd:15:29:d2:24:22:75:f5:9d:da:6e:cf:
         cf:79:70:40:4b:b4:5c:9e:e7:61:16:14:da:83:08:21:a1:75:
         1d:43:0f:ab:30:9f:ec:ea:64:79:28:1e:d4:28:ab:8c:05:07:
         df:6a:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:22 2026 by rpki-client