Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File:                     TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier:          Etcbgbt7uHzqiNN2p2KX4+s4qTm7Hydbb/148838xIQ=
Subject key identifier:   D1:7C:0D:B9:7D:4E:A7:57:A2:3E:E3:23:EA:DD:5C:24:5F:81:98:83
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number:          01E6
Signing time:             Wed 25 Mar 2026 02:43:54 +0000
Manifest this update:     Wed 25 Mar 2026 02:43:54 +0000
Manifest next update:     Wed 01 Apr 2026 02:43:54 +0000
Files and hashes:         1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: zxmqtit4rQsVGoKiJVfGhkgqftTGvRgc4De3QCtHV+w=)
                          2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: CMpAtUweVr+EqAuGahhTVQ09EFxzxXQiaIMB3NuVn84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: Mar 25 02:43:54 2026 GMT
            Not After : Apr  1 02:43:54 2026 GMT
        Subject: CN=69c34bea-ee47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:75:00:09:04:a7:12:a4:42:e5:c3:84:a3:
                    32:58:11:85:c8:bf:28:ee:99:da:62:b0:01:3b:c7:
                    e9:7a:fd:6c:f0:92:77:dd:b4:90:2f:f0:86:79:d7:
                    f3:26:20:d7:eb:25:5f:01:40:d1:ae:f0:14:59:11:
                    2d:14:b3:76:a9:b6:5d:79:26:16:73:bc:bc:1e:68:
                    44:d9:51:84:49:e9:1f:b5:56:11:a2:10:77:bf:48:
                    3c:94:05:0f:61:e0:2c:34:a5:91:81:40:89:58:1a:
                    8d:ff:76:ec:bb:f7:73:cf:7e:be:f1:96:d6:34:22:
                    8b:35:4c:4d:a2:6b:d7:3c:da:ea:2b:85:61:5a:74:
                    29:5d:1d:2a:56:36:9b:a4:e9:5d:b0:66:bb:07:19:
                    8a:8a:63:55:80:a2:b7:15:18:b4:99:38:f4:d5:4d:
                    0d:f8:d0:08:d8:a4:e6:f5:01:b9:18:36:39:11:28:
                    ce:2d:84:06:dc:3b:86:fe:fb:ee:73:19:90:5e:d2:
                    ab:16:0f:7c:00:eb:ae:45:17:f9:e7:06:03:f7:97:
                    24:2b:36:25:5e:03:33:eb:a6:d5:9b:57:8c:25:dd:
                    e6:a3:d2:f2:03:9d:b5:4f:7a:fa:3d:13:8d:c3:64:
                    cb:ee:bd:7a:6b:9a:8f:19:c3:9a:43:ad:aa:ac:73:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:0D:B9:7D:4E:A7:57:A2:3E:E3:23:EA:DD:5C:24:5F:81:98:83
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:9d:86:94:0a:59:24:cc:31:27:d5:84:6b:0b:bb:17:27:
         0b:73:ac:95:a0:da:07:b3:7a:65:51:a5:50:9c:6c:ea:98:b9:
         00:cd:57:b5:5a:e0:be:07:25:6f:20:59:a0:08:e9:d1:e0:f7:
         b9:c3:31:f4:85:07:76:04:87:ae:a9:80:02:61:4f:bb:28:20:
         9c:f7:f7:d4:31:11:ef:ba:bb:bd:ff:c0:43:21:cd:d4:cf:24:
         87:3d:29:6e:ce:17:77:95:c7:03:3e:ec:64:c4:47:e0:5d:f4:
         28:68:3b:52:dc:6e:7e:d5:60:25:57:71:b2:2c:43:ca:23:29:
         aa:64:62:60:28:8b:d8:ec:dc:21:5c:d3:ae:c8:50:ca:ad:c5:
         f6:eb:ba:de:52:ea:91:e4:c5:91:50:1d:d6:a0:c7:1c:5b:6a:
         ee:3e:fc:50:a5:3a:ea:84:ae:4c:3f:57:4f:7d:b3:7b:7e:ef:
         4e:80:43:aa:ef:13:c6:7c:cc:05:56:a3:da:0c:f8:55:f2:3d:
         c1:d4:96:12:6e:ef:31:2d:05:b6:68:57:40:74:e8:90:a6:20:
         62:92:b4:e7:78:7a:5c:a2:6a:c8:8c:ca:83:f9:1e:7e:d7:e8:
         ae:be:cb:d3:32:8f:1a:bd:0c:43:a5:3a:70:6c:92:d2:e0:0b:
         ff:8a:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:29 2026 by rpki-client