Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File:                     TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier:          17eBYDV0iaM8hoYYzbof0I4vKJVb5IIMeNVp19EylnM=
Subject key identifier:   46:E5:D4:CC:17:9D:3D:DC:D8:C4:40:89:82:28:2C:EE:F2:89:7D:3A
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer:       /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number:          55
Signing time:             Tue 23 Jun 2026 08:29:20 +0000
Manifest this update:     Tue 23 Jun 2026 08:29:20 +0000
Manifest next update:     Tue 30 Jun 2026 08:29:20 +0000
Files and hashes:         1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: 2SWRMgjLBZm7/6dhJ5hDCM8d6ClULG42UZhMW9ipN14=)
                          2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
        Validity
            Not Before: Jun 23 08:29:20 2026 GMT
            Not After : Jun 30 08:29:20 2026 GMT
        Subject: CN=6a3a43e0-e75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:4c:17:ef:0b:c1:9c:b1:14:ed:50:28:7f:
                    8a:3a:ad:ad:b2:65:b1:8f:17:ce:cc:f0:38:f1:33:
                    39:20:fa:b1:93:a2:20:60:82:9e:f1:e0:9a:65:b0:
                    8d:05:6c:5e:43:cb:ee:4d:d2:08:29:78:94:bc:6e:
                    36:52:4f:35:b2:55:91:81:2b:e6:7e:25:49:51:fe:
                    b8:b0:5f:41:16:13:8e:25:2f:83:1a:35:f8:6b:67:
                    b1:2e:5a:e8:3a:0d:e1:cd:5e:99:64:21:60:9e:6c:
                    79:32:1c:13:fc:24:15:4b:46:95:35:56:d1:46:c0:
                    e5:20:a3:de:2c:d0:17:3b:26:8b:bb:57:54:7d:dd:
                    69:11:7c:21:39:be:15:92:86:34:78:5a:f7:3c:1f:
                    58:e7:6c:64:4a:56:8b:a1:60:d0:22:48:ff:2c:9a:
                    dd:2e:5b:31:cc:1e:bb:b3:0f:9b:19:14:02:63:60:
                    f0:9f:d3:3e:ed:37:44:bb:ca:11:16:3d:89:f4:61:
                    79:12:55:7c:d1:8d:b2:c0:e0:0c:34:44:4f:19:71:
                    dd:67:7b:28:67:5e:b5:a7:fe:d8:51:58:df:7f:ba:
                    a9:d0:1f:01:6c:60:4c:68:d4:e9:e1:4d:1c:cc:a3:
                    c4:c6:f8:06:00:d1:81:4a:6a:43:7e:ab:5f:cd:5c:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E5:D4:CC:17:9D:3D:DC:D8:C4:40:89:82:28:2C:EE:F2:89:7D:3A
            X509v3 Authority Key Identifier:
                keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:18:d2:05:7c:3d:b5:b0:24:e0:9e:1c:5a:c1:c8:1b:91:15:
         ae:4c:b4:62:e5:0a:e3:7a:b6:c1:ca:1f:f7:48:b6:cb:ca:a1:
         73:34:62:6a:48:e1:6f:e0:c2:a5:55:db:81:d0:20:1d:80:65:
         fb:57:1a:8c:ff:49:69:60:30:b9:22:68:80:e9:28:57:a0:5e:
         fe:e9:9a:1b:1a:a7:79:d9:e8:5a:b7:32:f5:f9:bd:14:78:dd:
         ff:06:ab:f9:f2:3f:26:24:f7:7c:52:f0:08:64:f3:2d:6b:0d:
         f4:31:31:98:8c:27:5f:bf:57:ee:0c:e3:ec:cf:f4:eb:33:8f:
         65:33:c3:ba:82:fa:c0:f2:bb:db:8c:80:fb:ce:81:4d:31:a5:
         b2:11:f9:64:c0:dd:43:c3:38:ef:a3:cd:81:7e:b8:c8:8f:34:
         a6:c8:8f:70:6c:33:30:92:92:24:ca:42:40:90:a1:4d:5c:ab:
         48:2d:c0:a2:c5:48:b1:a9:28:70:83:e5:59:48:f2:fe:01:32:
         67:91:71:b4:4d:3e:88:f1:c1:18:6c:27:af:00:f5:ce:61:30:
         0e:66:b3:69:f1:9d:c9:f6:4e:58:b0:6c:cc:0b:c5:ca:c2:fb:
         7e:9b:be:80:2f:bc:d0:3c:c0:f0:ff:bf:b7:56:c1:8a:80:00:
         5b:31:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:06:43 2026 by rpki-client