Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File:                     Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier:          9Mg1WrbJuLQLxASHeOHwYbpIM3EO0moCazk09lBBNZ0=
Subject key identifier:   47:91:11:A3:CE:39:E4:4E:D7:21:C9:F8:ED:8F:64:3D:B6:0A:3A:32
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer:       /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial:       08B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number:          08A9
Signing time:             Tue 12 May 2026 20:34:51 +0000
Manifest this update:     Tue 12 May 2026 20:34:50 +0000
Manifest next update:     Tue 19 May 2026 20:34:50 +0000
Files and hashes:         1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: Xqc71IHJz4WwqJAklyLgSPJpPqUrJ4vBtY5bbSsz2Ko=)
                          2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: updD38wtAdj5dijUmVbc8ur6Q26JQGPvJNSN6xjVgUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
                          rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
        Validity
            Not Before: May 12 20:34:50 2026 GMT
            Not After : May 19 20:34:50 2026 GMT
        Subject: CN=6a038eeb-84d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:56:4e:00:65:ba:dd:ee:f7:79:63:39:ec:
                    88:5f:0a:e3:75:a5:d9:3f:20:9b:96:8f:ce:ac:85:
                    f3:46:58:3a:e6:ed:e9:3b:7f:af:8c:67:5d:00:f0:
                    23:f9:fa:0e:f9:a2:5c:9f:a6:ab:9f:f7:de:f4:b6:
                    da:dc:a3:ce:24:18:c7:42:49:fa:f3:60:76:f6:2a:
                    1d:f0:c4:e7:04:55:22:88:c0:bf:23:47:95:0b:f6:
                    53:90:01:e7:21:18:77:b9:eb:99:6e:ad:8b:a9:75:
                    58:a0:ec:d8:ea:24:a7:2d:38:19:16:07:07:59:77:
                    03:cf:a7:84:9c:04:6f:2b:df:6f:d1:4b:0e:7e:ef:
                    6a:74:9f:84:f6:14:87:24:95:9a:b1:c9:93:7a:2b:
                    9b:c4:4c:8a:e3:57:31:bb:70:17:1a:2f:34:eb:5c:
                    2c:f6:6f:7e:11:fb:17:91:cd:e4:de:df:9c:cc:81:
                    16:16:c4:2a:df:cb:35:78:b9:43:ea:2e:c5:a8:09:
                    3f:22:ea:5b:30:3c:e7:f6:e5:af:0a:77:be:ee:b5:
                    7c:6a:c3:b3:f5:d7:b0:c8:4f:14:8e:85:0b:a8:85:
                    bd:1b:57:65:64:2b:78:dd:43:55:24:5a:f4:85:c9:
                    1a:69:38:45:5c:73:7f:05:46:3b:54:47:1c:79:17:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:11:A3:CE:39:E4:4E:D7:21:C9:F8:ED:8F:64:3D:B6:0A:3A:32
            X509v3 Authority Key Identifier:
                keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:ab:df:b4:b1:38:f7:31:98:43:40:7c:10:d2:9d:d0:d3:
         ab:f7:38:46:c9:18:ca:b1:c1:70:f0:8a:e4:95:92:3c:30:bb:
         c7:74:fa:92:8f:35:70:d5:84:b3:7e:cc:e1:37:b5:93:aa:5d:
         d6:78:2d:e0:09:ae:3b:6a:dd:3b:17:e5:89:07:49:9f:50:f5:
         60:42:0d:cc:26:1a:58:4e:73:70:49:54:05:66:87:e8:90:ac:
         11:2f:dc:e5:5a:f0:c6:96:ef:cf:19:7c:b1:3b:b8:a9:6e:08:
         f2:e6:02:1b:c7:19:3f:11:70:83:59:69:bf:51:4f:ca:ec:f0:
         4f:19:ef:9e:da:58:cf:f1:59:ed:47:75:57:61:7f:c0:ee:aa:
         b6:2b:b0:28:f8:04:18:a7:6d:87:49:96:d3:2f:b7:1b:5a:f9:
         f1:b4:3d:2f:be:ff:e8:ce:ca:08:7d:90:02:5c:32:c3:0f:d7:
         df:2e:22:ca:f0:11:fb:f1:7c:30:78:f6:d4:fa:cd:42:d5:f0:
         de:ad:c3:7b:5f:95:d5:8f:94:01:23:81:be:b6:b2:70:06:b6:
         08:eb:c1:2d:da:8e:02:6c:68:8b:5e:3d:9c:97:49:cc:30:36:
         05:a3:83:62:88:4a:e0:52:1e:b7:9b:80:86:13:17:0f:36:a2:
         47:ba:26:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE
QjYxODRDQzkwHhcNMjYwNTEyMjAzNDUwWhcNMjYwNTE5MjAzNDUwWjAYMRYwFAYD
VQQDEw02YTAzOGVlYi04NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjs5WTgBlut3u93ljOeyIXwrjdaXZPyCblo/OrIXzRlg65u3pO3+vjGddAPAj
+foO+aJcn6arn/fe9Lba3KPOJBjHQkn682B29iod8MTnBFUiiMC/I0eVC/ZTkAHn
IRh3ueuZbq2LqXVYoOzY6iSnLTgZFgcHWXcDz6eEnARvK99v0UsOfu9qdJ+E9hSH
JJWascmTeiubxEyK41cxu3AXGi8061ws9m9+EfsXkc3k3t+czIEWFsQq38s1eLlD
6i7FqAk/IupbMDzn9uWvCne+7rV8asOz9dewyE8UjoULqIW9G1dlZCt43UNVJFr0
hckaaThFXHN/BUY7VEcceRe6CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeREaPO
OeRO1yHJ+O2PZD22CjoyMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2
MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh
N1Z1bjNNdldfVmpiWVlUTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXCur37SxOPcxmENAfBDSndDTq/c4RskYyrHBcPCK5JWSPDC7x3T6ko81cNWE
s37M4Te1k6pd1ngt4AmuO2rdOxfliQdJn1D1YEINzCYaWE5zcElUBWaH6JCsES/c
5Vrwxpbvzxl8sTu4qW4I8uYCG8cZPxFwg1lpv1FPyuzwTxnvntpYz/FZ7Ud1V2F/
wO6qtiuwKPgEGKdth0mW0y+3G1r58bQ9L77/6M7KCH2QAlwyww/X3y4iyvAR+/F8
MHj21PrNQtXw3q3De1+V1Y+UASOBvraycAa2COvBLdqOAmxoi149nJdJzDA2BaOD
YohK4FIet5uAhhMXDzaiR7omgA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:52:52 2026 by rpki-client