Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
File:                     TnyavOb4vNI_YG8QjoZwzZXLDwY.mft (raw, json)
Hash identifier:          yUv5emidqwbysYfVHR2v9MZLL0r2x3xd+At9fTs9K3g=
Subject key identifier:   F7:43:38:66:6F:F5:1D:E3:E7:53:C0:BA:34:DF:22:94:91:A8:90:6F
Authority key identifier: 4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06
Certificate issuer:       /CN=A9130C18/serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
Manifest number:          01FF
Signing time:             Wed 13 May 2026 03:12:34 +0000
Manifest this update:     Wed 13 May 2026 03:12:33 +0000
Manifest next update:     Wed 20 May 2026 03:12:33 +0000
Files and hashes:         1: TnyavOb4vNI_YG8QjoZwzZXLDwY.crl (hash: 4ozEMd3LRusc4NoXEmYxcPVuhLiuqHjhCID+Y+Aglzo=)
                          2: 248A4FFE478F11EEABD3353BC4F9AE02.roa (hash: CMpAtUweVr+EqAuGahhTVQ09EFxzxXQiaIMB3NuVn84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl
                          rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130C18, serialNumber=4E7C9ABCE6F8BCD23F606F108E8670CD95CB0F06
        Validity
            Not Before: May 13 03:12:33 2026 GMT
            Not After : May 20 03:12:33 2026 GMT
        Subject: CN=6a03ec21-5c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:23:ef:25:f8:73:20:14:c3:43:02:bb:18:
                    f0:68:bf:dc:2d:61:6c:bb:d5:ff:70:fd:f9:76:d9:
                    63:71:27:0d:84:7a:4b:05:4b:ce:ae:07:75:0f:66:
                    23:6d:25:06:c9:f8:7d:2f:26:ed:08:a3:42:83:a6:
                    c5:25:a4:16:1d:06:1f:0a:ee:0a:ab:52:75:9a:33:
                    b5:5d:b3:dd:72:99:f2:2e:9c:c2:89:f8:40:a7:6e:
                    c4:99:6d:99:93:90:ca:cf:11:05:26:0e:fe:6b:e1:
                    fa:04:e6:d0:20:bd:d3:b8:c7:dc:29:f6:76:65:88:
                    c2:af:9f:e0:ba:fc:3c:85:39:c7:32:c7:bb:b1:0c:
                    80:7a:05:f6:51:83:94:a2:84:a3:5d:bf:d5:99:85:
                    73:f3:b6:90:74:93:7d:0b:65:86:68:35:8b:40:3c:
                    81:85:47:70:b0:b5:46:16:61:4b:b5:aa:82:eb:a0:
                    16:bc:0a:e5:ae:38:b8:36:57:d0:fc:75:e7:54:85:
                    54:f4:30:81:2f:85:f3:88:cc:54:45:05:20:bb:40:
                    cf:c0:c8:64:fe:bf:70:00:f3:a8:ef:af:db:b8:cc:
                    27:f7:82:fc:1b:82:81:ec:aa:9f:f0:f4:69:da:e6:
                    b8:98:a9:bd:c6:44:b7:9e:84:a4:92:37:a7:ac:d6:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:43:38:66:6F:F5:1D:E3:E7:53:C0:BA:34:DF:22:94:91:A8:90:6F
            X509v3 Authority Key Identifier:
                keyid:4E:7C:9A:BC:E6:F8:BC:D2:3F:60:6F:10:8E:86:70:CD:95:CB:0F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnyavOb4vNI_YG8QjoZwzZXLDwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130C18/1E24EB92461311EE91FD706DC4F9AE02/TnyavOb4vNI_YG8QjoZwzZXLDwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e7:2d:09:59:4f:cc:f7:f0:cd:58:0f:65:57:89:10:a0:29:
         02:8a:41:f5:9c:69:fa:bd:b3:01:03:1a:c5:4e:87:27:ca:8a:
         bd:34:12:2c:98:96:6b:8e:5d:ad:21:e8:85:5c:c6:73:9f:17:
         bd:cd:c8:0c:2c:86:58:9c:b5:36:05:f3:5a:ac:e9:fb:0a:6e:
         bc:04:73:11:25:91:0e:9f:7a:68:61:22:3d:76:52:41:a8:41:
         41:e4:04:c1:98:fe:99:a4:2b:89:05:36:3e:61:ae:4a:1d:27:
         4b:67:91:98:7c:36:d1:b3:aa:ec:dd:1d:73:54:b6:10:54:89:
         80:54:93:c2:92:75:7a:8e:3f:0b:95:1c:02:2a:d6:62:d1:aa:
         60:ba:35:b5:6c:e1:29:7e:2a:81:97:dd:e3:fd:3b:f7:1a:30:
         59:bd:77:90:bd:c5:97:45:97:c7:39:1e:1d:a5:a7:c0:75:bc:
         6c:b7:6d:93:48:2c:48:28:fb:c0:d1:06:6d:89:ae:25:ba:7e:
         b9:2a:2c:08:4f:dc:35:75:5b:0e:12:7e:1e:91:8b:f0:a3:9f:
         90:c6:06:db:5b:d1:c6:af:9f:73:5f:4f:0f:68:32:17:4f:7e:
         b9:79:99:6f:d9:12:19:5b:f2:9e:c7:c4:48:98:f9:82:11:c9:
         5f:08:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:38 2026 by rpki-client