Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
File:                     TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft (raw, json)
Hash identifier:          CImyxi7kzOXrF0kqQx7SW29NQIAz9Br+TaBNrjneZ8k=
Subject key identifier:   51:71:6A:FB:F3:BB:48:2C:E0:A2:51:9F:D3:A7:C4:21:43:7E:27:6C
Authority key identifier: 4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC
Certificate issuer:       /CN=A91CE813/serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
Certificate serial:       0C20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
Manifest number:          0C18
Signing time:             Wed 20 May 2026 18:48:57 +0000
Manifest this update:     Wed 20 May 2026 18:48:57 +0000
Manifest next update:     Wed 27 May 2026 18:48:57 +0000
Files and hashes:         1: TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl (hash: sDtbq/TelVOMk9goQ0SoiEu1k7xOysmnTm64IKiZbwI=)
                          2: CE560240310D11EAA04D402CC4F9AE02.roa (hash: PljJjosvkfc9yMA5ivrXI87b8hWIYGh5tqzmbfpi0f8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl
                          rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3104 (0xc20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE813, serialNumber=4CA277227B61C5CDDF0B5BFFC930760D062643FC
        Validity
            Not Before: May 20 18:48:57 2026 GMT
            Not After : May 27 18:48:57 2026 GMT
        Subject: CN=6a0e0219-d406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:4d:74:33:dd:4f:b3:34:df:88:9d:e5:88:
                    22:0b:85:72:d4:58:00:80:44:7e:95:13:bb:6b:8a:
                    a7:d2:35:b0:45:be:c6:98:93:0f:3a:0a:9c:0e:9e:
                    f9:40:54:d6:d3:3c:72:58:b5:fb:b0:42:23:6a:a1:
                    74:30:f8:93:1a:44:d0:9d:4a:d5:cf:95:2e:71:2f:
                    78:13:53:a0:b2:3b:f8:28:17:8e:46:43:85:1e:02:
                    56:94:fa:84:99:c2:54:16:fd:d0:e4:53:90:bf:16:
                    73:23:7b:cd:07:c2:9a:60:de:5c:9e:2e:56:14:58:
                    bf:a3:55:da:e0:ce:8e:05:95:90:5e:92:34:92:85:
                    a4:54:f7:54:f5:20:25:e8:a8:56:36:cf:44:7f:77:
                    1a:34:bb:2e:23:04:af:bd:78:59:40:ff:fa:99:02:
                    67:31:c0:c2:bb:85:52:49:4b:c5:13:50:2b:7e:de:
                    a3:24:f0:7d:b2:51:73:0c:80:da:7f:83:ab:4f:7d:
                    fa:88:02:ac:10:10:fc:7a:8c:45:f2:fb:3b:ea:fd:
                    6f:ef:5b:c0:11:75:fd:b7:9d:d4:90:f4:26:3a:f7:
                    52:a7:6e:cb:d0:8c:be:d0:01:5a:a5:dc:c2:d2:9b:
                    ac:3e:30:b9:78:bd:59:8f:3a:c4:4e:a4:64:fa:43:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:71:6A:FB:F3:BB:48:2C:E0:A2:51:9F:D3:A7:C4:21:43:7E:27:6C
            X509v3 Authority Key Identifier:
                keyid:4C:A2:77:22:7B:61:C5:CD:DF:0B:5B:FF:C9:30:76:0D:06:26:43:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE813/15018DA6310C11EAB8C8FE28C4F9AE02/TKJ3Inthxc3fC1v_yTB2DQYmQ_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:51:93:2d:39:cf:92:f9:ae:3b:33:ab:d2:98:f0:1d:4e:
         65:58:c9:3d:f3:af:5a:34:26:67:1f:ba:fc:9f:bb:30:51:ad:
         f1:63:cf:b9:df:dd:47:15:4b:7f:c3:bc:3e:67:72:e9:3e:47:
         3b:c3:d1:02:4d:b3:84:0a:0b:1b:a3:00:7d:ee:37:9b:7b:7b:
         84:57:64:da:7f:9d:31:5e:5e:d3:19:64:8e:5a:4a:1c:92:8e:
         0d:ed:72:fe:42:66:e9:e2:6e:bb:88:99:e4:95:ce:71:2f:60:
         71:37:1c:8b:ea:56:2a:cf:8a:c7:81:fa:26:63:04:83:27:8a:
         f3:b2:a6:58:c9:92:a4:91:d8:4c:27:7b:b1:be:cd:23:eb:42:
         a2:23:e2:18:da:fa:85:f0:3a:e9:e5:76:95:a1:12:00:6b:99:
         76:0a:16:e8:9f:8a:17:4e:aa:03:12:67:77:ef:b6:fe:db:97:
         24:1c:9a:dc:6a:6f:e3:cc:2c:3e:ba:f9:65:08:db:95:3c:d6:
         ea:4d:28:02:65:7a:91:44:df:ad:37:82:87:bd:b6:5e:ec:81:
         fa:23:27:96:75:31:82:90:ac:ba:8f:23:f5:c3:80:45:18:c0:
         91:37:7d:4f:f0:f4:f8:9c:71:80:78:30:4b:47:42:c4:6b:71:
         5d:f5:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:44 2026 by rpki-client