Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
File:                     TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft (raw, json)
Hash identifier:          zG7JNX+Uf0ZOURZU+gV3ln7vsELHknGcS4gGGkpeSq0=
Subject key identifier:   A2:95:6F:C2:D9:78:9F:16:A3:26:34:D5:94:7D:69:15:3E:56:A8:53
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
Manifest number:          3593
Signing time:             Mon 20 Apr 2026 14:56:20 +0000
Manifest this update:     Mon 20 Apr 2026 14:56:20 +0000
Manifest next update:     Mon 27 Apr 2026 14:56:20 +0000
Files and hashes:         1: TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl (hash: rS/us0p+VdXX8mWRbcdom/Hqf+OnlKw/PRcfQ67OAdY=)
                          2: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (hash: rJcH7U56XuZEecskwbJvsdvGpT+jiKhjpWcLXzO0cjk=)
                          3: D85FB84853BE11EF819E6347C4F9AE02.roa (hash: fWuhRWvQ3Edrdp8Xh2OPG31qXzaHDm9E0X4C1jpzpIA=)
                          4: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (hash: Lh6oS48kKqVmyqex9gqFtgZ4m13NOn4qQbQx9k6l4Fo=)
                          5: 78488CF4AD7411EAB93BA123C4F9AE02.roa (hash: XlwaXG0CLLlJ3jhue1QTDVM5EZboLImWAg1GFuaWpAc=)
                          6: 586B5D9ED9F811E9A6874F46C4F9AE02.roa (hash: 7zglLDP11gzpQTB1+7hilO7iWT3HFWV4SBuiijDuHdQ=)
                          7: 49FEE4EA83CC11F09BE0565EC4F9AE02.roa (hash: eQqXfw7KpOOBP+Td93jgjIhVJNu+VT2VfIFdrctBg/A=)
                          8: B64F4796C6A411F08CECEE7AC4F9AE02.roa (hash: 9Jynqmi/gB99jci6ggMyKRV6Dkc/gMa93AFgdesb6v0=)
                          9: CD072488981C11F081BD5721C4F9AE02.roa (hash: cxBmEBTcBfMyyvAlB+eLC5fqMYrlz3kg2+JupwPAjOA=)
                          10: C32EFEC617A211F19C2A0006323D8C67.roa (hash: A2O1ksquVn5Ms9ttsYq8s1cge74wxeUlGkxPG701xZk=)
                          11: ABE74AD463B111F0B7B37637C4F9AE02.roa (hash: QhAtb7RZdyqizEHTl7ia1E+ChVek7Dqp9PT6kKKvmME=)
                          12: B55C1B0CC6A411F0A408EE7AC4F9AE02.roa (hash: X1b91kjhN2zv6W6/j8hQrToM9JGJxLjczB6EqHMIOWY=)
                          13: E2A6885AABA111EAB7C51982C4F9AE02.roa (hash: 8YElfuPm+hdksAg1+pFS3ilrSanU7z1LehRzNHr86x4=)
                          14: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (hash: gGhukCL6lx8yYMc3XoZXuAuKGy5qCMkAQFaNYx2UVBo=)
                          15: 4754ED7C16BF11EBB31D5A6AC4F9AE02.roa (hash: ZJcFcxd06hMO8B2ugrVOha+QcsYL5Uhm5p6cGyGTG/c=)
                          16: AA7E3F9017A211F1926DA6A3313D8C67.roa (hash: OS3QBd1KBjVue1TsCQI+ygNSnecMtRq+5PQovPP87f0=)
                          17: B5DAF292C6A411F092F1EE7AC4F9AE02.roa (hash: ZOE+ul17pVmegkb++bJCcAeEY8oGwonKzzJtuNTmLFQ=)
                          18: E205744CABA111EAB7C51982C4F9AE02.roa (hash: maoC/CPKGCGNHLen8pJwPD1KgmFNilHCq14nhz/BxFg=)
                          19: D7F4292A53BE11EF819E6347C4F9AE02.roa (hash: Ue/t1PP419JlxBz1cKkLY7GRQHiNwZY7sf9eJ0m5LyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 14:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13873 (0x3631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Apr 20 14:56:20 2026 GMT
            Not After : Apr 27 14:56:20 2026 GMT
        Subject: CN=69e63e94-3da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:90:39:3c:23:0f:5a:86:30:55:45:9b:62:52:
                    b1:2d:51:ef:71:fa:ef:28:e2:af:ec:36:c6:44:c7:
                    e8:b6:b7:bd:f0:e6:2e:86:57:50:1a:23:63:43:d0:
                    7f:87:87:58:4f:e1:e8:61:3f:d5:73:01:92:3a:83:
                    e9:0c:7a:98:f5:7a:ef:54:b0:a1:19:b2:96:48:c7:
                    d4:16:c7:fe:25:43:54:3e:bb:15:36:e4:04:2b:19:
                    d9:c3:8e:f3:a1:92:f7:3c:b8:51:67:0b:62:db:46:
                    c1:72:76:5a:ec:a7:36:e3:9a:58:63:f5:de:fb:07:
                    b0:9e:93:b0:fe:87:68:7b:17:cd:d7:cb:e0:6a:e9:
                    95:d9:f7:c5:33:7c:a6:cf:cf:c3:91:fc:a1:cb:9e:
                    d5:a4:f9:47:03:2a:81:d3:bc:d1:52:e2:77:cb:5b:
                    89:a3:39:d3:1d:b3:db:b3:1a:42:66:59:7f:6c:e3:
                    1e:2b:f6:72:e6:3c:ba:e3:27:ae:8f:83:3c:8b:6c:
                    fe:cf:9d:83:0b:c8:55:05:5b:c6:a6:f2:3d:0d:63:
                    26:5b:86:75:5c:9f:42:b0:4f:58:b0:0d:d1:4f:0e:
                    4a:84:3a:69:96:72:1e:92:9f:1c:52:54:e8:0c:0b:
                    77:58:7d:7a:e3:82:09:4c:0c:0b:38:f6:a4:6e:bc:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:6F:C2:D9:78:9F:16:A3:26:34:D5:94:7D:69:15:3E:56:A8:53
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:f6:fd:d4:39:70:c0:a1:2c:9c:74:80:3c:98:5d:55:27:
         bf:01:4a:b1:dd:ec:aa:54:7e:58:44:e1:32:ae:2d:64:91:07:
         e7:7b:67:ce:f3:2f:4d:f3:77:b4:b1:49:68:74:10:43:1c:25:
         52:be:42:6b:04:d6:ab:0c:a4:62:86:11:54:09:12:ce:89:df:
         b6:db:1a:f9:31:12:5d:d3:34:ac:3f:a4:14:cc:38:18:25:c0:
         95:24:8b:a2:0b:87:a5:b6:27:a8:d3:b8:9c:37:8e:ef:c2:18:
         b5:7f:c6:07:c0:90:41:f9:be:dc:c0:5e:7f:2e:03:a1:4b:50:
         b9:7f:a2:52:39:2e:28:c8:b4:01:8e:34:44:29:96:87:c6:46:
         af:a0:59:d7:ca:0e:70:e8:43:dd:d4:5f:61:8b:29:28:ad:8b:
         83:4c:83:d3:d2:a3:83:6f:95:5f:20:05:61:06:6b:fa:08:81:
         2c:b6:93:2e:5a:0a:77:b7:40:7d:1a:08:00:69:55:29:b6:d5:
         a3:1c:16:2c:ab:b0:57:33:8e:84:2b:51:b6:7d:fb:85:7c:c8:
         fe:6d:96:fd:c0:ae:17:64:36:73:b9:00:8a:0c:b2:97:ed:77:
         01:8b:e6:2b:78:e2:a4:f1:36:a3:27:32:fb:0a:35:82:8f:02:
         14:72:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:22:37 2026 by rpki-client