Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
File:                     TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json)
Hash identifier:          iT/xJuSQYWY3tfh/AKHFqeQD8WFvzCo9rnnvxEENimM=
Subject key identifier:   FF:30:D4:4E:A9:85:4A:C2:FB:B2:DD:9A:20:4B:57:70:72:F9:FF:20
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Certificate issuer:       /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
Manifest number:          0213
Signing time:             Sun 05 Apr 2026 02:26:23 +0000
Manifest this update:     Sun 05 Apr 2026 02:26:22 +0000
Manifest next update:     Sun 12 Apr 2026 02:26:22 +0000
Files and hashes:         1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: QYprlJDOpgLZ5Y5AAfsrfS/fS0edS4TkpXQ48saca4I=)
                          2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
                          rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
        Validity
            Not Before: Apr  5 02:26:22 2026 GMT
            Not After : Apr 12 02:26:22 2026 GMT
        Subject: CN=69d1c84f-926d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:0d:00:50:94:6a:b3:a3:e5:c7:55:f3:39:
                    44:8b:d3:4c:aa:0f:61:19:d2:55:9a:37:34:92:1c:
                    0b:82:15:5e:d1:fd:9a:01:8d:f7:43:86:35:4a:5e:
                    f5:c1:35:d9:43:35:b4:9d:8b:4c:78:5e:97:58:e4:
                    6d:4e:bb:ec:ac:98:58:31:b3:ba:78:56:24:8b:17:
                    28:7c:2f:ef:07:d3:29:f5:42:35:f0:ea:65:ab:ff:
                    ce:b8:e6:41:6d:aa:ac:2d:c8:a6:f4:30:44:33:3d:
                    fe:be:c0:a7:4d:0c:e9:89:78:b7:bf:f2:a1:77:97:
                    12:97:93:3d:4c:b6:99:05:39:96:00:3a:7f:15:62:
                    19:30:cd:7a:dd:a4:9d:9c:1f:8f:58:56:27:32:e2:
                    31:9b:90:1e:d0:fb:eb:b0:fd:ce:57:8d:6d:1f:78:
                    64:a2:54:17:e6:35:58:6f:66:ca:f6:5c:7d:ef:09:
                    d0:09:87:cb:35:5d:01:1c:ba:99:08:c0:f3:94:7c:
                    b4:90:4e:6d:ad:25:e2:0c:b9:49:1d:4e:d5:a7:38:
                    57:00:b5:9b:81:0d:cf:d1:fe:39:ab:97:4f:e7:2e:
                    3c:3d:c2:22:b3:f9:6c:f6:43:d0:4b:db:03:22:df:
                    20:f0:b1:af:78:55:3e:0c:48:60:cd:f9:ef:a2:49:
                    50:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:30:D4:4E:A9:85:4A:C2:FB:B2:DD:9A:20:4B:57:70:72:F9:FF:20
            X509v3 Authority Key Identifier:
                keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:63:74:02:86:38:d6:b1:b3:09:26:45:e8:0b:0b:27:05:8d:
         e7:bf:bb:9e:e5:d2:30:99:95:4e:fd:4f:da:b5:56:23:51:a6:
         0a:a7:0a:2d:07:fe:19:e4:19:9b:0f:9e:46:42:38:2b:dc:bb:
         5f:80:3f:a8:57:52:b6:19:e4:b1:78:6e:7c:5f:1b:83:d9:38:
         7b:68:6d:07:3d:27:c0:ff:b2:3a:6d:0a:0e:15:65:55:80:60:
         f3:87:bb:02:09:51:4f:40:cf:2f:41:4d:9c:69:d6:d9:03:e5:
         ea:5b:55:9c:54:74:69:74:d8:e9:f1:51:a5:03:e8:fc:b3:bf:
         e4:8b:b5:e4:01:52:42:5c:81:25:cf:17:ec:cf:39:58:13:e3:
         8f:93:cd:a9:c5:b1:76:57:9b:2f:e2:e5:32:8e:5d:41:f3:24:
         fc:8c:fc:9c:9b:c9:cd:cc:cd:b7:e0:e9:88:65:18:4d:65:ba:
         8b:08:6d:db:d6:48:c9:14:85:38:18:95:87:54:34:2e:9a:a0:
         df:3c:e3:46:9d:3b:fd:70:82:65:6f:e3:de:5f:61:32:04:32:
         65:81:0a:3b:a3:25:33:8f:47:83:19:ec:55:2b:5a:a0:d5:54:
         9b:28:af:0d:16:00:d6:cd:ac:b9:72:ca:11:4d:8d:75:20:6a:
         1b:0b:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:02 2026 by rpki-client