Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
File:                     TYR1I-W92eO4lpgooEv-2isMAxs.mft (raw, json)
Hash identifier:          CmAR9FC9gyKX6mPA6M0gufq4cM09jcxO2Scg5ZUH6JQ=
Subject key identifier:   06:3C:57:AB:E0:D4:D9:0E:72:BF:BB:E2:6F:40:38:48:AC:F7:65:2F
Authority key identifier: 4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B
Certificate issuer:       /CN=A91AC726/serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
Manifest number:          07BA
Signing time:             Thu 12 Mar 2026 21:04:38 +0000
Manifest this update:     Thu 12 Mar 2026 21:04:37 +0000
Manifest next update:     Thu 19 Mar 2026 21:04:37 +0000
Files and hashes:         1: TYR1I-W92eO4lpgooEv-2isMAxs.crl (hash: b4Yx9XH6EtKoJLGCOsOD3HcwcUs23zVjHqx3Qusa9A0=)
                          2: A8D1E0DE688811ECBE2C4F49C4F9AE02.roa (hash: UClPHshsGcyvq7g9LcOIEJ85L9Tn1p+WoRxD1Wzjhl0=)
                          3: CA9D82E8688511EC999E8B70C4F9AE02.roa (hash: ZSWT8bBIoiXkk5NHfAcRN305gYra6U3TCXFXnnRK7rU=)
                          4: 52EFDBAE687D11ECBF82F558C4F9AE02.roa (hash: vlQE6zfU8sldRsawycgscMRN/+d6UAyhTBqyJZ13gKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl
                          rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC726, serialNumber=4D847523E5BDD9E3B8969828A04BFEDA2B0C031B
        Validity
            Not Before: Mar 12 21:04:37 2026 GMT
            Not After : Mar 19 21:04:37 2026 GMT
        Subject: CN=69b32a66-5a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:fb:81:06:9c:2f:53:f6:97:6f:91:0e:63:
                    23:48:c1:f8:90:f5:c1:e1:1e:8b:eb:47:54:e4:4e:
                    54:26:3f:b0:c7:e3:d6:02:55:ff:d2:4c:36:bc:07:
                    a0:9b:28:5d:0d:5e:a6:a6:5b:06:6a:b5:da:5c:20:
                    2e:ed:c6:15:94:1a:6e:78:6c:c2:dc:63:ad:b3:32:
                    16:86:c1:87:21:46:b9:ba:19:5a:f9:d9:33:60:f8:
                    76:dd:05:03:8f:8c:ba:9a:e6:0e:c3:24:cc:a3:cc:
                    d0:94:03:29:9e:c9:ee:7a:29:7e:d1:9d:2e:86:c0:
                    fe:4f:14:79:e3:97:39:98:87:5f:99:7f:00:e9:00:
                    90:77:60:7d:73:56:64:70:65:1a:e7:50:e3:4c:09:
                    50:80:ab:21:f9:3e:b5:ad:97:08:d9:89:dc:ce:db:
                    f7:69:59:18:9e:44:7c:c7:77:4c:36:81:34:53:90:
                    83:a7:75:f1:31:ef:13:74:a3:1c:44:d6:89:ad:d4:
                    1f:82:87:22:a2:fc:f0:44:9d:5b:8a:21:2b:1a:12:
                    a6:6a:68:38:7b:69:1d:11:b5:2a:4f:46:c9:16:12:
                    66:d8:a3:ef:e7:1a:19:a2:93:77:b7:2a:cb:35:e4:
                    97:2c:ca:d0:41:59:7a:83:16:00:89:c6:92:c2:d3:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:57:AB:E0:D4:D9:0E:72:BF:BB:E2:6F:40:38:48:AC:F7:65:2F
            X509v3 Authority Key Identifier:
                keyid:4D:84:75:23:E5:BD:D9:E3:B8:96:98:28:A0:4B:FE:DA:2B:0C:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TYR1I-W92eO4lpgooEv-2isMAxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC726/9C4F530A38AF11EB8913DE41C4F9AE02/TYR1I-W92eO4lpgooEv-2isMAxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:f9:a7:e2:ac:bd:42:c0:26:91:00:3b:07:c7:a4:63:32:
         2a:b6:52:96:09:04:72:bd:bd:7f:fe:bf:21:f5:68:8c:94:33:
         fd:4e:91:1c:c8:a3:2b:8f:11:2a:22:eb:04:16:16:1c:12:fa:
         cd:8e:84:f4:fc:03:00:3f:94:14:01:6b:c9:b3:c1:f1:a4:da:
         3c:1b:17:c0:50:ba:88:90:6c:9c:f7:8a:1e:b3:f7:47:b7:35:
         55:44:ed:d1:f4:b9:0a:de:7a:42:c6:61:8f:1d:61:b9:94:57:
         b1:29:23:9f:0c:cb:c7:ce:e6:c9:cd:a0:9c:3d:41:89:0a:76:
         0b:e6:6a:4c:20:37:0e:01:9a:4d:10:bd:56:c7:9b:33:41:3d:
         9c:fe:df:30:c8:1f:49:2a:7a:a8:c9:e1:79:3a:23:d5:9b:8c:
         05:c8:c7:ed:5a:13:a3:9b:9e:61:15:c8:6e:15:74:23:21:db:
         ee:02:bc:f3:b5:2a:45:73:91:a7:d0:22:04:26:b2:38:24:42:
         b9:3d:81:ae:aa:d5:20:7b:0d:df:c0:d5:ea:c6:60:2d:82:4c:
         b2:30:92:c0:db:96:9b:3a:1b:f8:dd:77:b2:c5:1b:6c:cb:f3:
         c5:8e:b5:52:8f:9e:22:0e:d8:2d:d3:d2:7c:b8:92:9d:5d:e8:
         da:d3:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:13:50 2026 by rpki-client