Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
File:                     TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft (raw, json)
Hash identifier:          Unx0opMjpmX1UYBbZdRbpjjQjyI7mKUWFiX5IzGo++8=
Subject key identifier:   A7:61:73:BC:59:2E:77:91:65:D7:E0:C0:D1:8A:0A:65:42:6B:5C:6B
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       1151
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
Manifest number:          1145
Signing time:             Sat 04 Apr 2026 17:06:42 +0000
Manifest this update:     Sat 04 Apr 2026 17:06:41 +0000
Manifest next update:     Sat 11 Apr 2026 17:06:41 +0000
Files and hashes:         1: TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl (hash: NHTXm1SmMGhhhKB5ejkDdXaf8N0ks5ZzCY1Rd8sD2rA=)
                          2: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (hash: KdSjFuzj1XpOQlC5IFtwlWLkoVkKcSlpd4GWCdoF7oU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4433 (0x1151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Apr  4 17:06:41 2026 GMT
            Not After : Apr 11 17:06:41 2026 GMT
        Subject: CN=69d14522-dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:06:b1:8d:6e:84:a0:a0:35:0f:2e:58:de:
                    3f:32:40:81:29:a4:d9:f9:80:68:d6:82:0b:e6:85:
                    53:cc:28:8a:4c:27:7d:94:3a:b4:a9:86:de:2b:d4:
                    70:f4:57:39:79:28:bd:c0:f2:df:fd:9f:04:56:6c:
                    69:cf:4f:72:93:fe:32:cc:63:4a:8b:b6:51:86:67:
                    98:12:a9:50:e6:ce:ca:4d:74:55:14:99:66:81:b6:
                    09:a2:d8:0a:59:68:ba:d4:3c:ef:00:81:5e:65:81:
                    83:54:44:62:7a:2c:6b:67:f0:85:d1:9c:33:d1:d1:
                    a6:30:19:3d:21:3a:6b:cc:39:15:03:bb:d4:bc:56:
                    aa:4d:73:f7:d0:66:99:b7:0f:46:d6:8a:10:65:20:
                    91:5d:75:85:7c:66:95:18:b3:fe:21:3b:89:af:5c:
                    83:cc:87:1c:c1:7a:3f:1b:79:38:2b:4a:11:03:c1:
                    f9:59:b6:df:4b:a8:25:fe:84:35:f3:0a:f3:3a:f8:
                    76:d1:65:cf:fd:30:e2:dc:4a:29:5a:84:34:d1:f6:
                    3c:ea:d8:89:ef:57:77:9d:e1:76:c0:97:9a:1c:d2:
                    2c:52:93:47:1e:16:81:9e:8e:8e:96:05:8e:c4:c6:
                    73:10:6a:7f:0d:0c:3e:f9:3a:85:0c:12:b8:7c:1d:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:73:BC:59:2E:77:91:65:D7:E0:C0:D1:8A:0A:65:42:6B:5C:6B
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c6:06:fd:10:50:ce:e5:58:92:14:43:41:12:80:a6:f4:97:
         84:fd:d6:21:5a:fc:d7:93:04:7b:11:3f:21:15:5b:43:04:67:
         ba:2b:29:1f:52:57:a6:5f:de:67:38:98:cd:6a:a1:53:a9:f1:
         fa:7b:e6:9a:01:4c:93:87:18:56:a8:4e:04:8f:8c:b8:d3:2f:
         b2:4c:0b:89:cc:98:97:cc:37:2c:6b:5b:6e:c0:5a:95:cd:51:
         d9:df:d6:e3:4e:ad:9e:34:f7:38:6c:52:a8:51:d1:50:87:47:
         bb:5f:67:b9:0a:b4:5b:71:6f:43:bf:58:57:1c:f7:39:b4:4a:
         47:14:3c:48:16:c1:4e:b3:c5:1d:8a:e1:b0:14:7c:6a:63:a8:
         76:cc:d4:46:a5:23:a5:4d:a9:72:99:98:01:97:ef:0f:7d:61:
         0a:39:03:e5:7e:e6:7f:d2:df:e7:2b:f4:c7:c0:72:d5:65:01:
         ff:43:e6:89:86:1d:06:31:eb:d9:55:f5:73:7e:a0:c1:c5:6e:
         16:4d:22:22:e4:1b:0f:86:7a:3a:8b:9a:8c:de:4b:83:9d:b2:
         f9:93:3d:e2:f9:b7:18:7d:da:9b:8b:bc:a3:93:ba:31:d6:04:
         69:6e:57:14:80:d0:a3:d1:93:62:6d:4b:fa:0a:f6:6c:44:78:
         2c:ea:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:38:40 2026 by rpki-client