Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File:                     Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier:          ML60HKnJ/VnxX92OmFK7RBONLm8kqFY+QCEKJAhPm10=
Subject key identifier:   45:45:ED:72:2D:2C:75:F4:76:3F:E6:2E:23:FA:D6:27:7B:C4:D4:17
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       35E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number:          3574
Signing time:             Sat 18 Apr 2026 14:16:53 +0000
Manifest this update:     Sat 18 Apr 2026 14:16:53 +0000
Manifest next update:     Sat 25 Apr 2026 14:16:53 +0000
Files and hashes:         1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: PWBJQM8x+6IwafomnMhFuvzi+iE0mYaQgDbwSXW+fxg=)
                          2: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
                          3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
                          4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13793 (0x35e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Apr 18 14:16:53 2026 GMT
            Not After : Apr 25 14:16:53 2026 GMT
        Subject: CN=69e39255-ecd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:14:c4:a6:31:7f:84:9b:76:3c:1b:ef:40:
                    7a:d8:4e:1f:24:31:75:96:dc:2c:00:52:29:1f:dd:
                    2b:00:21:73:31:b5:ba:30:d5:ce:0a:d1:3d:67:be:
                    4b:5f:4b:cb:28:3a:3c:f1:95:8c:4a:cd:d6:ae:4f:
                    d8:79:1d:1a:20:2c:ff:47:d1:53:91:e4:a7:d4:83:
                    1a:cd:d2:f1:d8:68:a2:e2:89:79:b9:79:41:b9:fd:
                    55:31:38:af:84:12:ea:05:ec:78:9d:97:af:81:4f:
                    1a:5d:01:ae:88:bd:2d:80:41:85:b5:b5:b8:09:8e:
                    9e:80:94:5f:13:24:21:8c:96:ac:fa:92:c1:c6:5a:
                    1f:01:63:30:8e:d7:1b:42:16:a8:69:38:87:31:38:
                    3f:bc:f1:f6:32:6d:1b:c3:de:f7:1d:05:e7:12:9a:
                    cb:94:b8:a9:73:00:4c:39:b4:47:61:39:8b:c2:79:
                    74:06:ac:74:3d:8a:a2:af:25:34:5e:bd:8c:c5:57:
                    fc:d6:d3:34:d9:fc:cf:e2:eb:3d:ed:8e:08:b8:c1:
                    28:44:84:ae:ff:9d:df:98:48:5c:a3:87:df:cc:f2:
                    95:07:a1:bc:ea:7c:5f:fb:49:8e:c9:31:5a:ec:b9:
                    c0:d5:8b:ef:93:6b:9f:19:a6:ca:0f:94:d2:c6:12:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:ED:72:2D:2C:75:F4:76:3F:E6:2E:23:FA:D6:27:7B:C4:D4:17
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c1:04:45:cf:b3:52:57:ef:04:83:b6:42:a8:74:d0:a4:0e:
         24:0e:bf:03:2b:4a:00:38:1a:99:d8:8a:fe:a2:23:2d:c4:d0:
         29:83:b1:c1:ba:c8:8b:be:69:88:3a:6d:e2:4e:24:5b:f1:56:
         22:d1:dc:e9:25:40:5a:3a:62:2b:8e:c6:77:09:5c:c9:ca:3a:
         7c:9e:51:a0:39:19:80:96:9c:68:5d:b5:be:6e:d7:f3:73:86:
         e2:a6:dd:7c:ca:bd:c5:ad:a5:ae:9a:ab:51:36:43:ec:09:53:
         87:95:70:cd:08:e9:b7:90:3f:a2:b0:36:84:4e:1e:bd:37:f4:
         ab:fc:84:9b:23:b3:fd:57:93:d4:0d:42:72:fb:66:71:f7:70:
         76:65:b0:6d:e9:13:3e:a2:c1:74:48:5c:b5:7f:cb:94:ad:32:
         b1:f6:db:a4:ff:d8:63:49:49:92:c5:12:71:d8:b2:81:a5:16:
         00:ed:46:77:42:d7:ec:ef:d6:3a:50:e7:d8:29:e0:25:e3:2b:
         d4:38:a3:72:10:47:5c:72:71:82:7e:e3:24:87:07:68:7f:55:
         7b:44:8e:4c:ea:e6:22:ac:91:4b:13:a3:a0:bd:03:89:da:e8:
         11:ab:74:f6:14:74:09:fe:f2:47:47:83:e1:e4:cb:17:dc:80:
         15:c4:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:22:36 2026 by rpki-client