Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File:                     TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier:          dbnLX/vwcUQuN1KinrnycRh5idLw6kp0y0GbKMCnOu0=
Subject key identifier:   10:14:A5:30:98:AD:74:F6:AC:DD:DF:1C:42:09:13:67:58:76:D6:B1
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number:          0625
Signing time:             Thu 04 Jun 2026 22:52:59 +0000
Manifest this update:     Thu 04 Jun 2026 22:52:58 +0000
Manifest next update:     Thu 11 Jun 2026 22:52:58 +0000
Files and hashes:         1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: bhIR72Uq7nQxEXVzoXw+Mcd3fPNYQWbMnkoYYMkcc8k=)
                          2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: waHlPrSIXU1DTG8JgX28cOXJ6bVasMgkvdeHgZb1AOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
                          rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 22:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Jun  4 22:52:58 2026 GMT
            Not After : Jun 11 22:52:58 2026 GMT
        Subject: CN=6a2201cb-57fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:b7:41:0e:39:b1:a1:a9:dc:42:04:fb:d8:
                    97:8f:cb:93:d6:3c:30:1a:9a:86:e7:23:7a:c3:b6:
                    c6:36:84:41:16:87:3b:14:bb:4f:d6:4d:58:6e:dd:
                    c2:d8:1e:d8:29:23:53:9b:41:04:c9:dd:1a:18:f8:
                    11:b7:e1:e0:9a:f6:70:6b:3c:65:07:dd:d4:84:ca:
                    b7:d5:39:bb:ac:ec:0a:28:1c:5f:84:be:69:29:39:
                    a2:76:14:d1:0c:3f:50:20:fc:dc:40:7f:e5:db:87:
                    81:93:bb:39:4b:4a:7b:2c:10:d9:b1:e4:50:5d:63:
                    bd:96:97:e8:26:83:bd:f4:64:ca:81:ac:c2:1e:cf:
                    1b:28:41:39:30:e7:6e:0f:94:dd:72:fb:ca:f4:a2:
                    2b:68:2f:73:79:1a:1b:d4:78:3a:82:02:63:b7:db:
                    41:b9:c7:89:e4:0a:63:39:6a:b2:98:47:fc:ed:1c:
                    5c:52:ff:ab:11:45:65:f7:c4:23:4f:20:f8:c4:67:
                    a8:af:a9:64:9c:74:cc:3c:a6:ed:44:81:3f:35:9a:
                    26:dc:8e:92:70:87:a6:e2:8b:74:38:cb:ce:49:5b:
                    54:a5:d7:99:9d:69:33:b0:27:48:57:bf:9b:65:00:
                    29:33:af:86:46:06:55:62:2f:1a:76:e0:3f:c5:9b:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:14:A5:30:98:AD:74:F6:AC:DD:DF:1C:42:09:13:67:58:76:D6:B1
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:1e:81:ef:22:1a:6c:2a:4d:4d:0f:3a:75:4f:36:12:ed:
         00:b2:76:f6:bb:2a:dd:4a:99:d2:16:52:84:af:f7:fd:01:21:
         0f:f6:a6:ee:00:25:0a:5f:16:77:e3:08:a5:8f:e1:8a:0b:de:
         8f:45:e2:94:9e:94:b6:55:65:04:67:27:fb:fb:7f:4d:92:cb:
         29:3e:af:12:f9:d3:f0:b1:8a:dc:6e:80:6e:96:c1:bd:19:2e:
         72:70:e6:fe:da:95:9b:bc:f7:62:ee:4e:2b:2d:bd:a9:0d:28:
         61:8e:ad:d5:88:32:88:d5:dc:50:18:69:97:04:2a:10:f4:02:
         5f:22:d0:dc:94:ae:f1:ae:f2:5c:cf:65:e0:82:15:36:ed:16:
         0e:05:eb:dc:42:a2:f7:3f:3e:60:0f:dc:9f:1d:70:c2:46:3f:
         55:3e:83:48:f4:aa:f4:93:57:70:94:13:d1:ab:03:da:8c:7c:
         7f:0a:44:cd:c8:e6:4f:2c:54:2b:7d:34:44:51:dd:dd:47:2a:
         fc:a2:36:03:f7:f6:70:09:e2:19:72:3f:a4:77:34:23:4f:8e:
         97:eb:13:f6:8b:73:1f:92:c3:d5:5a:81:2a:09:0b:88:28:52:
         26:bd:50:8c:dd:bf:a2:2a:dd:f3:f0:8c:ff:69:e0:d6:01:76:
         67:c4:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:30:29 2026 by rpki-client