Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File:                     TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier:          R7G4sE6RKX49Vl8zWyiKs+67AuIdT4+pTne7n4V3yRU=
Subject key identifier:   81:18:EE:73:7D:B3:6B:9B:7A:C0:7B:8F:27:61:79:E1:D1:AF:FD:91
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number:          01B8
Signing time:             Fri 05 Jun 2026 04:45:43 +0000
Manifest this update:     Fri 05 Jun 2026 04:45:42 +0000
Manifest next update:     Fri 12 Jun 2026 04:45:42 +0000
Files and hashes:         1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: 9gtUM6/1xSXXCxkovBfZQKefOgm0oXvIuvFP1YvXxSs=)
                          2: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
                          3: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
                          4: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
                          5: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Jun  5 04:45:42 2026 GMT
            Not After : Jun 12 04:45:42 2026 GMT
        Subject: CN=6a225477-112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:e5:2c:78:4b:df:03:b9:20:91:43:6b:f4:
                    db:ae:12:ef:64:e7:34:02:76:c2:2a:0b:71:05:b6:
                    70:fa:5f:1d:92:39:f8:18:ba:bd:e1:5f:14:31:6d:
                    a0:85:13:01:f1:2f:a3:2c:a9:55:4f:25:8a:cd:d9:
                    fb:51:17:73:94:02:5b:22:f8:18:83:b0:78:a6:28:
                    25:2f:fe:d1:71:58:f9:a6:bd:01:2c:e4:f4:9e:be:
                    89:b5:bc:c1:a8:1f:c5:67:68:a3:6a:75:5b:3b:92:
                    28:b7:e0:32:10:a9:5d:ac:12:5a:24:67:88:0b:58:
                    7b:71:a6:95:b9:95:38:42:8c:37:22:14:8d:4b:ae:
                    24:a8:e1:63:8c:0f:e4:ea:4b:f7:64:22:72:27:f0:
                    1f:f6:c3:20:f3:13:50:55:64:7b:82:8c:20:d5:68:
                    fa:38:57:9b:70:52:51:be:18:f9:cb:3b:57:c9:f4:
                    57:28:af:26:e9:fc:bb:9b:d1:a2:39:1f:04:4f:cf:
                    05:22:54:4d:aa:cb:6e:d8:6d:53:7b:64:26:62:5f:
                    4c:04:5e:2f:5b:fd:66:c8:fa:cc:c1:7d:35:75:c9:
                    cc:e0:40:19:1b:b1:f1:10:58:6d:55:7e:0b:ab:53:
                    7a:fa:a6:e5:1c:43:72:00:fb:22:71:01:9b:18:eb:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:18:EE:73:7D:B3:6B:9B:7A:C0:7B:8F:27:61:79:E1:D1:AF:FD:91
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:78:fe:96:cc:21:64:11:93:70:4f:0e:24:d4:96:f7:a1:
         54:bf:28:0f:96:71:72:9d:b8:94:05:a5:1d:7a:e4:e5:5e:37:
         67:6a:bb:91:1c:83:61:ff:32:13:4f:b8:d0:49:9a:be:5d:89:
         82:13:35:94:e3:be:d6:2d:68:db:85:ab:ff:6d:d8:67:f1:ca:
         95:6f:fe:1c:6f:1a:dc:7c:83:e6:5f:77:d0:0d:68:8a:7d:a0:
         21:b9:d7:8d:1b:fa:e1:44:fa:fb:d2:bf:50:80:67:cc:38:2b:
         e8:ae:39:26:37:c9:48:ab:3e:b9:0b:2b:d2:b7:b1:c6:16:63:
         e9:44:61:9f:35:e8:14:02:41:bd:14:eb:b9:1e:97:2c:bd:f4:
         a9:1c:d7:fb:f6:b1:8f:60:51:d3:73:f4:83:e4:cb:7f:f9:64:
         e7:3d:57:a9:11:bb:79:ee:f8:77:ca:aa:60:9f:4f:11:eb:8e:
         7f:f3:a2:6f:96:0f:ff:97:f1:0c:77:e2:fb:f9:7f:1f:25:1b:
         03:ed:79:53:e3:c8:40:73:94:5e:4d:7d:a0:24:3f:52:0e:21:
         2e:41:b8:50:05:1c:3d:73:ba:ef:f1:fa:de:c6:6b:c8:6f:28:
         7b:53:86:1e:a6:c2:12:12:b5:eb:fd:01:55:dd:7f:c6:74:23:
         a5:c8:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:08 2026 by rpki-client