Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
File:                     TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft (raw, json)
Hash identifier:          aYpXJgiR6M1tpiV5s1F7cv6M6SqzGpT7GcqEOkC50cg=
Subject key identifier:   A5:B4:84:54:56:45:0C:C7:1D:FA:69:0B:D7:8D:C3:38:BC:77:F0:AA
Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D
Certificate issuer:       /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
Manifest number:          017D
Signing time:             Mon 01 Jun 2026 05:22:28 +0000
Manifest this update:     Mon 01 Jun 2026 05:22:27 +0000
Manifest next update:     Mon 08 Jun 2026 05:22:27 +0000
Files and hashes:         1: TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl (hash: ueh+mYD07ktPsaGAhERa5ODinfp72z7AS9q7XHqxlkM=)
                          2: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (hash: l3+VnONZP7m8JwaUiP43A2WyQeN+GHf1Ta3Z96yt358=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D
        Validity
            Not Before: Jun  1 05:22:27 2026 GMT
            Not After : Jun  8 05:22:27 2026 GMT
        Subject: CN=6a1d1714-1c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:be:dd:30:de:bd:5b:1d:da:40:0a:f6:60:
                    20:99:57:41:7d:15:be:20:82:b2:ed:16:6f:dc:f9:
                    c4:76:16:92:a8:68:e4:88:7d:10:bf:66:6e:79:5d:
                    c1:14:41:fc:5d:ce:49:85:7d:5b:fa:39:b2:9e:e0:
                    b0:89:4c:34:a2:22:aa:95:8a:9a:c3:bb:42:48:11:
                    1d:b3:9d:4c:6f:55:92:92:18:3f:ed:f9:8f:d9:1d:
                    e7:a3:c1:8d:b3:87:ec:cd:5a:76:a0:05:b9:8a:8b:
                    4c:63:ca:9b:49:8c:bc:e3:37:e6:91:09:d2:68:62:
                    77:31:a2:37:e3:20:f8:c3:5c:e6:01:32:60:39:20:
                    8e:8c:20:7e:04:95:b7:e7:de:ab:9a:8f:b1:ea:5f:
                    a1:83:ea:a7:e2:64:11:c2:66:c1:a6:15:7c:d1:d5:
                    41:6c:40:63:12:26:7b:71:1d:01:ca:32:1d:48:6a:
                    dd:ac:28:91:71:48:74:2e:5e:6a:ac:f2:f9:e3:1e:
                    d2:ff:62:cb:15:05:37:a6:97:33:c9:93:2c:90:c4:
                    9b:65:0a:74:03:9e:0c:2d:95:77:8c:c2:93:a8:bb:
                    9f:11:45:76:dd:99:b6:df:d0:86:38:d5:b4:71:ed:
                    c3:2f:d1:52:f4:94:6e:c7:9f:c9:21:4a:a1:60:a4:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B4:84:54:56:45:0C:C7:1D:FA:69:0B:D7:8D:C3:38:BC:77:F0:AA
            X509v3 Authority Key Identifier:
                keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:8a:86:f3:ed:ae:b2:26:38:d1:b1:95:d6:41:8a:37:26:
         8b:5b:3f:5a:17:38:fd:0b:90:a8:f8:48:0d:6d:4c:7d:6f:5f:
         56:b6:a2:fe:21:e0:9c:46:cb:98:94:3d:8e:8a:bc:9a:be:67:
         48:35:96:57:90:a5:2c:5a:7d:66:8b:df:69:44:50:b4:85:ac:
         1f:23:ea:f1:0d:c8:8a:9b:96:bc:cb:eb:fa:52:4a:19:48:33:
         d4:dc:26:7c:ac:7c:90:4f:d1:7d:70:b5:56:2a:d3:d1:80:d1:
         ec:2e:62:c4:3b:8e:53:b4:23:83:72:f8:16:8d:24:f2:8c:d6:
         b9:4d:7b:75:00:63:df:47:59:90:a1:a8:a7:4f:91:8a:b6:b4:
         8f:16:46:3b:99:8c:ab:ff:40:fa:21:c8:3c:f0:d3:65:ba:5a:
         d3:46:ee:42:a0:3b:e0:49:d4:b8:6f:aa:db:84:52:3c:c0:91:
         09:3d:49:a0:4a:19:e6:c2:5e:ea:7c:26:75:e5:9c:b3:7d:e3:
         9c:46:5a:d3:b8:17:e4:b6:4c:62:56:6c:65:a6:84:fd:a7:39:
         c5:0e:0f:20:d9:ae:2c:23:7f:52:76:78:e6:c3:dc:84:64:c7:
         00:68:27:3e:3f:1b:68:7c:cc:93:44:88:f1:40:e2:f5:c6:63:
         6f:24:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:36 2026 by rpki-client