Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
File:                     TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft (raw, json)
Hash identifier:          NGFPODIHKPPpiRG+N3sMGxFQepbRVATFxQOPbwt1BEo=
Subject key identifier:   31:EF:1F:83:E9:AB:ED:04:C9:64:FE:6C:6A:92:4A:87:CC:FE:70:3A
Authority key identifier: 4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31
Certificate issuer:       /CN=A919FC57/serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
Manifest number:          0E
Signing time:             Tue 23 Jun 2026 09:23:25 +0000
Manifest this update:     Tue 23 Jun 2026 09:23:25 +0000
Manifest next update:     Tue 30 Jun 2026 09:23:25 +0000
Files and hashes:         1: TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl (hash: NnQv4VZFsAvkxiFHJ6lWLONijwW4K8hoVgaJT/fQCbk=)
                          2: 7F6617725EE411F1B0096E1CFD79AC22.roa (hash: iEtERU/YxbdfzHAt/g+SXbLAaj7SO/HjyfXDuyj6Hkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl
                          rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FC57, serialNumber=4C0063210D5D846502BE62EE2AB4ED254FA15331
        Validity
            Not Before: Jun 23 09:23:25 2026 GMT
            Not After : Jun 30 09:23:25 2026 GMT
        Subject: CN=6a3a508d-ff4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:e7:c4:4b:d9:b8:ae:f0:a8:09:10:94:aa:
                    ed:5b:b3:f4:35:2d:de:af:e4:53:3d:e7:3e:cc:07:
                    3a:9a:ca:06:f6:bc:f8:53:d9:c8:d8:a0:aa:fd:35:
                    ef:f5:e5:e0:1e:e3:bf:28:90:8f:02:8c:a8:de:9f:
                    31:85:62:cf:5d:b6:c0:10:d2:d0:c2:00:52:4d:15:
                    4c:51:33:54:a2:ea:87:f2:21:36:5e:71:16:00:99:
                    f1:f1:d6:81:c6:a5:43:13:19:99:96:0a:d4:62:e3:
                    1d:bc:ec:ca:f8:51:8c:29:64:04:84:e0:8f:0b:4c:
                    26:19:fb:a5:0f:c2:aa:d0:76:10:ed:ef:b3:af:bb:
                    00:7e:af:44:6d:87:6a:52:aa:04:3f:77:9c:43:7a:
                    7f:a8:e2:6a:1c:09:5f:1f:5f:5a:bb:0c:7d:75:06:
                    01:16:20:53:51:a3:01:50:41:3d:1a:f0:e2:94:63:
                    fc:8a:b0:9e:56:19:8d:fa:e9:49:b9:24:47:33:6e:
                    b4:3a:d2:cf:92:58:26:18:d4:b6:6a:15:a6:f7:c0:
                    98:65:f4:df:42:60:6c:b8:78:12:05:92:6a:50:33:
                    28:ab:32:aa:80:61:40:3f:80:85:d1:50:46:88:60:
                    de:c7:c4:86:18:a4:e0:91:1b:98:10:df:a7:a6:48:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:1F:83:E9:AB:ED:04:C9:64:FE:6C:6A:92:4A:87:CC:FE:70:3A
            X509v3 Authority Key Identifier:
                keyid:4C:00:63:21:0D:5D:84:65:02:BE:62:EE:2A:B4:ED:25:4F:A1:53:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TABjIQ1dhGUCvmLuKrTtJU-hUzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FC57/225779FE5EE411F1B4CB5168FC79AC22/TABjIQ1dhGUCvmLuKrTtJU-hUzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:57:76:a3:59:62:f3:2b:ef:71:12:80:0f:2f:61:e5:0d:e4:
         91:bc:f5:e5:5e:0c:c5:fc:c0:a9:cb:6b:47:87:0f:52:55:30:
         ab:90:bd:e6:d7:87:31:36:78:08:1c:7d:e3:d0:05:59:68:73:
         2e:e3:f6:e1:69:d5:77:53:54:3d:17:2a:c9:f8:11:56:4f:e9:
         44:b3:48:f8:f5:a1:9d:56:f1:e4:7e:b4:ca:08:c2:44:cc:11:
         85:10:b7:1e:80:bc:4f:a7:92:f0:46:42:81:6f:c6:e0:85:2c:
         66:1b:2e:50:3a:b0:b6:9e:46:b8:01:d8:9b:3e:13:eb:c3:4d:
         46:e0:1c:54:2e:d7:53:8c:36:d8:11:cc:2d:49:9e:d1:f6:de:
         ac:12:a1:e8:4a:c5:ed:97:47:3b:e2:8d:8a:c5:8e:00:67:db:
         18:7a:5e:66:dd:90:cf:d9:3c:d0:e6:6b:7d:93:f5:2c:9f:05:
         fa:00:94:c1:38:56:8c:53:e2:5a:56:7c:ac:21:f9:bc:ce:1a:
         92:4f:0e:72:34:bb:19:83:56:55:9a:3c:b8:5a:f1:cb:30:5d:
         3d:c9:10:ab:a6:a6:93:88:a5:e7:5f:4a:a9:d7:4e:de:cc:e7:
         d8:00:21:be:21:2f:2c:24:79:96:7f:f1:88:a2:e7:bb:4d:37:
         57:75:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:10:52 2026 by rpki-client