Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft
File:                     TKiQNnsepJ68-UAshiANzXRGtsA.mft (raw, json)
Hash identifier:          Vj950mWyJ8qWJMyNqyAXC4vRQ4znNrXOwzJJsuoe8fc=
Subject key identifier:   6E:8D:E7:F7:37:5C:78:DE:9D:52:10:EB:D6:68:6F:F3:D1:85:D1:52
Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0
Certificate issuer:       /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft
Manifest number:          0256
Signing time:             Thu 21 May 2026 02:19:59 +0000
Manifest this update:     Thu 21 May 2026 02:19:58 +0000
Manifest next update:     Thu 28 May 2026 02:19:58 +0000
Files and hashes:         1: TKiQNnsepJ68-UAshiANzXRGtsA.crl (hash: 1zYpdYFpOGGO2Av+MVoeEa8d4XAnyDy2AfiK6+qtCP4=)
                          2: A87AAC50C47711EDA3EF8884C4F9AE02.roa (hash: xIgcUdA8zTBEY6O3SXY1BGhdAYMUrlAy/cJz6PFY9tg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl
                          rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0
        Validity
            Not Before: May 21 02:19:58 2026 GMT
            Not After : May 28 02:19:58 2026 GMT
        Subject: CN=6a0e6bcf-b91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:b7:af:e9:f3:bb:05:29:fa:a1:66:dc:ac:
                    b5:dd:5d:32:61:c8:85:ac:48:40:b8:84:fd:ec:4f:
                    8b:2e:1f:23:dd:78:db:43:f0:50:80:1f:80:cf:53:
                    83:8e:e9:dc:f4:02:56:c7:bf:d2:e2:91:03:09:3d:
                    d7:55:c4:ef:50:bd:92:22:f9:65:b5:f2:13:98:a9:
                    5e:aa:e9:52:b8:83:ee:89:95:ad:42:ef:0f:1f:2f:
                    fe:b8:fe:ac:e4:34:cd:bc:a0:9a:ca:f0:f6:61:e0:
                    53:43:08:65:50:78:23:01:da:fd:27:4d:80:91:35:
                    fa:6e:f1:04:e6:b1:e7:ba:3f:07:9f:e0:00:2c:ad:
                    ed:4e:94:1e:d6:e6:eb:03:00:fc:21:a1:be:75:d3:
                    64:eb:32:e3:46:f0:50:cf:00:ef:4d:e3:08:ef:aa:
                    8e:24:5a:74:df:3a:52:58:03:5e:45:25:c9:7b:bc:
                    88:00:93:c3:86:ca:ff:72:ff:93:46:6c:75:de:07:
                    bf:62:ca:3f:7e:e8:78:1e:2e:86:70:39:91:2a:26:
                    11:22:b8:bb:f0:6e:8c:e4:a0:36:28:f1:b2:b4:af:
                    f2:f7:fe:b1:87:b6:59:ad:2f:05:d3:b7:ef:8e:e5:
                    5b:42:17:a8:c1:cb:bf:ba:ce:45:16:0a:51:dc:d3:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:E7:F7:37:5C:78:DE:9D:52:10:EB:D6:68:6F:F3:D1:85:D1:52
            X509v3 Authority Key Identifier:
                keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:31:f4:92:cf:ed:4c:20:90:3e:c3:34:8d:40:ed:6d:4e:ba:
         24:32:d6:94:8f:bc:c7:7d:37:2d:6c:5e:8d:94:46:90:d1:6e:
         84:12:40:5a:a7:71:18:1e:80:f0:3c:ad:8e:1e:60:ae:db:72:
         a3:bb:14:8f:46:ae:c3:1c:fd:45:0a:a9:32:9f:b3:40:eb:f3:
         71:c7:b4:bb:2b:be:9b:5a:2a:4a:38:66:38:a4:6d:70:80:d3:
         a1:8d:b7:9c:78:a5:f4:f6:7f:41:35:00:98:35:52:0f:9e:9f:
         1d:68:30:bd:d8:27:c1:c5:93:aa:d2:b3:2a:95:8b:d1:e5:32:
         7e:cb:26:1f:23:04:f6:26:49:68:10:53:a2:1c:be:d3:04:8e:
         a7:59:5b:50:03:2f:ed:b7:30:a2:b7:d4:fa:02:69:fc:a4:80:
         c6:67:6b:7a:df:48:d7:06:b2:59:9c:8a:4f:52:02:bf:af:75:
         0f:12:a1:dd:9c:0e:55:77:66:58:b4:91:7e:49:7b:1c:58:87:
         40:93:f9:b7:cf:2c:65:5b:fe:93:6c:73:b7:92:a3:0a:ad:02:
         52:c6:a1:88:90:17:9c:ed:6a:af:24:95:3f:d5:3f:d5:fa:97:
         4b:05:e7:f8:6a:3f:4c:4f:f8:c3:05:85:03:8a:3b:7f:d7:21:
         28:72:a1:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE
NzQ0NkI2QzAwHhcNMjYwNTIxMDIxOTU4WhcNMjYwNTI4MDIxOTU4WjAYMRYwFAYD
VQQDEw02YTBlNmJjZi1iOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4y3r+nzuwUp+qFm3Ky13V0yYciFrEhAuIT97E+LLh8j3XjbQ/BQgB+Az1OD
junc9AJWx7/S4pEDCT3XVcTvUL2SIvlltfITmKlequlSuIPuiZWtQu8PHy/+uP6s
5DTNvKCayvD2YeBTQwhlUHgjAdr9J02AkTX6bvEE5rHnuj8Hn+AALK3tTpQe1ubr
AwD8IaG+ddNk6zLjRvBQzwDvTeMI76qOJFp03zpSWANeRSXJe7yIAJPDhsr/cv+T
Rmx13ge/Yso/fuh4Hi6GcDmRKiYRIri78G6M5KA2KPGytK/y9/6xh7ZZrS8F07fv
juVbQheowcu/us5FFgpR3NM87QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6N5/c3
XHjenVIQ69Zob/PRhdFSMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0
NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTVCQy8xNjREOTJCMkM0NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBK
NjgtVUFzaGlBTnpYUkd0c0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZDH0ks/tTCCQPsM0jUDtbU66JDLWlI+8x303LWxejZRGkNFuhBJAWqdxGB6A
8Dytjh5grttyo7sUj0auwxz9RQqpMp+zQOvzcce0uyu+m1oqSjhmOKRtcIDToY23
nHil9PZ/QTUAmDVSD56fHWgwvdgnwcWTqtKzKpWL0eUyfssmHyME9iZJaBBTohy+
0wSOp1lbUAMv7bcworfU+gJp/KSAxmdret9I1wayWZyKT1ICv691DxKh3ZwOVXdm
WLSRfkl7HFiHQJP5t88sZVv+k2xzt5KjCq0CUsahiJAXnO1qrySVP9U/1fqXSwXn
+Go/TE/4wwWFA4o7f9chKHKhWw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:28:40 2026 by rpki-client