Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File:                     TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier:          F2L7VBxYeBmgSSyoatsteE9PKOaY3K3jNGeo4zYUzjI=
Subject key identifier:   BA:3A:CE:66:C3:B1:6F:49:B1:34:25:B6:BD:FA:2C:50:D7:B1:77:56
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number:          3628
Signing time:             Wed 10 Jun 2026 14:29:26 +0000
Manifest this update:     Wed 10 Jun 2026 14:29:26 +0000
Manifest next update:     Wed 17 Jun 2026 14:29:26 +0000
Files and hashes:         1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: a8H4/J4mowwlhstfRZKo+B3WfcnySdUlH7V1Gv9Pxyw=)
                          2: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
                          3: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
                          4: A88061CA5FDA11F198C149507447A888.roa (hash: VB/8E8iYQg+KLWse8U5DMztMoWWkpIsEB2FuM+h9WoU=)
                          5: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
                          6: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
                          7: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
                          8: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
                          9: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
                          10: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
                          11: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: 3LThCkSD3CixkviqNHz0V+phveOJEdStCjidpGP40/s=)
                          12: D81EE456600211F1A83A51818247A888.roa (hash: xT5/MXe5YWiQcTBrK7XyP3ZJ8Yt3WkQUZICbIpLKpvQ=)
                          13: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
                          14: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
                          15: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 14:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14147 (0x3743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Jun 10 14:29:26 2026 GMT
            Not After : Jun 17 14:29:26 2026 GMT
        Subject: CN=6a2974c6-d166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:92:8d:da:70:42:8c:a2:cb:c4:dc:5a:6a:
                    c5:50:0e:1c:4a:70:45:cd:2f:95:c7:1b:c4:44:d6:
                    21:b6:00:9e:50:2f:57:11:f7:99:44:d3:6d:94:54:
                    07:55:03:aa:ec:19:0f:f3:a1:cb:9a:dc:30:06:35:
                    84:c8:12:66:40:51:f0:08:02:5d:41:39:3c:e1:1c:
                    62:90:33:94:9a:a6:31:f5:95:ae:2c:41:90:0e:67:
                    71:96:4d:4a:57:33:a6:23:67:40:e9:3d:0c:51:c1:
                    78:38:f0:41:5b:f8:ca:a6:12:26:16:13:de:3d:2a:
                    2b:25:3b:89:ae:48:39:3f:11:e8:dc:1a:ee:d5:c8:
                    5c:b6:e0:43:f3:bb:44:87:70:4f:29:a2:f6:a4:6d:
                    a2:16:d3:53:ad:09:93:c9:14:7a:cd:b8:89:16:4f:
                    09:20:cd:60:13:03:e6:28:c5:fd:9f:dc:54:28:c2:
                    86:e6:a6:64:f9:bf:1a:8a:52:76:97:5a:7f:02:5b:
                    4b:6f:21:af:44:3a:f0:8d:83:1f:bb:83:7c:38:c7:
                    8e:0f:2a:cf:09:de:02:14:65:69:16:b3:a5:f1:75:
                    91:2e:53:d3:6b:64:7e:96:0b:5c:4d:a3:72:90:bb:
                    ee:36:8a:ae:0a:f6:c4:93:c2:bb:f1:32:fd:32:76:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:CE:66:C3:B1:6F:49:B1:34:25:B6:BD:FA:2C:50:D7:B1:77:56
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:6e:0b:59:0a:7c:92:6b:2b:0c:b5:0e:4b:4b:61:8f:c2:
         0c:a5:70:c8:2c:43:d3:06:e3:4f:e4:74:e3:6c:05:2f:2a:ec:
         84:db:24:af:a4:60:bd:ef:8f:14:db:28:cc:f4:e6:c5:fb:5d:
         a1:93:e6:aa:03:e9:35:dc:73:f4:f4:a8:7e:b8:22:d6:a3:24:
         fc:aa:32:0c:34:a2:86:c4:6f:f3:83:2f:6a:82:29:af:a9:e9:
         ae:16:d6:56:eb:f7:dd:bf:f5:35:8e:28:e7:91:e7:3f:df:f8:
         08:59:f2:8f:9d:34:55:13:a5:22:90:0e:71:69:f2:b3:a0:8f:
         3e:17:00:6b:61:3c:06:ad:c2:25:72:0e:fa:32:2a:5c:62:7a:
         c6:3c:ce:d1:e1:b9:a3:2c:fe:f0:7c:c4:b7:b4:2c:bf:0e:1f:
         cc:3f:1b:ea:bd:68:ec:ac:26:be:fb:c9:07:7f:03:c8:ba:38:
         92:cc:97:ee:81:86:35:2e:2b:5c:43:81:29:9f:bf:7a:68:94:
         81:2a:37:5e:f1:4b:12:84:ff:92:ee:5c:93:48:02:1c:e8:a6:
         3f:52:2f:c0:d4:a1:74:1a:f0:12:01:40:12:43:f3:68:1c:f2:
         8a:29:be:9b:7b:a5:9e:f0:38:0e:d3:4c:6d:98:da:72:43:a5:
         27:45:b7:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICN0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjYwNjEwMTQyOTI2WhcNMjYwNjE3MTQyOTI2WjAYMRYwFAYD
VQQDEw02YTI5NzRjNi1kMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuh+SjdpwQoyiy8TcWmrFUA4cSnBFzS+VxxvERNYhtgCeUC9XEfeZRNNtlFQH
VQOq7BkP86HLmtwwBjWEyBJmQFHwCAJdQTk84RxikDOUmqYx9ZWuLEGQDmdxlk1K
VzOmI2dA6T0MUcF4OPBBW/jKphImFhPePSorJTuJrkg5PxHo3Bru1chctuBD87tE
h3BPKaL2pG2iFtNTrQmTyRR6zbiJFk8JIM1gEwPmKMX9n9xUKMKG5qZk+b8ailJ2
l1p/AltLbyGvRDrwjYMfu4N8OMeODyrPCd4CFGVpFrOl8XWRLlPTa2R+lgtcTaNy
kLvuNoquCvbEk8K78TL9MnZBCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLo6zmbD
sW9JsTQltr36LFDXsXdWMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2ly
M2JtYnpPNVBwYWtXMFZlelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACFVuC1kKfJJrKwy1DktLYY/CDKVwyCxD0wbjT+R042wFLyrshNskr6Rgve+P
FNsozPTmxftdoZPmqgPpNdxz9PSofrgi1qMk/KoyDDSihsRv84MvaoIpr6nprhbW
Vuv33b/1NY4o55HnP9/4CFnyj500VROlIpAOcWnys6CPPhcAa2E8Bq3CJXIO+jIq
XGJ6xjzO0eG5oyz+8HzEt7Qsvw4fzD8b6r1o7KwmvvvJB38DyLo4ksyX7oGGNS4r
XEOBKZ+/emiUgSo3XvFLEoT/ku5ck0gCHOimP1IvwNShdBrwEgFAEkPzaBzyiim+
m3ulnvA4DtNMbZjackOlJ0W3XQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:09:41 2026 by rpki-client