Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
File:                     TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json)
Hash identifier:          6hQI+C4uCSfMpjR/+V4c9fnaY8ZLe6LCHGJZ76LXFXs=
Subject key identifier:   95:1D:5A:23:74:29:D8:96:BB:5F:25:FE:35:E7:5C:CB:E2:07:80:35
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Certificate issuer:       /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial:       0612
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
Manifest number:          0605
Signing time:             Thu 11 Jun 2026 00:58:35 +0000
Manifest this update:     Thu 11 Jun 2026 00:58:34 +0000
Manifest next update:     Thu 18 Jun 2026 00:58:34 +0000
Files and hashes:         1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: kSXq39p/bwNOWwD7P2xAhv5RNt600tjjoddeiBLUTGg=)
                          2: 46AF15AA9F6D11F09AF30234C4F9AE02.roa (hash: uOsTr6xLzZigtsgRTxsxpHDvdiof2oAZhPNX4njsoJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
                          rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 00:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
        Validity
            Not Before: Jun 11 00:58:34 2026 GMT
            Not After : Jun 18 00:58:34 2026 GMT
        Subject: CN=6a2a083b-45b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:cb:fd:d9:5c:55:c2:13:7a:5c:69:b0:83:
                    03:78:25:34:dc:db:f3:99:89:b1:b8:80:64:cb:4d:
                    60:8a:b0:ad:ed:aa:b4:c1:d0:5d:7e:99:b1:3f:9a:
                    f6:68:5f:65:35:e6:5a:ba:45:87:79:25:53:8b:d2:
                    a7:8e:b2:01:c4:b9:cb:34:8a:6c:e4:ab:30:40:02:
                    28:f9:1a:51:ba:2d:cb:39:b1:69:0e:42:2f:ea:61:
                    30:e5:f3:4f:55:af:65:1f:d9:c1:b8:2e:88:ef:ed:
                    d7:13:5e:65:d4:03:59:e1:1c:77:ce:e7:75:ad:46:
                    85:54:d5:2b:b2:d8:d9:29:f7:64:96:57:4b:f8:b9:
                    26:8f:97:3d:68:74:54:32:c6:46:b7:d6:ec:e9:a3:
                    b7:9d:c5:39:6f:f7:fd:4b:7e:e7:1d:cf:96:f4:1f:
                    24:23:fe:a5:ab:29:41:09:66:4c:ca:32:2d:7b:8c:
                    e1:9b:08:ee:95:8b:e3:83:b7:e0:69:fd:eb:8f:9d:
                    24:a0:f6:f3:b6:dd:fb:a7:43:b0:de:e1:f4:20:db:
                    e5:44:6b:e5:4b:e8:31:fa:55:fb:60:c6:f0:22:04:
                    b7:ee:18:9e:1e:e4:2f:80:9f:ec:0b:1f:5b:d8:37:
                    2a:e9:74:f6:8f:2d:80:e7:19:a4:02:ee:b6:43:8b:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1D:5A:23:74:29:D8:96:BB:5F:25:FE:35:E7:5C:CB:E2:07:80:35
            X509v3 Authority Key Identifier:
                keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:68:ca:29:9a:3d:5a:ad:6a:6f:33:aa:a2:f8:aa:5c:25:88:
         37:1e:14:e1:43:38:ec:41:3b:36:9f:68:ea:9a:f3:78:29:9a:
         02:3e:87:7f:b1:80:cd:9d:b5:b8:0f:2c:3b:6f:3c:4b:08:63:
         02:bc:29:15:38:f0:de:d7:37:d9:69:62:e1:e0:79:01:24:3c:
         ed:3f:cc:bc:06:b8:f8:1c:c2:f2:f5:07:e0:99:58:fc:ae:a6:
         6a:0c:87:82:0a:12:b9:c5:e2:9a:57:d4:96:00:b0:6d:7f:b9:
         0a:da:8f:e3:64:ad:9c:d5:7a:b2:f6:b0:ba:df:49:f8:4b:97:
         e6:2f:46:0c:2d:59:d2:64:2b:51:a9:22:22:35:78:71:2d:02:
         af:27:66:0f:25:24:e1:d7:d7:39:f0:2d:5f:97:f3:58:41:9d:
         02:6b:0f:4c:8f:41:03:0f:09:5f:2a:76:30:7e:8f:0c:e9:5d:
         2b:d2:78:23:89:e9:41:64:ab:16:89:c7:dd:c8:af:29:6b:ff:
         c2:93:41:7d:d5:00:01:06:29:77:cf:d2:1b:70:c1:4a:ad:42:
         3b:b5:fd:30:bd:74:86:95:49:6e:c9:a6:71:6b:f7:9b:7d:5d:
         f2:a4:93:3a:91:ce:73:8c:0f:31:40:4d:30:b5:45:66:c5:ce:
         a9:0f:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:51:01 2026 by rpki-client