Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          iTMguKsnQFAHq544Dh4XTF6mQimtda4FGwWfBbWiQac=
Subject key identifier:   32:6F:F3:4E:C4:48:99:C9:9C:46:29:DD:07:AD:CD:CF:09:D1:52:1B
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0453
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          044A
Signing time:             Fri 05 Jun 2026 00:20:55 +0000
Manifest this update:     Fri 05 Jun 2026 00:20:55 +0000
Manifest next update:     Fri 12 Jun 2026 00:20:55 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: nI8Cnd12tpkmSQJV9Oqra/XX2dGotxQzfRhE4QkVy/Y=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: bD2C5/DgW70VY50hOjBpLKvWt5B7bnvlv0UfjlxEnfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 00:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Jun  5 00:20:55 2026 GMT
            Not After : Jun 12 00:20:55 2026 GMT
        Subject: CN=6a221667-f471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:b8:28:f5:8c:45:08:4b:97:c1:be:82:96:
                    91:31:0e:70:de:cb:c3:12:4c:14:96:27:25:ff:48:
                    2e:90:61:85:85:56:c1:e8:dd:61:d1:3a:58:bc:ef:
                    9c:aa:40:74:ed:76:4d:db:43:76:89:15:9a:db:a6:
                    75:e5:22:a6:01:02:53:21:8e:35:b8:a5:d4:ca:ee:
                    90:78:a9:8b:34:5a:f0:cc:f2:08:e0:41:c2:48:cb:
                    fe:09:16:85:73:a6:25:27:eb:5a:91:ae:0f:47:7a:
                    2d:bf:81:5b:16:b9:61:b5:22:dc:3a:b0:f5:51:b8:
                    cd:3f:72:79:0a:d4:fb:de:ee:02:92:7e:24:b8:23:
                    3a:a2:01:9f:6b:01:5d:b6:99:8f:dc:6b:82:02:83:
                    56:87:62:8c:6c:d6:d7:22:35:c4:3b:c7:14:7b:6b:
                    9f:da:96:fa:23:b0:2c:fd:d2:87:8a:c2:09:78:e0:
                    8c:ec:62:9c:7a:04:e7:f1:f9:93:ca:b8:54:b4:59:
                    4a:a1:a2:57:0d:bf:29:2e:63:01:7e:1a:8e:cc:69:
                    5a:b2:2d:a6:21:fc:c4:79:0c:18:34:e4:7a:42:7b:
                    db:db:d0:7b:8e:a9:be:37:ba:5e:95:f7:9e:94:bb:
                    20:6f:b1:29:21:35:91:bd:78:76:fd:51:2d:32:d8:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:F3:4E:C4:48:99:C9:9C:46:29:DD:07:AD:CD:CF:09:D1:52:1B
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:cb:14:4d:fe:74:7c:6c:1b:8a:47:50:f2:83:f5:48:33:
         48:8e:b1:b6:45:6e:0b:22:4c:bb:af:df:fc:e5:e9:6d:6b:0f:
         8b:86:15:3a:27:19:7c:dc:2a:c8:1f:92:72:49:c8:b8:a8:a8:
         d9:f3:5c:e5:db:c5:95:c4:d4:e8:44:de:3a:59:03:91:95:08:
         e4:96:a5:4a:21:a1:ab:ad:49:b6:b4:75:e7:dd:c3:36:3e:2c:
         79:18:b3:2b:46:ab:f9:98:80:4e:81:8b:df:76:bf:7e:32:64:
         24:8e:37:07:1a:58:9c:e5:6d:6f:41:95:f6:bb:9b:33:2b:02:
         4d:29:45:8c:1f:60:2a:dc:54:f5:b0:cd:56:48:f1:0b:6a:af:
         eb:63:ec:fb:a0:6c:26:29:23:15:91:83:99:de:81:a6:98:1d:
         b7:21:56:96:da:46:e9:3f:32:84:fe:ec:bb:22:76:8b:e5:a4:
         3d:ba:b2:44:f3:32:92:fe:96:cc:01:84:ce:f0:6f:9a:0c:22:
         6e:33:ee:f2:4e:60:b7:c9:dd:7b:0b:ea:9d:b9:70:c8:50:16:
         27:cf:9a:9f:e5:12:9d:15:9c:08:53:a8:7c:eb:30:e6:b7:9f:
         0a:ce:c6:72:5b:08:eb:cb:d0:ba:f4:1a:39:0c:00:79:28:f4:
         a7:4b:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:49 2026 by rpki-client