Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
File:                     tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json)
Hash identifier:          EorIzlENf8zGDseZWrfNF249mgLq8kykT7CTFisx8Jg=
Subject key identifier:   1F:83:97:38:5A:CA:BC:0C:64:72:A8:70:1F:06:93:77:B9:EA:6B:D4
Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
Certificate issuer:       /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
Manifest number:          354D
Signing time:             Tue 12 May 2026 14:55:10 +0000
Manifest this update:     Tue 12 May 2026 14:55:09 +0000
Manifest next update:     Tue 19 May 2026 14:55:09 +0000
Files and hashes:         1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: J3ur1e0WfQlXjRvneVUdpSnKvjMOHUU3Q8+GzaFny6k=)
                          2: 2DB78476C69411F09B705765C4F9AE02.roa (hash: A0rm2mFuiHBcSkCFk/ARgcp9MkAC3nii71By+7KQSoI=)
                          3: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: FrGnmySaGsCSvoxQxMX26gnOmUrTLRX+/DoGY28CoDQ=)
                          4: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: o7npQDRvWWvMoopmjwnmlgxJ/rmN73YKTsYgHTer5PA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
                          rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
        Validity
            Not Before: May 12 14:55:09 2026 GMT
            Not After : May 19 14:55:09 2026 GMT
        Subject: CN=6a033f4e-f10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:29:05:2a:87:a4:39:ce:e6:1d:08:d6:62:
                    07:23:59:c7:61:1d:56:c4:3f:00:e4:83:75:56:7f:
                    3d:d0:29:60:c3:55:c5:b9:fe:02:63:b0:c3:39:22:
                    c7:bc:77:ee:d7:26:18:a1:e8:61:9c:ff:4c:03:2b:
                    03:09:41:cd:56:cd:c5:d1:f5:63:2b:ad:21:73:bd:
                    67:85:27:75:a4:47:18:86:02:83:f5:f7:56:9c:9b:
                    4d:f4:e0:dc:36:20:4a:83:f7:b2:4f:ea:11:30:15:
                    e4:5d:b4:a0:bf:a9:c5:1a:98:f2:a7:1d:08:4a:87:
                    eb:56:70:31:25:47:95:28:3a:d9:29:a7:94:d3:87:
                    ff:5c:1b:32:cf:2f:08:85:7b:67:db:bb:fa:ee:42:
                    8c:b6:8b:a3:e2:4f:bb:65:ac:a2:91:64:a4:03:ee:
                    0a:4e:3a:76:60:b7:25:b4:bd:85:5c:7c:e8:04:1f:
                    59:44:e6:2e:da:f0:5c:5d:04:65:dd:66:f0:31:36:
                    0b:a6:fb:bc:1e:7c:6e:a5:e5:d4:95:40:48:78:ee:
                    53:5a:7a:77:2b:93:ba:22:0a:d1:92:13:0f:dd:46:
                    25:80:f4:27:46:c1:6d:da:50:d6:63:4e:f1:d1:ee:
                    17:47:bc:ce:17:50:4b:8b:f2:7d:0c:4c:be:0d:db:
                    00:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:83:97:38:5A:CA:BC:0C:64:72:A8:70:1F:06:93:77:B9:EA:6B:D4
            X509v3 Authority Key Identifier:
                keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:09:ea:54:02:dc:22:65:f6:61:40:de:a3:9b:7a:d6:7c:
         7a:0d:d2:5c:e1:3f:62:ad:ac:a1:22:00:d2:00:a2:9b:09:c8:
         e7:85:69:a7:27:6c:da:41:47:d7:56:d6:df:b4:95:4a:f6:96:
         07:13:86:c3:00:d2:3a:f8:81:91:f6:46:9b:a7:1b:5b:c9:53:
         e9:cd:7d:a2:9b:20:20:55:00:48:0b:e6:69:e2:f4:29:c0:ad:
         40:f7:96:d7:4d:7b:6b:5a:ec:d9:70:6c:28:a1:a7:31:d3:38:
         ec:b7:f0:5e:a5:66:88:b2:47:f6:e5:94:f2:05:a5:48:34:c9:
         43:d4:9a:d6:cf:41:8f:7a:4a:28:8c:a2:ef:1a:9a:93:40:a4:
         2a:4e:71:e1:bb:9f:59:cc:b2:a4:3a:54:de:82:e5:ff:a4:fc:
         ca:a0:92:78:b8:ae:18:f4:b1:22:42:b2:1a:8b:77:05:6f:85:
         13:42:6f:7b:bc:93:1f:91:af:fc:6e:82:61:4f:91:08:a9:76:
         9c:10:cb:55:af:94:6b:d4:ad:92:fc:43:dd:a3:88:da:52:92:
         9a:b8:c6:69:ee:d7:1f:80:98:9a:a0:26:7f:de:9f:fe:b6:15:
         0f:94:8a:6c:bd:eb:17:ae:56:60:14:83:d1:32:eb:d3:d6:28:
         31:31:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:43 2026 by rpki-client