Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File:                     TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier:          kwovHtIdU6N+DTRXBDiy5aSgh8DKuGOT+HmXINuMvQE=
Subject key identifier:   27:E4:69:B8:F0:78:30:C5:8E:EC:61:47:6C:B7:84:08:27:3E:3B:CF
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       371C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number:          3609
Signing time:             Sun 26 Apr 2026 14:29:22 +0000
Manifest this update:     Sun 26 Apr 2026 14:29:22 +0000
Manifest next update:     Sun 03 May 2026 14:29:22 +0000
Files and hashes:         1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: Hg3q3QsiojwPlxe+33M152T8ekVU7yviKAPotJxx+rQ=)
                          2: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
                          3: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: 3LThCkSD3CixkviqNHz0V+phveOJEdStCjidpGP40/s=)
                          4: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
                          5: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
                          6: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
                          7: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
                          8: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
                          9: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
                          10: EB56BC4E332311F1AE890F3EB7833773.roa (hash: KqYOqvSsGfe9/YuOAMOQ7xZCaedOl3C9H94v5PQH6VA=)
                          11: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
                          12: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
                          13: D166652A072211EF9AC24D5BC4F9AE02.roa (hash: zxbZTAwiDX/b2GO6W1+ev4fZzno5bblpI3qcle69OTA=)
                          14: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
                          15: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14108 (0x371c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Apr 26 14:29:22 2026 GMT
            Not After : May  3 14:29:22 2026 GMT
        Subject: CN=69ee2142-8020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:af:88:d2:02:02:0d:97:70:2f:28:ff:d1:
                    20:74:b5:60:b8:14:6d:5f:e4:e7:c3:a9:b7:73:2e:
                    a0:c3:00:df:4c:19:c9:ef:50:62:4d:1c:c7:4c:b3:
                    c7:19:9c:89:1d:12:fd:ba:94:c7:91:4a:82:69:d6:
                    4d:b3:64:17:f8:c9:30:6c:a1:1b:94:37:5f:9a:70:
                    43:ba:29:1e:4b:80:f1:30:38:47:37:94:c1:8f:7b:
                    b6:18:58:91:c1:09:e5:03:cc:f6:32:16:8f:c7:3f:
                    4b:1f:a6:9d:46:e1:36:99:96:e8:05:5c:1c:20:00:
                    bc:e5:72:9e:38:0b:51:21:91:13:88:71:4b:51:6d:
                    f4:d2:fc:a6:ac:be:06:17:c3:b0:9d:15:32:33:bc:
                    f1:84:a3:74:03:d8:ce:a7:32:2f:ac:c9:80:c9:ea:
                    a5:9b:b5:33:6a:5d:07:96:49:af:8c:c5:7a:83:65:
                    f9:7c:ee:32:e4:b9:6b:0b:b9:f4:11:fc:2f:d1:49:
                    dc:5e:12:2f:fc:74:d1:a2:7b:b9:f7:e1:3b:4d:ac:
                    ef:23:41:6e:ad:2d:e0:d0:ac:b0:f6:46:db:18:76:
                    66:c1:27:d6:f3:32:89:a0:cf:73:f5:6e:da:e1:44:
                    19:15:af:8d:d0:b0:87:02:9c:00:67:35:1a:78:4d:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:69:B8:F0:78:30:C5:8E:EC:61:47:6C:B7:84:08:27:3E:3B:CF
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0f:07:d2:6a:cf:9b:dc:90:3a:36:c2:d5:ee:a0:8a:3f:9f:
         93:cd:f1:b7:33:d7:0b:57:56:38:0c:75:e6:11:bf:2c:72:ed:
         ea:3a:85:3f:dc:9f:73:eb:a1:2e:c7:58:f4:e9:4f:31:70:1f:
         13:98:d0:f9:3d:ae:a8:52:ca:90:aa:6f:e9:27:df:05:53:2f:
         70:89:6c:76:70:3e:fb:3b:37:1a:d4:3a:25:2c:7e:09:08:c1:
         db:cf:d9:53:18:e0:e4:73:bf:b1:73:2a:b9:80:9d:66:2a:7e:
         a8:0d:ac:db:ed:2c:9e:c5:31:9b:33:5e:49:ac:b8:bd:44:50:
         21:1b:d0:2a:4a:5f:cc:73:b3:dd:4f:f8:9f:68:fd:74:af:d0:
         8f:39:f1:88:a8:40:1f:0e:48:cf:51:0e:2f:3d:3c:65:81:be:
         60:4b:67:2d:40:b3:f0:d7:a2:28:17:46:d7:7f:e4:da:95:39:
         11:68:7d:e1:ea:8e:1b:09:46:8e:ae:44:f1:db:a1:b0:c0:7c:
         2c:89:27:db:f3:a4:b2:c7:6c:e6:03:2b:f7:b1:0a:09:d2:f9:
         aa:ae:fe:a6:10:93:02:de:d0:94:06:8b:54:96:f4:93:9b:77:
         53:5b:38:ae:ef:0a:7e:84:0d:3c:68:86:cd:47:ed:49:ce:7e:
         5f:4c:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:15:55 2026 by rpki-client