Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File:                     tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier:          asQX0EEGty4TbILxvdJNv4NN+RjmLqSALVP6NLDX+bM=
Subject key identifier:   1C:EB:FA:46:08:AD:56:37:50:A4:75:C8:DB:59:DA:E6:6C:5C:1A:E5
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer:       /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial:       0540
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number:          052E
Signing time:             Sat 04 Apr 2026 23:19:52 +0000
Manifest this update:     Sat 04 Apr 2026 23:19:51 +0000
Manifest next update:     Sat 11 Apr 2026 23:19:51 +0000
Files and hashes:         1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: lqbLRZ/jzyHNHaeC8wUqjNuis7fD1PY/8ixKZAG2lao=)
                          2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=)
                          3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
                          rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
        Validity
            Not Before: Apr  4 23:19:51 2026 GMT
            Not After : Apr 11 23:19:51 2026 GMT
        Subject: CN=69d19c98-4215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:9d:87:8c:e0:d5:a7:be:14:29:14:f9:7c:
                    23:2f:c7:8c:b0:58:35:13:d0:5f:c4:6b:e5:5d:dd:
                    7c:c4:78:13:a8:80:d6:3a:87:75:27:05:72:8d:e3:
                    84:14:1c:30:ce:23:f0:e8:ba:27:bb:14:a0:67:47:
                    37:9d:c9:17:70:90:b0:71:c0:06:a5:7c:2f:cf:05:
                    d3:59:5f:31:de:6c:d9:db:af:0b:2b:5a:1f:a1:3d:
                    e4:fc:b8:97:34:89:ee:ce:2d:76:c1:8b:43:35:af:
                    88:1c:9a:ac:cb:dc:29:cc:d7:75:c5:75:4c:2f:18:
                    29:05:53:e4:5d:c1:f8:67:a2:06:41:8b:0e:71:39:
                    53:e8:db:7e:77:b3:19:0f:d9:8e:56:9a:21:cc:1f:
                    57:f5:92:25:da:f6:a6:c0:fb:8e:c9:94:7b:3d:7a:
                    6a:1b:d3:e9:f9:af:87:83:bd:d7:fa:68:eb:69:c9:
                    e2:f9:7b:65:a7:a9:92:80:d5:f4:6b:ef:65:bc:80:
                    3f:47:7c:a5:f4:c2:ed:44:e7:1d:91:3f:2b:ea:55:
                    68:16:26:2a:13:ed:ac:dc:28:c4:14:24:f8:41:10:
                    8f:76:b3:04:6b:72:d2:14:c2:f0:ac:96:6b:39:ca:
                    73:38:07:bc:3f:da:ff:7f:be:7d:48:b2:bd:53:5f:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:FA:46:08:AD:56:37:50:A4:75:C8:DB:59:DA:E6:6C:5C:1A:E5
            X509v3 Authority Key Identifier:
                keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5f:be:d1:fb:19:9b:ab:ff:f0:e8:11:2d:ee:a3:77:10:8f:
         8d:95:7a:36:43:0d:c1:2e:8c:3e:18:fc:0c:09:a2:93:fc:1f:
         56:29:27:d9:ad:f1:66:d0:e4:90:03:86:b5:33:7d:1d:53:17:
         c9:b3:a2:01:76:6d:f5:0e:35:3c:35:b4:0b:49:af:ae:c5:b1:
         c0:13:3a:2d:36:19:57:ec:eb:0a:bf:d0:69:31:81:0b:00:9b:
         a4:e8:bf:39:35:fc:d4:c7:c8:1f:05:cc:bc:fa:c2:d1:37:0e:
         5a:20:f4:09:81:94:c9:82:1f:b9:ff:36:ac:c0:97:1b:7d:0e:
         c9:1f:8c:bc:ae:7b:22:89:f5:98:0a:cf:69:ef:47:69:8b:a7:
         73:a2:e8:02:40:3f:99:03:d0:46:e0:e0:01:69:0d:3e:a9:ae:
         86:e9:33:78:74:21:34:1c:7b:11:80:79:cc:5b:d3:cd:e6:42:
         64:29:c9:3a:25:fc:57:ea:e1:cd:cf:ed:4c:e5:0b:4d:fb:42:
         8f:7a:d0:c5:d0:99:41:64:58:32:d5:00:16:6f:7f:af:c8:b2:
         69:43:7b:9e:78:4c:c8:d2:68:76:a5:b2:e1:87:ed:96:bc:bd:
         8d:3c:e5:94:e7:bf:74:02:f4:cf:f4:81:cb:ca:1e:9e:c1:27:
         51:02:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:44 2026 by rpki-client