Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File:                     tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier:          e0e+aufTbI/2RppQKpG5eDUHOyGTP54XMNyYeUaA+u4=
Subject key identifier:   95:4D:4E:D0:6A:30:3A:43:4E:F1:3A:8B:16:26:AE:52:2C:95:6D:DF
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer:       /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number:          0136
Signing time:             Mon 01 Jun 2026 06:13:31 +0000
Manifest this update:     Mon 01 Jun 2026 06:13:30 +0000
Manifest next update:     Mon 08 Jun 2026 06:13:30 +0000
Files and hashes:         1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: CO15N7r5KskC1K8HaBMYAU078HujOuZyE9ZijL0J/os=)
                          2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: NPEHXK4kvB3m3Mt2iQopHp4B8bUEbfWS8NtHZ6Qe9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
        Validity
            Not Before: Jun  1 06:13:30 2026 GMT
            Not After : Jun  8 06:13:30 2026 GMT
        Subject: CN=6a1d230b-2247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:6c:65:b9:9c:64:c5:17:ee:6d:93:4f:5b:
                    b0:c2:36:e4:37:70:36:b2:eb:4b:07:aa:87:df:72:
                    3b:74:a4:92:7b:90:32:79:67:f8:c1:84:73:87:79:
                    56:20:e5:06:db:db:05:52:3d:4f:d6:93:9d:c6:e9:
                    3d:21:7e:80:54:fb:ea:27:25:40:4b:85:b0:cd:ef:
                    08:7b:a8:23:0b:8a:f0:1e:21:aa:87:bd:51:fa:fb:
                    d1:c5:a3:bf:4f:a2:5a:f2:39:24:9a:35:2d:25:e9:
                    78:58:fe:6e:80:a3:a8:02:33:27:43:c6:79:76:26:
                    83:e6:97:10:4d:1f:6d:c1:90:e8:70:9d:7d:02:e1:
                    83:a3:f2:d0:08:b6:9f:e2:88:b6:82:b1:21:a3:13:
                    f3:58:70:67:5d:23:2f:59:f5:e8:8d:10:a7:e5:0c:
                    0c:fd:dc:95:de:7d:e4:fa:50:5a:42:16:48:3d:9f:
                    6d:26:d2:df:a9:45:e4:0b:a8:0f:06:79:cb:af:09:
                    95:a6:07:9d:1c:30:1e:82:3f:f6:2d:1e:50:ea:23:
                    9a:02:75:c4:a0:41:ca:b3:15:20:e9:66:d1:05:ba:
                    89:0a:33:f8:54:70:f0:99:4e:57:c6:ad:43:5e:c0:
                    3e:12:a1:78:5c:a0:c6:86:44:e7:ae:97:2d:27:6a:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:4E:D0:6A:30:3A:43:4E:F1:3A:8B:16:26:AE:52:2C:95:6D:DF
            X509v3 Authority Key Identifier:
                keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2d:6d:0a:08:81:17:08:2f:7f:63:74:47:b5:81:30:24:c5:
         65:13:6f:ca:a5:54:7a:93:10:23:8e:08:b0:eb:33:9d:82:11:
         db:49:08:4f:31:92:c0:11:ba:12:77:29:33:25:f9:ca:88:e0:
         88:37:2e:58:22:f4:63:d7:5a:75:8f:e7:ba:50:49:88:4e:c6:
         ad:a5:23:a8:39:31:ee:1f:7d:ee:e0:9d:43:1d:ea:cf:e0:f5:
         2e:72:4f:58:0a:28:db:d4:63:e8:6c:29:7f:97:75:13:ae:c2:
         0a:56:88:35:97:2a:12:47:d8:73:fd:2c:2b:87:a4:bd:c3:ee:
         7a:78:de:a7:c9:01:b7:bb:e2:66:48:fd:e2:54:83:3b:a4:9f:
         48:b0:8e:ac:c1:ad:58:fb:70:3e:7c:9e:12:53:49:26:26:ea:
         53:63:31:fc:1d:50:e6:43:9b:4a:ec:13:d8:4e:9e:fa:8e:fc:
         fe:fe:93:a4:2b:7f:6e:07:d8:c9:cc:27:c9:18:f5:bb:38:b2:
         91:b2:0c:d6:2b:25:6d:62:c7:69:0b:85:7e:3e:fc:47:02:7c:
         95:c8:17:4b:49:1e:99:96:9d:bd:a7:5c:70:a3:d5:48:16:ed:
         1e:2a:22:2e:15:20:01:25:42:02:ac:09:2d:24:de:37:dc:d0:
         55:c1:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client