Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File:                     TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier:          3qTPHkvlgbU8qppBDHSvtIe9Xygkz/VjuVK6wprD1/U=
Subject key identifier:   72:E3:E4:6F:9C:C7:2A:2B:B5:DF:EC:2F:A9:56:2C:8F:63:DE:37:C1
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number:          0203
Signing time:             Thu 21 May 2026 03:08:13 +0000
Manifest this update:     Thu 21 May 2026 03:08:13 +0000
Manifest next update:     Thu 28 May 2026 03:08:13 +0000
Files and hashes:         1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: RRCS9ZrDOzt04Y4Dqx6DDh/QsbNShtSD5//XA8iF6lM=)
                          2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: CMpAtUweVr+EqAuGahhTVQ09EFxzxXQiaIMB3NuVn84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: May 21 03:08:13 2026 GMT
            Not After : May 28 03:08:13 2026 GMT
        Subject: CN=6a0e771d-bd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:25:17:e7:78:74:f9:37:5b:70:5f:6a:d5:
                    19:f2:5f:ee:a1:93:2b:7a:29:55:63:b9:1d:40:f5:
                    0f:52:d9:97:ab:a0:43:7c:e1:7c:6c:67:40:cc:fd:
                    87:d1:41:57:d0:0f:7f:5f:a6:a7:41:70:26:05:7f:
                    ee:85:7b:90:bb:ae:23:50:32:1c:4e:fb:e1:91:c1:
                    13:dd:99:1a:b3:74:b0:75:be:2e:bc:6a:28:1d:98:
                    91:b3:aa:b1:9e:35:59:03:cb:8c:dd:3c:bc:3f:5d:
                    99:76:1f:7d:9b:f5:92:4c:d5:c7:41:da:a8:7b:3e:
                    62:ce:70:a5:45:50:4f:ec:1e:dd:89:8e:05:14:dc:
                    ef:7b:1b:15:b6:f8:af:da:40:2a:8a:b4:ea:8c:6b:
                    b9:7e:4a:ad:47:ef:97:2c:a4:e9:27:ed:db:d3:6f:
                    94:e0:51:09:37:9c:bd:9e:50:80:dc:a7:f0:05:c2:
                    1b:5a:54:9f:8b:9b:b8:7e:8c:df:a0:3d:f8:c5:ee:
                    a8:8a:65:0f:d6:cd:99:60:fc:6c:4e:50:9e:27:1f:
                    da:61:07:f6:eb:a3:97:de:be:82:22:58:9c:3f:b6:
                    48:75:7b:ef:50:2e:82:2c:6f:8b:90:c2:5f:23:7c:
                    58:58:9d:f4:7f:fb:37:7a:61:4d:fe:9c:e2:b7:b2:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E3:E4:6F:9C:C7:2A:2B:B5:DF:EC:2F:A9:56:2C:8F:63:DE:37:C1
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bf:30:2e:87:9c:18:53:ba:c4:23:be:2c:0a:c5:b2:cf:71:
         12:ea:2b:53:d6:3e:c7:f8:55:99:25:bc:76:b7:e6:d1:e5:0d:
         56:ac:23:79:c1:d4:88:3a:55:f5:d0:67:c9:20:00:e3:4d:a5:
         92:12:72:50:ec:f9:ec:c1:43:de:b7:3a:7e:8d:ef:3f:99:3e:
         fa:73:e8:2b:28:53:fd:68:1b:cb:03:35:47:5d:05:d4:98:d9:
         64:36:74:db:ef:79:c7:d1:df:b4:70:b5:9b:66:f9:7f:b8:24:
         0c:cf:b2:70:83:e7:23:01:88:63:2b:5b:05:d2:ab:97:3a:2a:
         7c:8f:33:78:ef:9a:3f:8f:72:0d:bc:52:61:ba:66:b1:31:fe:
         58:e9:48:59:4b:db:d4:f9:72:87:d8:24:a9:10:b7:bd:db:2e:
         ba:eb:a2:f4:5e:18:b2:53:fd:72:67:bd:a7:1e:f5:ac:06:9e:
         33:18:59:88:a3:9f:40:01:92:e4:75:40:d1:fa:8c:67:a7:6a:
         59:7f:30:68:c3:6a:bb:a4:e5:71:16:fd:91:45:77:ef:ad:b6:
         1a:77:58:03:92:5f:97:1d:e8:47:2d:91:54:59:d3:74:d3:67:
         e6:cb:0b:9e:75:d1:ac:d9:29:94:af:86:37:ec:90:b4:a1:69:
         21:4a:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:10 2026 by rpki-client