Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File:                     TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier:          ojQWyymJTOGJGdUq4kjJU3QXbOp0kqqSBhJnN+9VJqY=
Subject key identifier:   52:0B:62:3D:FA:4C:AF:95:B5:D7:4E:2C:62:75:35:45:5A:3C:11:A3
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number:          35EF
Signing time:             Thu 12 Mar 2026 14:28:39 +0000
Manifest this update:     Thu 12 Mar 2026 14:28:38 +0000
Manifest next update:     Thu 19 Mar 2026 14:28:38 +0000
Files and hashes:         1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: w7PJzaxGFb+17uAmRj30jnphWRTbtfHl7dWc5fsl0Q8=)
                          2: 2EA5CD40F87911F0BB9C431B4E6F56BC.roa (hash: +d4B26Na8POcAIMEDHE80hyVEMg/1Er/8leTiDirXLU=)
                          3: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
                          4: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: 3LThCkSD3CixkviqNHz0V+phveOJEdStCjidpGP40/s=)
                          5: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: ARWDJzOSFseHYrmvd3v84W+z4laPOxW/BizgI/8vmQQ=)
                          6: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
                          7: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
                          8: 77D96D4A4F3411EFBA0A2659C4F9AE02.roa (hash: yyOi/VAw5sRVCQX5TpgvFtNkRFTz06wlp/omi2nfwPw=)
                          9: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
                          10: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
                          11: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
                          12: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
                          13: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
                          14: D166652A072211EF9AC24D5BC4F9AE02.roa (hash: zxbZTAwiDX/b2GO6W1+ev4fZzno5bblpI3qcle69OTA=)
                          15: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14080 (0x3700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Mar 12 14:28:38 2026 GMT
            Not After : Mar 19 14:28:38 2026 GMT
        Subject: CN=69b2cd97-4c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:ce:6a:06:d5:30:dc:d2:2f:0e:69:81:cb:
                    d0:e7:4c:5a:7e:fa:f4:79:74:66:55:94:79:5d:a9:
                    bc:78:a2:23:11:9a:1e:2c:3d:88:aa:aa:21:03:fe:
                    8a:24:6c:c2:ea:a9:d1:b6:8c:63:4a:93:84:d0:9d:
                    85:d4:cb:16:67:b4:36:86:47:64:96:c8:c2:ad:74:
                    26:16:7e:90:fa:32:5a:9d:40:bd:b3:1b:70:55:d5:
                    c2:ec:31:7e:61:83:54:ad:fa:3b:ad:92:01:98:70:
                    ae:b6:89:f2:2a:51:53:be:cf:fa:64:02:52:6f:fe:
                    a9:7b:8a:7d:bd:d1:6f:bd:79:39:61:6c:cf:fd:aa:
                    56:cb:43:c3:87:78:09:cd:f4:81:0a:e9:b3:3a:da:
                    47:bd:47:0b:1d:a5:11:b2:c5:5d:6c:82:67:07:66:
                    15:f3:94:ce:f5:70:c9:36:30:ba:c3:e9:ff:4f:f9:
                    98:7d:bd:0e:73:bd:b8:c0:6b:be:a9:88:a5:20:3e:
                    5a:f5:e2:63:d7:06:36:3d:c2:30:a9:6e:70:03:c0:
                    f0:29:9f:98:e1:19:b5:b8:80:3b:5d:10:19:44:3a:
                    ab:da:17:69:74:92:ec:75:89:88:07:c5:bf:1d:f1:
                    4d:2d:c7:44:67:cd:49:68:0c:b1:9e:1b:df:2c:bd:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0B:62:3D:FA:4C:AF:95:B5:D7:4E:2C:62:75:35:45:5A:3C:11:A3
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:22:6d:d8:df:42:14:02:62:c7:94:2c:78:bb:57:3a:50:95:
         ad:07:72:5a:0a:ff:18:e4:93:bd:2f:41:36:0a:ec:3a:1d:40:
         60:9e:25:b3:5f:55:f6:68:26:d1:5f:c4:da:3f:2b:e7:f6:5a:
         a9:77:d4:f7:8d:6c:60:21:0f:88:ae:72:12:03:d6:c5:91:da:
         db:05:8d:a4:41:71:1a:da:18:10:d5:40:41:81:5e:30:b8:b9:
         04:ed:64:fb:b4:75:d4:57:f3:c1:f7:14:94:27:d0:ba:0c:b7:
         77:b0:ab:19:7c:34:9b:dd:8f:2d:b9:d8:a7:90:0a:3e:f3:62:
         e4:1b:d9:6a:6e:c8:ac:6b:a0:e9:57:33:08:6f:1d:5f:89:62:
         59:67:92:1d:60:14:dd:93:d5:67:2d:40:a9:21:60:23:6f:dc:
         c2:29:35:30:89:3e:fe:30:1b:93:fb:7d:fe:61:b1:17:f8:a5:
         4b:ea:84:d1:d3:cf:bf:b6:e2:eb:cc:2c:e8:f5:d2:81:61:e6:
         03:70:cf:9a:86:5b:d8:bf:38:3e:68:ee:6a:c0:6b:45:05:8f:
         cf:61:53:91:df:f9:85:d2:e5:31:c8:b0:41:85:cf:89:12:51:
         19:d8:60:83:db:74:9f:c0:a9:3a:2a:bf:d8:1a:de:f4:59:3a:
         35:4e:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:52:27 2026 by rpki-client