Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
File:                     tkP-swMnQhSPOvnDU5M41VSTcig.mft (raw, json)
Hash identifier:          LfZ2sxoTisJObmdp7XZaDXb3njroR53UZtfxY7akxWY=
Subject key identifier:   4A:50:6E:24:F6:B6:EB:32:95:D5:85:C7:15:B6:49:A1:31:CB:46:20
Authority key identifier: B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28
Certificate issuer:       /CN=A91CD0DE/serialNumber=B643FEB3032742148F3AF9C3539338D554937228
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
Manifest number:          49
Signing time:             Tue 03 Mar 2026 07:56:10 +0000
Manifest this update:     Tue 03 Mar 2026 07:56:09 +0000
Manifest next update:     Tue 10 Mar 2026 07:56:09 +0000
Files and hashes:         1: tkP-swMnQhSPOvnDU5M41VSTcig.crl (hash: /a1toZLElsUyXVQlZzY/jDEi3Wq64//0zehK/kW7FMM=)
                          2: 341BBBECA99411F093BBAA15C4F9AE02.roa (hash: PpvqloufX06LkcG9zYWZ5Pcx+1uUm6NtfRlAU1EzgwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl
                          rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD0DE, serialNumber=B643FEB3032742148F3AF9C3539338D554937228
        Validity
            Not Before: Mar  3 07:56:09 2026 GMT
            Not After : Mar 10 07:56:09 2026 GMT
        Subject: CN=69a6941a-978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:fa:6c:18:a8:50:2f:1f:9e:e5:5f:2e:cf:
                    47:13:9c:95:1a:2f:12:3b:01:2b:c8:f4:13:86:39:
                    7b:6e:f2:cc:6c:46:3e:6f:14:58:f9:ba:cc:25:13:
                    1c:b6:37:7b:79:89:d9:73:be:e6:61:52:8e:f7:42:
                    af:74:00:b7:3f:4c:e5:41:5a:51:4e:5d:d8:6a:a1:
                    56:a7:aa:4b:88:64:22:85:2f:19:ae:32:1e:c5:ba:
                    19:ed:07:32:e3:67:af:f5:cd:78:d4:94:2b:f6:a8:
                    24:56:00:8f:fb:30:68:ee:59:03:17:4f:ac:0f:66:
                    c8:59:ea:ff:fb:dc:87:20:81:e9:2e:7f:3f:bb:90:
                    d8:55:df:b3:35:86:59:8a:e4:b2:b5:5e:27:7c:08:
                    82:48:71:f1:11:f9:9e:75:1a:2e:7f:9e:12:ca:ee:
                    e2:96:90:15:47:28:f8:dd:40:37:16:d0:32:52:e4:
                    ee:01:a3:aa:f2:4a:89:b7:c3:92:5b:bd:35:b5:d5:
                    aa:f7:49:60:1f:93:14:2d:af:f2:ea:6f:7c:34:b3:
                    f9:08:ec:43:bd:c6:b7:95:f4:75:74:01:a2:11:f0:
                    33:5a:90:78:02:79:72:18:b8:6d:cf:b3:aa:3a:e7:
                    63:67:1a:36:19:f0:47:b7:4b:b6:49:35:c2:bb:3e:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:6E:24:F6:B6:EB:32:95:D5:85:C7:15:B6:49:A1:31:CB:46:20
            X509v3 Authority Key Identifier:
                keyid:B6:43:FE:B3:03:27:42:14:8F:3A:F9:C3:53:93:38:D5:54:93:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tkP-swMnQhSPOvnDU5M41VSTcig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/4F769D58A98F11F0B1FA5066C4F9AE02/tkP-swMnQhSPOvnDU5M41VSTcig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:63:b7:78:3f:78:7e:62:4f:4d:84:2d:0d:51:12:70:01:4b:
         c2:47:3e:41:d2:5d:81:7b:c5:e0:36:5d:c2:a5:b6:3a:14:e9:
         1d:ad:a6:60:cf:1b:c5:a3:22:17:e5:98:04:b4:33:fe:a3:f2:
         17:7f:94:1e:34:23:20:ff:d1:9b:92:0f:93:e6:7f:6d:89:5e:
         5f:d8:a2:82:a5:4d:3d:ff:dd:68:bf:f2:bf:52:e5:c4:e3:4e:
         0a:1f:73:75:06:af:27:bd:2a:fa:c2:89:9e:18:15:98:5e:5a:
         c4:58:57:9a:6d:25:1b:a6:44:9a:07:fd:60:e5:5f:a6:bc:9d:
         d2:62:c9:2e:9e:57:ad:90:a7:8c:26:82:d9:ae:b3:73:04:6a:
         a9:d8:81:e1:eb:f8:9b:8c:c2:f8:8f:99:a8:1c:6b:8a:3c:65:
         9f:34:b8:fa:c2:7b:53:22:06:73:77:d0:ee:a4:f7:e3:32:f9:
         f2:25:5c:51:81:dd:94:62:16:eb:8c:0c:25:6b:56:53:4b:73:
         d9:9c:08:a7:2a:4b:af:80:ae:76:84:7c:61:23:68:e0:09:a2:
         7a:30:25:b9:35:28:d9:60:8d:75:b1:c8:8e:07:60:4b:da:9b:
         56:cd:77:37:c5:6b:41:70:2c:b2:ae:26:32:2d:27:99:25:a5:
         b7:c4:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:49 2026 by rpki-client