Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
File:                     tLhVi-xUNiD-bqkv68XoqSchTDk.mft (raw, json)
Hash identifier:          6GoHDmM71PJd6ISRttZ/jRHikJzXLdN4XoXDFXlBA/E=
Subject key identifier:   4E:1B:29:B3:41:4F:88:C2:AE:29:2A:EC:52:CE:51:13:0C:C3:1F:AC
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Certificate issuer:       /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial:       0ADA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
Manifest number:          0ACB
Signing time:             Sun 26 Apr 2026 19:21:39 +0000
Manifest this update:     Sun 26 Apr 2026 19:21:38 +0000
Manifest next update:     Sun 03 May 2026 19:21:38 +0000
Files and hashes:         1: tLhVi-xUNiD-bqkv68XoqSchTDk.crl (hash: 8yP1GE/KnGZVjyn20SFZCyW7noU748WRtFbISZqRvyw=)
                          2: FC46090E9C2611F093B6FA57C4F9AE02.roa (hash: Js8cZgoWxEm28eX384SK+YZXcmAPJ6mZANs9VezfqXk=)
                          3: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (hash: utr9cvGOzINqaYUQ/dmwQU5yDRbxn3goNF9CCVXnSpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
                          rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 19:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
        Validity
            Not Before: Apr 26 19:21:38 2026 GMT
            Not After : May  3 19:21:38 2026 GMT
        Subject: CN=69ee65c2-c32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cf:b6:9b:da:96:71:c2:a1:6b:f0:ac:55:b1:
                    f4:51:b9:92:f6:73:2e:33:ff:f7:e8:42:e5:58:30:
                    0b:54:f1:45:76:da:ac:3c:ed:af:b7:e2:f5:9f:f5:
                    61:e0:e9:4c:d1:63:73:24:c5:3a:39:79:b5:af:e7:
                    b1:17:ae:08:d0:98:02:26:5f:64:25:09:46:69:0f:
                    f1:71:70:02:75:b1:89:ba:e8:17:7d:8d:ec:6a:5f:
                    d1:c0:b5:92:22:8a:34:40:bb:c6:e6:4d:bf:1a:d3:
                    87:0a:30:d5:a8:b9:fa:9d:87:da:b5:b4:d5:5e:8c:
                    96:16:93:72:70:56:f2:ec:87:75:94:38:f0:82:60:
                    26:06:5b:f0:d9:db:28:42:bf:b7:0f:8d:f6:90:9a:
                    95:3e:fc:b7:01:e4:6f:f1:40:45:14:ff:9a:55:6f:
                    d8:d8:fd:c5:c8:4c:68:83:cd:4b:b3:72:41:eb:56:
                    a9:b8:68:05:0c:46:4c:55:67:3e:7e:bb:53:ba:7b:
                    34:87:90:bd:fe:ea:74:55:c0:ef:46:bf:67:8e:b4:
                    94:41:fb:75:e5:c3:86:03:07:b4:19:55:a7:c0:e0:
                    e8:70:56:bf:4c:4c:39:20:2e:24:73:0b:58:a6:fe:
                    be:2e:04:25:19:94:c1:1b:e9:00:07:c5:87:53:87:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:29:B3:41:4F:88:C2:AE:29:2A:EC:52:CE:51:13:0C:C3:1F:AC
            X509v3 Authority Key Identifier:
                keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:93:90:e1:dd:2d:85:d7:94:77:61:2e:e5:a7:19:64:c0:
         07:3f:e0:02:3b:a1:16:bc:0f:32:da:93:3f:35:b9:d3:de:54:
         a2:b1:56:93:4e:08:e4:f1:ec:8f:3a:1a:23:ac:01:ac:a8:5c:
         c9:1a:50:5a:9f:ee:fa:2f:36:21:04:e5:46:30:c8:5f:e9:4f:
         41:80:bd:81:8e:10:93:0c:74:64:84:f5:2f:1b:f5:34:03:17:
         b0:48:66:b7:b4:89:8e:d4:d5:9b:24:75:c6:af:13:06:be:1b:
         4b:cb:b6:b5:a6:68:f6:5b:1e:61:b1:b4:d1:d7:38:89:c8:de:
         07:ec:33:ff:19:48:2d:a5:16:36:a2:a1:8e:b0:83:aa:0e:fa:
         c4:fb:46:0c:a1:fa:e1:8b:95:a0:e7:52:b0:5d:66:fd:71:c9:
         0e:7c:16:ca:5a:b8:cc:96:00:8e:87:d5:80:a2:6f:d7:63:83:
         8f:1b:12:56:af:88:95:be:e5:36:92:c9:c0:ec:83:ad:f2:19:
         60:a3:f4:f8:b4:2c:5b:c4:77:46:c6:ad:73:40:ab:6d:cd:6b:
         c8:58:ff:a1:02:ba:22:c2:ef:fc:e3:1b:53:70:2f:a8:ae:e3:
         b7:55:23:58:4c:26:0f:19:19:b0:bf:9c:0d:d8:d4:d9:8e:57:
         a0:2e:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:23:45 2026 by rpki-client