Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
File:                     TG4jrAOOQ4__sH5li6xvKCFTRPs.mft (raw, json)
Hash identifier:          xG0XDHEIiSfrK5TRUQVTDPZvrxO3cCEVKd0jqgOlCHI=
Subject key identifier:   61:76:E3:17:F5:33:FA:C5:97:6A:78:5C:51:88:55:C3:16:CF:68:D1
Authority key identifier: 4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB
Certificate issuer:       /CN=A91A793A/serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
Certificate serial:       109D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
Manifest number:          1090
Signing time:             Wed 20 May 2026 17:22:12 +0000
Manifest this update:     Wed 20 May 2026 17:22:11 +0000
Manifest next update:     Wed 27 May 2026 17:22:11 +0000
Files and hashes:         1: TG4jrAOOQ4__sH5li6xvKCFTRPs.crl (hash: v0T8iJeJSvU30p5mmesapmJSVnzBXH2OkyZMtR6TCvo=)
                          2: 159F22549D1B11ED96607C22C4F9AE02.roa (hash: UZ/sDYWhUU8n3wLtjpyLN8Vx46G+xjeN+IlTnHCxK80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl
                          rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4253 (0x109d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A793A, serialNumber=4C6E23AC038E438FFFB07E658BAC6F28215344FB
        Validity
            Not Before: May 20 17:22:11 2026 GMT
            Not After : May 27 17:22:11 2026 GMT
        Subject: CN=6a0dedc3-c5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:1b:47:8f:09:e4:b8:8d:07:aa:27:94:13:
                    8e:cc:27:05:31:23:f5:bb:fb:6a:78:0b:32:83:2c:
                    66:df:e6:05:0d:07:d3:82:7f:f7:fc:d3:59:22:a3:
                    b4:fa:79:ea:8e:3b:d3:81:2b:72:27:0d:93:db:a1:
                    c6:62:7f:4a:a0:7d:90:7c:2e:bc:41:ae:43:a1:0d:
                    31:41:ee:41:7e:05:c5:6b:12:cc:3a:0d:04:a3:4a:
                    9a:39:1e:79:81:55:ff:d6:d2:5e:79:96:73:92:58:
                    bb:aa:2f:ed:ac:f3:9b:e9:5f:78:99:99:78:cc:a0:
                    3c:22:8f:d1:54:f9:88:fb:6b:83:61:03:a4:70:c2:
                    17:47:2e:c9:2d:9b:22:2f:12:4e:6c:f7:6f:2f:1b:
                    67:b2:d6:0c:7d:3e:96:46:6b:02:d2:42:c4:cc:81:
                    9b:d6:dc:c2:ea:fa:01:dc:84:1b:10:39:e8:42:67:
                    1a:be:2e:bf:11:74:ab:84:4c:d5:b4:84:1d:6d:42:
                    84:55:94:de:2a:7b:7b:e4:d0:5f:1c:19:12:b2:f7:
                    64:f1:6b:da:50:42:08:d3:0b:ce:5d:7b:e6:05:2d:
                    ed:6f:0b:ee:e8:f0:33:e6:5d:41:9f:49:88:6a:38:
                    6b:3d:bb:fa:9f:9e:cd:0e:95:aa:c6:bb:03:e3:77:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:76:E3:17:F5:33:FA:C5:97:6A:78:5C:51:88:55:C3:16:CF:68:D1
            X509v3 Authority Key Identifier:
                keyid:4C:6E:23:AC:03:8E:43:8F:FF:B0:7E:65:8B:AC:6F:28:21:53:44:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG4jrAOOQ4__sH5li6xvKCFTRPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A793A/76AF334C516911E9A79C1E81C4F9AE02/TG4jrAOOQ4__sH5li6xvKCFTRPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:2a:48:f8:2e:d4:84:a0:59:33:4d:30:3f:c5:0d:d2:ed:
         7f:c3:33:49:98:94:39:91:1f:f7:e7:41:00:c6:fb:03:71:f3:
         30:04:fc:56:67:6d:1a:36:6d:5c:72:c2:1d:e1:0d:e2:6d:85:
         cf:39:01:34:24:c9:1d:6c:01:33:e9:92:52:6f:52:cb:00:6d:
         a3:3b:58:7b:50:58:43:1a:5a:8f:f8:ab:dd:2a:a7:96:bd:85:
         1c:11:26:58:44:d5:80:c4:71:a8:14:90:19:43:8f:5a:9f:b2:
         de:27:a6:01:9e:70:b5:71:7c:cf:6e:d1:53:0b:95:12:b2:03:
         1b:1e:f6:cf:eb:6f:40:2d:94:b7:80:3b:37:17:39:23:04:bd:
         62:44:5c:94:54:ba:05:37:26:f6:5c:53:8e:e9:29:4a:68:5b:
         ab:79:fb:ca:3d:94:ea:1c:17:27:35:ba:39:69:03:ca:25:6e:
         13:49:17:f5:1f:4f:7c:e8:50:42:79:31:2b:a9:c9:96:9f:80:
         1a:74:c8:cf:36:6f:7e:3b:60:c4:90:af:f3:01:51:5e:da:c2:
         5f:80:5d:0a:59:8a:b0:49:ec:27:5d:ee:f7:74:70:62:f8:9b:
         60:9d:6a:5a:52:27:03:d6:07:cc:88:62:33:29:42:8b:9d:2d:
         7a:ff:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:41 2026 by rpki-client