Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          sYSs+gNDGaUeyLJKq9pCI1IWwK8XXO3x7aRhTYgWVZU=
Subject key identifier:   BB:07:35:CC:B3:EC:C4:0A:0F:10:EA:B6:04:77:E3:37:81:C7:BF:76
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          0107
Signing time:             Mon 01 Jun 2026 06:53:44 +0000
Manifest this update:     Mon 01 Jun 2026 06:53:44 +0000
Manifest next update:     Mon 08 Jun 2026 06:53:44 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: cpBiSg3ctXHMXFnFIUpTHXWRe4gsl0diHULqNdRr7JM=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Jun  1 06:53:44 2026 GMT
            Not After : Jun  8 06:53:44 2026 GMT
        Subject: CN=6a1d2c78-0561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:7a:e4:01:36:b0:7c:5a:11:e6:88:00:18:
                    61:08:e4:4e:f0:48:3b:65:6e:63:29:a5:36:4a:a6:
                    03:b6:a3:34:68:74:20:4a:2e:d4:23:f7:b5:c1:90:
                    8e:36:cf:e0:7f:0e:8c:bd:a7:8b:d0:d7:37:f0:22:
                    f8:d4:f2:d0:52:0d:5f:c8:0b:c0:9c:3b:21:5b:f6:
                    11:1c:b2:de:47:70:85:b5:80:af:8b:d2:74:02:43:
                    4d:ef:d8:f8:38:21:04:5a:68:c4:98:90:18:d2:27:
                    79:7c:dd:40:64:3c:b5:ac:7b:78:ec:05:4b:98:24:
                    9d:d8:b0:ae:b3:f8:11:cf:d6:ed:f3:16:20:5b:11:
                    05:15:94:b6:24:98:2e:f5:bf:34:2e:ee:67:e5:ee:
                    c2:c1:90:25:de:25:0d:48:f7:9d:9a:4d:22:fa:7e:
                    e1:e0:9f:bb:10:b2:b8:d5:f5:30:a2:2b:bb:0f:86:
                    94:33:10:00:c2:8e:f8:5f:80:62:1e:71:f3:dc:9e:
                    fe:af:53:2c:fd:4e:19:97:46:06:3e:6f:30:4d:33:
                    fb:65:d0:5d:c2:20:ef:e7:3c:20:2b:b7:c7:72:a3:
                    6d:cf:fd:57:fa:b1:f5:d6:8f:7f:64:70:9b:4e:55:
                    ae:13:d1:c5:cb:e4:51:5a:83:db:5f:cc:11:7a:aa:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:35:CC:B3:EC:C4:0A:0F:10:EA:B6:04:77:E3:37:81:C7:BF:76
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:cd:40:d2:1d:3f:10:c4:7a:f4:e6:c2:31:69:db:9f:32:
         d0:e3:03:b9:f5:2f:9e:b5:95:d1:3d:c8:c2:75:d5:af:9e:56:
         34:c6:07:e8:26:7a:54:e9:3a:a3:cf:d5:1a:74:fc:cc:d6:89:
         cd:68:62:5b:5e:58:28:f5:e4:7a:5c:86:09:30:aa:42:76:5a:
         40:70:9a:4c:e1:97:e4:ef:cf:8c:f8:f1:ad:eb:d3:c9:8c:7a:
         94:eb:c0:ca:28:fa:a5:b7:f0:66:cb:43:b2:5e:d2:ff:3b:10:
         c7:af:6f:1a:55:c7:01:ba:ac:ea:e9:02:c3:00:c0:10:78:3d:
         e3:3b:d5:7d:99:c3:65:8a:20:a7:c3:db:2e:4a:d3:44:d2:eb:
         47:d5:e9:dc:58:04:00:23:8b:a2:7b:f2:4b:ea:a6:93:0a:b2:
         6c:2f:b9:7f:4f:54:d5:d5:84:57:54:06:6c:89:74:82:c3:f6:
         1c:2c:51:d9:99:af:5c:a4:15:7f:f7:86:1c:08:47:ed:1a:12:
         59:a0:36:67:4e:27:63:20:ff:0d:5d:ec:a9:35:af:f9:3c:d0:
         61:58:0f:e3:40:8b:11:34:68:78:d8:4a:d8:1e:97:24:1b:95:
         a1:05:d0:fb:86:04:d4:a3:74:b5:8b:c5:19:37:81:59:0e:ca:
         99:0e:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:20 2026 by rpki-client