Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File:                     tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier:          qUBogprMYptM5yIZImGVgLXEh9XuNE2sVRoh2pt/nX8=
Subject key identifier:   A2:F5:ED:C7:CD:34:69:43:11:A9:2B:08:A7:AD:43:4E:B8:E0:25:1B
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer:       /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number:          03CF
Signing time:             Thu 21 May 2026 00:42:14 +0000
Manifest this update:     Thu 21 May 2026 00:42:14 +0000
Manifest next update:     Thu 28 May 2026 00:42:14 +0000
Files and hashes:         1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: Zt3KIrtnG+GGDDf7AS/KiFvQKPU31W0vDJLtL2xZltM=)
                          2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: YbO7++p8lkcUGyYQcIo4KYfwl6fPis53qsCTIDFujfI=)
                          3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: 0LpQA+c9etZpakFJ96pF9ViQXg3PreBC8rMXqPButV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
        Validity
            Not Before: May 21 00:42:14 2026 GMT
            Not After : May 28 00:42:14 2026 GMT
        Subject: CN=6a0e54e6-5ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:13:05:9d:b5:28:7a:09:e6:f5:d8:93:f2:
                    69:23:a3:a9:8d:e3:57:e7:c8:22:22:6a:e8:aa:5f:
                    9b:96:ed:b0:8c:06:6e:e1:1d:a5:43:75:41:26:8a:
                    6e:ed:2d:76:d4:06:9f:86:8a:a2:85:fa:9a:94:38:
                    36:31:96:0e:9c:ba:9b:2f:06:d4:57:18:72:4d:a9:
                    68:23:01:5a:bd:20:fe:b8:3c:28:bc:80:34:bb:00:
                    8a:02:cf:22:dd:9c:fb:81:4f:7e:ac:73:d0:92:87:
                    84:ca:f8:3b:7e:69:54:aa:71:f5:24:5b:c1:a1:6d:
                    29:5e:30:55:0c:ff:77:50:3b:a4:4f:ec:ee:93:0c:
                    54:d3:04:c7:2c:bf:9a:85:f4:fc:c5:02:46:bd:a2:
                    10:9d:20:37:ad:d5:3d:1f:9c:ea:9b:bd:dc:0e:07:
                    68:c6:c5:bf:68:5e:67:76:15:57:0b:e4:7a:58:0d:
                    c7:0e:63:eb:c1:cc:44:f4:ac:81:9b:b5:44:4e:69:
                    02:97:a4:d5:27:c7:b5:0e:dd:92:fe:67:6d:3c:ce:
                    36:2c:94:38:9f:87:52:7d:7d:28:f2:ce:2a:e7:8b:
                    3b:29:79:1c:81:5b:2d:a5:fe:ce:53:47:61:a6:fd:
                    d1:69:c2:88:05:9a:ad:41:c2:ad:00:e7:6a:d8:17:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F5:ED:C7:CD:34:69:43:11:A9:2B:08:A7:AD:43:4E:B8:E0:25:1B
            X509v3 Authority Key Identifier:
                keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:be:50:18:da:8a:36:d1:02:fa:6f:14:6b:0b:6e:c1:40:1b:
         08:7a:e2:9f:f4:bb:56:a9:58:2d:cd:41:92:eb:59:12:d0:d2:
         3a:dc:95:00:b1:1a:6b:68:bb:87:96:56:4d:64:25:3f:c7:d6:
         e1:e5:22:ae:13:51:76:e7:be:77:8f:0c:58:fc:15:07:02:15:
         64:e8:6a:89:26:88:b7:90:ed:2c:8c:13:53:f0:a3:ff:96:70:
         b0:e9:75:a2:c3:56:ae:d4:ab:fe:0d:fb:bf:ef:b8:41:83:8f:
         8a:63:02:1c:99:ec:19:4b:d2:4c:9c:7d:da:6d:4d:ce:66:07:
         6c:2a:87:f1:90:02:40:00:65:52:5b:d6:5a:3b:d6:8a:2c:bc:
         b3:1b:6b:88:e6:38:33:29:3a:ed:5e:22:47:a1:cb:7b:45:5d:
         cf:38:5a:bd:6b:62:12:85:48:95:47:fe:a2:bc:97:58:c2:3f:
         2f:b6:3e:a2:67:9e:81:ab:b9:0a:f6:71:0b:71:e7:d4:1e:4c:
         7b:0c:62:e6:25:71:21:12:f3:aa:e9:93:b2:52:b7:e1:bc:d1:
         5f:44:32:f1:15:3a:60:23:09:ad:98:a7:12:8a:d1:06:99:c6:
         e4:dc:77:f0:9a:cd:31:f3:c1:af:00:26:ad:62:88:2d:a6:f3:
         3c:2e:94:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:19 2026 by rpki-client