Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File:                     TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier:          CfKvfa+QdRx6KDyu+y+KLVJ8NpyZnvdZraO3BVMvxKE=
Subject key identifier:   8B:8A:CB:CB:AC:5A:6B:87:B6:33:0C:19:43:4E:1F:43:51:1F:D2:66
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number:          DC
Signing time:             Fri 15 May 2026 06:51:17 +0000
Manifest this update:     Fri 15 May 2026 06:51:17 +0000
Manifest next update:     Fri 22 May 2026 06:51:17 +0000
Files and hashes:         1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: VWfpgJwbrzQaWdyauUTeb+l/l5c4lX8zyeNGH+IEXEc=)
                          2: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: Zh6wXEXphp1EIjFhhkqihtiOfs2baqRkCWO1whLIxuk=)
                          3: 5905CBAEDFE111F083058845556F56BC.roa (hash: Ep0ZjILGTIRguDCqf/7ebqhYEj4n0HP0tW0NEv654xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 06:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: May 15 06:51:17 2026 GMT
            Not After : May 22 06:51:17 2026 GMT
        Subject: CN=6a06c265-1c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:82:a0:d9:93:7a:0a:f9:d6:dd:2b:97:ab:d2:
                    07:12:f4:a8:e0:87:e0:1d:03:7a:46:93:4b:c2:1b:
                    ea:b0:c9:2b:54:29:01:22:90:93:ab:e8:cc:b6:76:
                    5c:0c:22:a5:0f:67:1b:b2:bf:c2:59:0d:37:1d:ca:
                    83:a9:58:2a:25:4d:1c:0c:d3:37:70:f5:80:5c:70:
                    c3:fa:b2:c7:32:84:85:c6:27:03:27:99:8a:59:da:
                    27:0e:90:a3:e2:d8:76:c3:8b:c9:ae:06:a1:79:d8:
                    40:d1:88:b7:79:96:eb:f1:21:48:a9:13:f5:63:dc:
                    57:eb:cc:b2:3b:e0:d0:59:0c:74:f5:f7:8a:ae:d6:
                    15:d6:49:28:cd:a1:3b:91:71:7d:84:27:0e:be:95:
                    b6:9a:18:ba:d0:07:7c:63:cc:f9:a9:c1:66:a3:7a:
                    59:f3:7d:c6:a8:10:87:24:55:6f:f4:8e:b0:ed:fb:
                    4b:fa:6e:08:7a:b3:75:6d:6a:89:48:37:0f:e3:c8:
                    fb:d2:84:7c:36:c1:4b:27:48:5d:70:6c:bf:80:95:
                    c7:34:22:69:30:b9:36:bc:4d:49:57:77:43:61:19:
                    e0:d8:c3:6f:1d:10:a9:50:c7:92:ed:f2:8d:bc:43:
                    37:8e:ca:6a:f8:b9:68:c0:75:22:fe:f9:fc:d6:75:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8A:CB:CB:AC:5A:6B:87:B6:33:0C:19:43:4E:1F:43:51:1F:D2:66
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:57:7c:ae:2e:d9:49:3f:16:3b:8f:b4:f2:1a:07:8a:46:51:
         dc:52:a2:96:88:a7:0b:74:d0:b5:45:5a:97:0a:4e:c7:a0:38:
         9b:6b:c4:03:f6:ee:73:79:ac:fa:b3:90:85:ac:98:3f:0d:52:
         2f:d5:6d:0d:ab:c3:86:4f:0f:9c:c8:08:e1:59:7c:25:dd:c2:
         f8:1d:a4:05:67:a2:d0:7c:20:08:de:59:ef:e4:24:9a:f3:2f:
         77:d6:cf:de:a0:a2:34:0f:46:71:8c:8b:4a:d1:13:23:5d:3b:
         4d:29:9b:34:a4:ed:2e:69:de:9c:3b:ea:b7:b1:29:37:6e:98:
         13:20:59:f5:35:ed:1d:e0:67:f1:86:ec:c2:d8:42:d5:fd:cc:
         f9:4b:e3:7f:46:51:db:85:24:34:ca:22:16:7e:dd:e4:b0:b2:
         db:cd:14:78:a9:ed:af:c0:4f:ce:b7:bb:3a:29:7f:c7:73:1b:
         5b:d0:e8:cf:89:29:d4:09:9b:f8:15:59:38:af:67:3a:09:1f:
         b1:fc:99:51:b8:8c:dd:a6:8b:b2:9d:1c:c0:ec:45:3e:bd:6e:
         a4:0d:aa:30:77:47:e2:ce:e6:06:ba:4c:bc:27:3b:ea:7e:31:
         ac:f1:dd:6e:64:2e:54:2a:cf:df:20:f9:ab:03:1a:0d:86:b5:
         70:c1:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 02:06:24 2026 by rpki-client