Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
File:                     T2scW0K2HdXigZOWenDRiiKP73Y.mft (raw, json)
Hash identifier:          62s3A6Ka7azBaJV5CcEfdLvf2vIaCl85KAO692yE/dU=
Subject key identifier:   CA:B0:22:1D:BA:60:61:75:81:14:A5:C7:B9:58:BE:32:76:57:7C:DA
Authority key identifier: 4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76
Certificate issuer:       /CN=A9174DAD/serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
Certificate serial:       0D44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
Manifest number:          0D3A
Signing time:             Wed 20 May 2026 18:04:34 +0000
Manifest this update:     Wed 20 May 2026 18:04:34 +0000
Manifest next update:     Wed 27 May 2026 18:04:34 +0000
Files and hashes:         1: T2scW0K2HdXigZOWenDRiiKP73Y.crl (hash: 1/aCVuSfL1ngiBg4I8m4eLbdNwaDWjkKO16QlmO3ZVk=)
                          2: 7DF47F46F95611E996377877C4F9AE02.roa (hash: WNUk8jDYPlrb/rdVyo4XTCfnmiGld7eyz2MY75cZ7HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl
                          rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174DAD, serialNumber=4F6B1C5B42B61DD5E28193967A70D18A228FEF76
        Validity
            Not Before: May 20 18:04:34 2026 GMT
            Not After : May 27 18:04:34 2026 GMT
        Subject: CN=6a0df7b2-ecc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:49:38:60:c2:d1:76:3f:8e:11:ea:9f:09:
                    68:8e:89:2b:3f:21:15:56:c2:c8:61:17:9b:53:14:
                    7c:11:05:0b:c1:f5:00:ab:d7:9e:3b:6f:d0:78:82:
                    97:0f:2f:c7:4b:45:17:ed:07:d9:af:c8:87:83:df:
                    d1:d1:84:9a:16:28:cf:88:61:1e:f4:13:d5:46:d8:
                    a5:5a:80:ca:97:3c:64:bb:c8:f2:cc:00:32:55:77:
                    1e:66:0a:d0:de:8f:9f:b8:5a:d1:ca:f4:08:ee:b0:
                    3b:ba:e0:1b:74:61:34:31:ff:57:dc:1e:1f:75:70:
                    d9:6b:f1:b1:37:0c:47:cc:7f:3b:75:35:74:3d:d9:
                    33:5c:6a:5e:bd:e6:06:d6:4a:f1:62:6f:5d:0a:9b:
                    b3:f0:65:c8:13:6e:65:49:8a:1d:41:3e:8a:ca:e0:
                    37:b1:fb:fe:32:77:e7:04:e4:0f:23:48:74:8e:69:
                    86:f7:38:18:35:53:7d:26:12:c4:1b:54:3c:72:b8:
                    2e:d6:46:5d:ab:66:e4:04:52:8d:63:a3:a7:db:cc:
                    0d:98:0e:88:9f:ba:65:13:4a:dc:ee:fb:5d:28:f7:
                    44:ca:53:64:42:fe:90:2b:07:ab:7e:26:c3:d9:b3:
                    00:58:8b:71:b6:65:cf:3c:81:5f:57:4d:b1:22:fe:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:22:1D:BA:60:61:75:81:14:A5:C7:B9:58:BE:32:76:57:7C:DA
            X509v3 Authority Key Identifier:
                keyid:4F:6B:1C:5B:42:B6:1D:D5:E2:81:93:96:7A:70:D1:8A:22:8F:EF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2scW0K2HdXigZOWenDRiiKP73Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174DAD/FC60E5BAF95411E9803BB972C4F9AE02/T2scW0K2HdXigZOWenDRiiKP73Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:23:1e:e7:bb:98:a6:d8:27:ca:37:85:bc:27:a3:d3:8b:fd:
         0b:8c:50:87:56:ae:b0:0e:48:21:98:e0:a0:6e:ce:47:f0:af:
         94:2c:1b:51:eb:f2:ed:86:c6:24:e2:29:f4:86:7d:5c:70:a3:
         93:00:fb:4e:ce:0c:66:d9:70:48:4e:da:1d:d3:2a:25:2d:fc:
         73:d4:78:02:2b:66:cb:d9:20:79:22:9d:d8:2c:32:5f:05:a9:
         03:93:ed:df:62:2f:1c:04:67:0e:2f:57:c4:28:cf:f3:d6:9d:
         ba:d6:25:fe:d4:2e:7d:96:4b:3e:b8:17:4b:11:b5:be:ed:1e:
         02:d1:a4:cd:fd:07:db:ac:6b:3c:3f:a2:c2:62:22:2e:08:26:
         21:8b:a8:7b:bd:b3:78:ec:03:ea:d7:f0:b5:ed:63:8e:41:cd:
         5a:02:c2:32:8f:d2:3d:22:1f:bb:de:b2:f9:2c:83:8e:20:95:
         45:af:16:e6:70:24:df:90:59:e7:2d:f0:1d:0a:0c:27:5d:e3:
         2e:d3:d9:a2:57:37:22:cb:f7:ad:6b:24:f9:fc:6d:5d:c7:69:
         43:10:47:c2:63:40:bb:78:19:e8:cf:ae:2e:03:12:69:61:1f:
         3c:e5:69:f6:76:b2:c3:1c:6f:5f:8b:ad:65:5d:bc:b6:e0:2c:
         64:3a:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:34 2026 by rpki-client