Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File:                     TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier:          vbEg1w57ly9ec1Gl6KXwuX6tP82BNA+nHxp+3ncLdYU=
Subject key identifier:   AF:20:11:BE:15:B7:77:AC:8C:DF:E8:FD:57:AB:DE:3A:F6:52:69:3D
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer:       /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number:          E5
Signing time:             Mon 01 Jun 2026 07:20:39 +0000
Manifest this update:     Mon 01 Jun 2026 07:20:38 +0000
Manifest next update:     Mon 08 Jun 2026 07:20:38 +0000
Files and hashes:         1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: zdw+StUFNKh3O5JUUZshSTs2WoQjPOey97urMzQGASo=)
                          2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: rbHttiCNfct4rPH7XHoUz+IWP4BlD4I/02xhzj8Jyag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
                          rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
        Validity
            Not Before: Jun  1 07:20:38 2026 GMT
            Not After : Jun  8 07:20:38 2026 GMT
        Subject: CN=6a1d32c7-320c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:2e:36:12:9c:db:c6:03:5b:c4:a7:3c:b7:
                    1f:38:88:d7:32:cb:1a:05:cb:2f:c2:50:71:5d:82:
                    07:f6:8b:4a:23:b3:cb:52:2e:64:55:57:a0:7e:7f:
                    65:6b:fd:f7:bc:a1:8f:f2:f5:fc:9a:c5:27:ac:f2:
                    37:bb:81:d6:be:86:b3:6c:34:0e:fa:be:10:a7:94:
                    37:3d:52:49:f3:52:d3:da:c0:af:47:ad:ae:42:2a:
                    03:bb:d0:62:19:fb:df:0b:13:ae:9f:9e:f4:15:69:
                    08:93:27:d1:5e:32:a8:61:c1:5e:68:87:7f:83:f0:
                    55:74:83:ef:a9:dd:d1:c3:8d:81:5f:39:fd:d3:25:
                    09:51:0a:11:a7:b4:9e:0a:d0:9e:94:4a:21:e5:e5:
                    e5:b2:63:77:2c:b2:25:35:7c:b2:0d:80:7f:1f:0d:
                    91:17:39:71:b6:8f:bd:2e:bd:9c:cd:65:37:db:6b:
                    38:fd:3a:c7:85:4d:5d:59:17:b9:ff:61:4d:6d:3a:
                    8d:ac:55:43:70:e9:87:67:fd:ad:93:54:32:23:f8:
                    f8:e9:8a:d6:44:0a:a5:34:a4:64:81:4e:ca:71:eb:
                    a8:dc:84:a1:2f:8b:3b:7e:f9:0a:fd:77:88:8d:ee:
                    da:30:e5:ac:94:d5:0e:20:73:38:6c:fd:4e:83:3a:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:20:11:BE:15:B7:77:AC:8C:DF:E8:FD:57:AB:DE:3A:F6:52:69:3D
            X509v3 Authority Key Identifier:
                keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:86:ad:84:be:c9:89:56:07:75:7c:a2:9f:d1:43:cf:d6:
         f8:3e:c5:ed:16:82:53:0a:a5:85:61:03:ee:8f:b9:33:e4:71:
         ee:1b:6c:24:e0:2f:46:1e:38:e6:36:81:47:a1:d7:96:2a:d6:
         2b:c5:ef:ab:a5:0f:6b:13:2b:60:d0:be:ab:4a:e4:36:d8:e6:
         65:a1:d3:84:1a:f9:b9:61:2c:aa:a4:e0:2d:b1:65:67:fb:ae:
         29:f5:b0:f8:16:04:08:10:da:d4:cc:54:76:46:4c:27:cb:3f:
         1d:76:ae:07:0d:07:98:72:a5:ea:28:a2:2b:99:c3:89:7d:cc:
         83:d1:a1:78:a4:7e:3a:4c:c4:c9:e4:50:fb:c4:5b:aa:5c:2c:
         de:71:4d:e7:08:c4:8e:58:ac:ca:d8:16:d2:5e:b9:7d:09:76:
         0f:73:5f:be:f5:10:33:3c:33:c1:d3:7a:8f:67:a1:83:54:4e:
         1f:82:2d:66:bd:5c:a9:52:7e:52:d0:e0:ab:82:83:8f:6d:34:
         44:5d:ac:f0:87:cc:5f:31:8a:96:bf:96:73:69:7b:bb:49:80:
         e8:bd:72:a5:95:b9:ad:7b:6b:eb:4c:82:75:83:d6:78:13:aa:
         c4:41:15:2d:10:fe:9b:ca:0c:7c:d9:19:0a:ac:88:36:a1:13:
         5d:a7:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:09 2026 by rpki-client