Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
File:                     TPa6KUJsvCB032LFH683jELTuK8.mft (raw, json)
Hash identifier:          R3zAKl7wZPWN96oe0z/0C3i8xeyMyf4bYlzSn6soos0=
Subject key identifier:   B0:EC:DD:FE:8B:87:78:9E:17:AF:50:BA:4F:F3:47:EE:4B:26:1B:41
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Certificate issuer:       /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
Manifest number:          07AB
Signing time:             Sat 04 Apr 2026 21:16:09 +0000
Manifest this update:     Sat 04 Apr 2026 21:16:08 +0000
Manifest next update:     Sat 11 Apr 2026 21:16:08 +0000
Files and hashes:         1: TPa6KUJsvCB032LFH683jELTuK8.crl (hash: V56kO5AumjJfSkqY7vNjsGO+oWPFnxqu/xflkZANFQ4=)
                          2: B6A436A8411F11EBA45D5857C4F9AE02.roa (hash: soUs6aU4N+PLaQ/K803O61w5Xjsco282Yx4UOfZySoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
                          rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
        Validity
            Not Before: Apr  4 21:16:08 2026 GMT
            Not After : Apr 11 21:16:08 2026 GMT
        Subject: CN=69d17f98-14de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:be:85:3c:8c:3a:7e:1a:ce:df:45:e7:4d:
                    44:e5:9f:2f:f6:84:a7:8d:74:f0:1a:51:a1:1a:7d:
                    a1:bd:35:15:15:ce:2c:99:75:7f:b6:d3:2e:1b:e9:
                    5b:39:53:d0:fa:74:d5:06:1c:ab:ef:57:4e:8a:55:
                    08:aa:83:dd:49:d1:a0:29:49:8e:43:bb:57:9b:34:
                    f3:a1:d5:86:c1:fc:07:ca:36:e0:69:1a:aa:65:32:
                    b7:af:39:66:6f:a8:f2:d7:b8:68:5a:9b:90:c9:e9:
                    3a:8c:29:84:7d:5d:c7:0a:d9:2b:42:8e:0a:6d:76:
                    78:d8:40:22:ec:e0:cd:5a:dd:da:77:99:81:4d:64:
                    a1:2f:e2:85:c6:43:91:d9:b2:eb:e5:9e:4f:2e:34:
                    29:1c:f7:2f:fb:22:1f:57:da:31:e8:36:d1:bb:2a:
                    6f:c8:01:e8:46:29:ca:40:14:bc:4d:bf:82:96:4a:
                    40:b5:84:22:85:6c:b0:33:2b:1d:d4:6e:ff:b6:03:
                    ba:c4:03:fe:4a:39:dd:5d:e0:ae:2e:8f:1c:87:1e:
                    0e:3a:eb:e9:93:26:c9:46:31:f7:f2:e1:63:df:9a:
                    2b:b9:47:ef:cf:0f:a9:fe:f4:54:91:35:f7:27:38:
                    5c:88:29:64:9e:dd:59:80:be:ff:86:e8:83:6f:29:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:DD:FE:8B:87:78:9E:17:AF:50:BA:4F:F3:47:EE:4B:26:1B:41
            X509v3 Authority Key Identifier:
                keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:24:57:de:b4:ee:a1:4b:8d:bf:2e:24:7b:8c:18:d2:90:c3:
         8f:4a:6a:aa:67:02:20:66:0a:85:5a:bc:22:1b:d0:f5:b4:b2:
         fe:a1:c6:c8:8b:87:8a:be:22:82:3c:e5:3d:f4:d9:f9:f6:b5:
         ae:de:d7:9e:67:fd:92:48:ff:7a:dd:4c:58:ac:89:d8:a6:7b:
         35:32:61:32:20:55:98:0c:38:27:d8:10:dd:74:be:42:72:59:
         8d:ff:0e:a3:46:1b:96:4b:d4:22:5f:3c:11:e6:7e:64:cc:b4:
         23:b4:6f:91:f0:c9:b5:f4:d3:65:fb:cc:73:48:28:4c:bb:94:
         4d:df:de:ed:ac:9f:ab:c1:6c:38:6a:75:05:fc:3a:8d:a6:0f:
         4a:27:d0:fc:ff:71:dd:90:ad:02:5f:ad:80:e8:46:b5:18:97:
         41:41:79:ed:a6:34:10:57:f8:bf:da:fd:89:c3:eb:57:27:e0:
         90:19:8f:04:99:f9:19:f2:f7:d4:21:54:bd:47:f1:ee:06:8a:
         b4:3e:2c:19:30:1b:95:57:1c:62:a0:93:9c:b3:4c:59:c9:db:
         1e:28:78:c9:a3:1e:1d:cf:e3:62:26:e5:c3:e8:60:55:dc:f8:
         b4:c4:33:1b:9d:d2:a6:53:66:fe:23:df:f3:d1:db:5a:fd:09:
         99:c8:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:40 2026 by rpki-client