Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
File:                     tgQSzpgJwQxn3eq7oOM1462k_hA.mft (raw, json)
Hash identifier:          aKaC1nt2BT0YHuRmRMofQEXUCEIG1/IStSCH455CoA0=
Subject key identifier:   31:8F:CC:BC:E8:C2:33:B2:C3:29:9F:62:4E:C2:79:EF:2B:2A:62:C1
Authority key identifier: B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10
Certificate issuer:       /CN=A91BF306/serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
Manifest number:          01CD
Signing time:             Sun 05 Apr 2026 03:11:00 +0000
Manifest this update:     Sun 05 Apr 2026 03:10:59 +0000
Manifest next update:     Sun 12 Apr 2026 03:10:59 +0000
Files and hashes:         1: tgQSzpgJwQxn3eq7oOM1462k_hA.crl (hash: oTGdpkwOCCICm3R/lNKd0sf0G/+2odQ4M/uJfKfJNMA=)
                          2: 3CED465E8E0811EE8450D961C4F9AE02.roa (hash: lItS9IhoLUedBvAXuWgl/Rf34kmfafMEcysHbipPcpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl
                          rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF306, serialNumber=B60412CE9809C10C67DDEABBA0E335E3ADA4FE10
        Validity
            Not Before: Apr  5 03:10:59 2026 GMT
            Not After : Apr 12 03:10:59 2026 GMT
        Subject: CN=69d1d2c4-bc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:74:58:41:4e:0c:4e:80:48:a0:fb:e8:7e:
                    28:c1:70:97:05:5f:1d:ee:a8:7a:94:fe:20:c1:a1:
                    0d:e3:ca:48:94:68:0a:91:aa:ac:6c:9c:13:e6:ab:
                    bd:6d:10:7c:23:97:69:8d:88:3d:3f:47:49:8d:7a:
                    35:68:b6:81:1e:9d:ad:ff:99:1e:30:8d:03:d7:6a:
                    51:05:3d:20:4e:df:c0:a4:bc:cc:43:68:71:27:f0:
                    69:ea:cf:5b:f7:0c:ce:6b:4a:c5:8e:e4:bf:9e:c5:
                    06:ab:f1:59:90:e5:38:a5:de:14:b8:13:91:04:a4:
                    5c:20:a8:e7:de:c6:27:c4:56:50:cc:90:cb:19:9c:
                    24:2e:93:6b:23:38:e3:9c:00:41:f4:43:d6:44:a4:
                    01:45:86:7b:36:37:00:63:40:9f:20:ec:c6:9f:95:
                    75:c7:34:e5:a7:33:bf:09:0c:de:33:4d:ef:9d:a4:
                    95:87:81:d3:e8:fd:e6:0d:c8:31:1e:51:e0:8c:5c:
                    78:1d:ff:94:b2:7b:4f:00:57:44:ea:ac:c0:c4:41:
                    62:81:0e:5e:33:fc:b6:c2:ae:05:18:e1:b1:cb:54:
                    2b:4b:a5:6c:37:01:6c:bc:6a:2a:32:fa:e8:18:4a:
                    e0:c8:9a:f0:a5:8e:34:e2:0d:e8:ef:99:86:c1:96:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8F:CC:BC:E8:C2:33:B2:C3:29:9F:62:4E:C2:79:EF:2B:2A:62:C1
            X509v3 Authority Key Identifier:
                keyid:B6:04:12:CE:98:09:C1:0C:67:DD:EA:BB:A0:E3:35:E3:AD:A4:FE:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgQSzpgJwQxn3eq7oOM1462k_hA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF306/1717920E716B11EEB1673277C4F9AE02/tgQSzpgJwQxn3eq7oOM1462k_hA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fb:d5:fc:26:91:f9:c2:de:57:f6:f0:5f:14:ee:12:60:5c:
         b8:85:31:08:c6:e1:d4:a8:d1:23:8d:e7:47:a6:52:3b:88:09:
         de:71:fb:9c:fb:a6:ed:79:56:21:32:3b:55:3a:e2:e7:d7:a4:
         79:82:47:eb:5c:cf:0f:f9:b2:31:8a:86:22:8f:ee:90:1f:ae:
         8a:06:f2:2a:3b:4d:32:22:58:1f:62:57:a8:83:d4:ea:f4:82:
         ac:51:ff:dc:f7:6b:d5:f2:0d:f3:55:82:cf:a4:0f:1d:cd:2e:
         a8:8e:cf:cb:35:22:8c:53:0c:c2:2b:dd:5d:0e:49:c9:98:2c:
         36:a1:93:c5:2e:96:8c:25:39:8f:a5:1f:f0:15:b6:bd:25:12:
         cb:78:52:a1:c6:f5:5b:e2:2d:a1:20:dd:24:e0:11:88:dd:ad:
         8a:2e:aa:49:e5:69:cb:d8:7e:bd:7d:6e:6d:fb:76:09:ec:6f:
         60:e9:6a:ea:ab:38:d1:e3:cf:bf:30:59:73:cf:7b:91:f7:cc:
         3c:dc:50:2d:62:77:94:ea:41:0c:2d:2a:0e:d0:e8:34:10:45:
         f5:25:7f:bd:1d:fa:95:aa:83:f6:7a:01:55:ef:1b:0d:87:e5:
         78:0f:82:e9:fb:50:88:92:eb:69:8f:0a:07:ea:6f:ce:d7:8e:
         c2:f2:31:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYzMDYxMTAvBgNVBAUTKEI2MDQxMkNFOTgwOUMxMEM2N0RERUFCQkEwRTMzNUUz
QURBNEZFMTAwHhcNMjYwNDA1MDMxMDU5WhcNMjYwNDEyMDMxMDU5WjAYMRYwFAYD
VQQDEw02OWQxZDJjNC1iYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2JF0WEFODE6ASKD76H4owXCXBV8d7qh6lP4gwaEN48pIlGgKkaqsbJwT5qu9
bRB8I5dpjYg9P0dJjXo1aLaBHp2t/5keMI0D12pRBT0gTt/ApLzMQ2hxJ/Bp6s9b
9wzOa0rFjuS/nsUGq/FZkOU4pd4UuBORBKRcIKjn3sYnxFZQzJDLGZwkLpNrIzjj
nABB9EPWRKQBRYZ7NjcAY0CfIOzGn5V1xzTlpzO/CQzeM03vnaSVh4HT6P3mDcgx
HlHgjFx4Hf+UsntPAFdE6qzAxEFigQ5eM/y2wq4FGOGxy1QrS6VsNwFsvGoqMvro
GErgyJrwpY404g3o75mGwZaauwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGPzLzo
wjOywymfYk7Cee8rKmLBMB8GA1UdIwQYMBaAFLYEEs6YCcEMZ93qu6DjNeOtpP4Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMwNi8xNzE3OTIwRTcx
NkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndReG4zZXE3b09NMTQ2Mmtf
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnUVN6cGdKd1F4bjNlcTdvT00xNDYya19oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjMwNi8xNzE3OTIwRTcxNkIxMUVFQjE2NzMyNzdDNEY5QUUwMi90Z1FTenBnSndR
eG4zZXE3b09NMTQ2MmtfaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADPvV/CaR+cLeV/bwXxTuEmBcuIUxCMbh1KjRI43nR6ZSO4gJ3nH7nPum7XlW
ITI7VTri59ekeYJH61zPD/myMYqGIo/ukB+uigbyKjtNMiJYH2JXqIPU6vSCrFH/
3Pdr1fIN81WCz6QPHc0uqI7PyzUijFMMwivdXQ5JyZgsNqGTxS6WjCU5j6Uf8BW2
vSUSy3hSocb1W+ItoSDdJOARiN2tii6qSeVpy9h+vX1ubft2CexvYOlq6qs40ePP
vzBZc897kffMPNxQLWJ3lOpBDC0qDtDoNBBF9SV/vR36laqD9noBVe8bDYfleA+C
6ftQiJLraY8KB+pvzteOwvIxgA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:38 2026 by rpki-client