Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
File:                     TGLx4QuIP11XhNY1dA_SMDTOv-I.mft (raw, json)
Hash identifier:          c42hqQG5zKUn6x8NV+Xh4mmzwUJ+NiT49UqzpvSCxUE=
Subject key identifier:   01:CB:04:FF:DA:44:4A:54:2A:A5:8E:2D:15:D2:82:E5:9D:9F:19:80
Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2
Certificate issuer:       /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
Manifest number:          0159
Signing time:             Fri 05 Jun 2026 05:24:17 +0000
Manifest this update:     Fri 05 Jun 2026 05:24:16 +0000
Manifest next update:     Fri 12 Jun 2026 05:24:16 +0000
Files and hashes:         1: TGLx4QuIP11XhNY1dA_SMDTOv-I.crl (hash: LojX6NVz+TqXtsDLLbsD1n6B0oUf7p3idcmsVOOkyMk=)
                          2: A98932365ED311EF9DE3E178C4F9AE02.roa (hash: jPNeK/T4iEnyu07qfGOB5hnamUYxNaGDvce1vSeeQew=)
                          3: DD015FDE639D11EFB9BDBE62C4F9AE02.roa (hash: iQY38hYAmhqJkb6ZCEBZAdClrGW6LNCJUEQ4iP8bQ6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2
        Validity
            Not Before: Jun  5 05:24:16 2026 GMT
            Not After : Jun 12 05:24:16 2026 GMT
        Subject: CN=6a225d80-d5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:28:12:c5:d8:48:02:04:b5:5e:82:ba:8f:
                    d3:c8:d9:a0:9a:83:6b:3b:72:0d:3c:5e:4e:17:f0:
                    13:b8:fb:a5:a0:da:bd:f3:7e:2e:08:31:1c:86:55:
                    33:84:3e:8d:a4:5f:ef:a7:d9:a2:c4:1e:1f:ac:0a:
                    fa:a8:26:0a:9f:8c:19:ef:b6:87:35:61:8c:f6:71:
                    57:92:c5:50:57:8c:a6:de:29:11:2b:71:e8:10:9d:
                    d8:ec:47:1b:a6:65:92:2b:1e:70:54:f4:41:51:8d:
                    e2:3d:50:31:62:14:57:03:b1:09:31:0f:b6:01:10:
                    74:8a:1d:67:10:0e:b6:02:7a:d0:55:76:9a:0c:22:
                    3a:75:04:3b:54:06:ac:24:57:e6:8e:8a:bf:c3:4f:
                    79:24:c6:80:6b:8f:56:09:69:27:20:9c:d9:5c:aa:
                    b5:88:d2:be:50:63:1d:f4:56:5e:17:1a:86:fe:a3:
                    c4:9c:ae:51:f6:90:b0:5e:b0:de:0e:04:55:61:69:
                    df:03:ee:a5:03:43:49:52:74:5f:d2:8b:98:f8:a7:
                    32:9c:27:2e:af:91:1f:93:da:9c:49:b8:36:a0:e5:
                    d7:6c:91:0b:b2:55:eb:54:12:38:ce:f6:f1:e5:58:
                    aa:f7:da:7c:a3:cc:b1:9d:1d:48:80:ef:9f:66:60:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:04:FF:DA:44:4A:54:2A:A5:8E:2D:15:D2:82:E5:9D:9F:19:80
            X509v3 Authority Key Identifier:
                keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4d:7e:e9:d6:26:05:55:06:c0:28:69:b2:f1:11:fb:84:fb:
         9f:b2:0d:fc:33:95:3a:2b:9d:5c:84:d1:1b:3b:a0:77:01:6c:
         f6:77:85:5f:d0:8b:68:ae:f4:cb:dd:ea:65:76:0b:aa:4e:b7:
         bb:b5:17:a1:b6:b4:dd:73:19:37:06:1d:9c:bd:68:e2:ea:94:
         54:7b:ce:17:96:20:a3:ec:47:38:6d:8c:40:28:be:0b:12:9f:
         ba:7f:05:2b:c0:73:21:e5:ac:d6:97:66:85:8c:a9:90:e1:db:
         af:90:4a:29:47:6d:bc:d5:48:e3:d8:4a:51:26:33:b2:6d:33:
         a8:e6:46:3f:0d:5c:71:88:ae:37:bc:d3:14:e6:c0:5e:c0:5e:
         58:c1:7d:55:af:17:d5:22:8a:ee:25:d1:27:c9:6d:b8:2d:b5:
         99:bd:43:88:d4:9a:de:d2:ba:0b:12:56:10:66:58:db:2b:c6:
         d0:2d:e3:85:4e:c0:b8:ba:08:fc:08:f6:d8:5c:28:d6:80:b0:
         e0:72:cd:5b:32:ab:98:84:17:87:94:f7:34:ca:05:ad:f8:da:
         71:9c:f6:51:95:6d:ff:e2:cd:7c:e6:18:3d:00:a8:9d:3f:09:
         5d:8a:9a:83:6d:57:fe:13:f5:50:07:76:67:44:a4:34:ee:b7:
         7a:48:bb:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw
MzRDRUJGRTIwHhcNMjYwNjA1MDUyNDE2WhcNMjYwNjEyMDUyNDE2WjAYMRYwFAYD
VQQDEw02YTIyNWQ4MC1kNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2coEsXYSAIEtV6Cuo/TyNmgmoNrO3INPF5OF/ATuPuloNq9834uCDEchlUz
hD6NpF/vp9mixB4frAr6qCYKn4wZ77aHNWGM9nFXksVQV4ym3ikRK3HoEJ3Y7Ecb
pmWSKx5wVPRBUY3iPVAxYhRXA7EJMQ+2ARB0ih1nEA62AnrQVXaaDCI6dQQ7VAas
JFfmjoq/w095JMaAa49WCWknIJzZXKq1iNK+UGMd9FZeFxqG/qPEnK5R9pCwXrDe
DgRVYWnfA+6lA0NJUnRf0ouY+KcynCcur5Efk9qcSbg2oOXXbJELslXrVBI4zvbx
5Viq99p8o8yxnR1IgO+fZmAqhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHLBP/a
REpUKqWOLRXSguWdnxmAMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF
Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzcyQy82Nzk2RDhFMjVFQ0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAx
MVhoTlkxZEFfU01EVE92LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk01+6dYmBVUGwChpsvER+4T7n7IN/DOVOiudXITRGzugdwFs9neFX9CLaK70
y93qZXYLqk63u7UXoba03XMZNwYdnL1o4uqUVHvOF5Ygo+xHOG2MQCi+CxKfun8F
K8BzIeWs1pdmhYypkOHbr5BKKUdtvNVI49hKUSYzsm0zqOZGPw1ccYiuN7zTFObA
XsBeWMF9Va8X1SKK7iXRJ8ltuC21mb1DiNSa3tK6CxJWEGZY2yvG0C3jhU7AuLoI
/Aj22Fwo1oCw4HLNWzKrmIQXh5T3NMoFrfjacZz2UZVt/+LNfOYYPQConT8JXYqa
g21X/hP1UAd2Z0SkNO63eki7Mw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:06 2026 by rpki-client