Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
File:                     TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft (raw, json)
Hash identifier:          LaL64nBE+ex6w0aiojhIt/NDRUz/mIXwUy8Sw+W1VsU=
Subject key identifier:   79:86:A2:E2:88:E8:9F:60:A0:99:72:16:73:C6:1C:0B:1B:55:53:CE
Authority key identifier: 4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23
Certificate issuer:       /CN=A915203C/serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
Certificate serial:       0ACB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
Manifest number:          0ABE
Signing time:             Tue 12 May 2026 19:31:26 +0000
Manifest this update:     Tue 12 May 2026 19:31:25 +0000
Manifest next update:     Tue 19 May 2026 19:31:25 +0000
Files and hashes:         1: TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl (hash: AaAr9IqEEDUcUEmrqaTjjYgJCavEwjKaqBHzjtpRWDA=)
                          2: 4A7F0102747811EAB3C2634EC4F9AE02.roa (hash: wN/p9bhtqtpFWg4aKbj5Ar4CaOQGWg/xpy0UF+hPVkM=)
                          3: 039A4408614511F0B95C3C38C4F9AE02.roa (hash: ui+G6/PG/zN3KIP4zZsPKAuoPMyNoDO6ihyKtKXhFfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl
                          rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763 (0xacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915203C, serialNumber=4E4460CF63B24B7C35B9EDAEC97E63A72C4BDE23
        Validity
            Not Before: May 12 19:31:25 2026 GMT
            Not After : May 19 19:31:25 2026 GMT
        Subject: CN=6a03800e-11c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:f2:01:b4:3a:5e:df:2e:7e:7e:43:1c:5e:
                    da:96:92:b0:e4:a6:7a:12:7d:ad:81:91:cf:6a:50:
                    d7:f0:ce:c2:43:58:4b:71:9b:ff:46:17:1d:db:b5:
                    07:68:e7:4e:24:c9:44:bb:1d:9b:2e:6d:73:4e:6a:
                    f4:12:1f:62:0c:bb:8a:08:79:65:32:62:10:45:1e:
                    0e:bb:67:1a:01:ab:0e:26:25:91:b3:ff:c7:3d:88:
                    3d:de:ca:9d:c8:69:ed:86:e6:28:92:58:89:f8:82:
                    5a:65:20:b8:0d:83:ad:bf:d6:33:4b:85:79:e6:5c:
                    f1:ff:77:5e:c1:e1:aa:72:95:f9:da:9e:b2:13:0e:
                    a0:7e:9b:73:6a:ba:cf:2a:a2:2e:50:ee:29:97:fd:
                    b9:ae:e7:0d:37:96:f4:7e:16:47:bf:b0:d4:35:ee:
                    f8:0c:e2:fd:e6:6a:01:92:35:07:7a:c2:29:a9:3b:
                    5d:f1:b5:99:27:1a:44:b1:4b:4c:2b:ba:7f:3e:f6:
                    a8:2d:c9:2c:87:5c:21:19:cd:55:bb:ae:28:a5:ec:
                    3e:e1:0d:7c:e7:59:f8:19:13:9c:4a:e5:0a:aa:42:
                    7b:c2:6e:20:e6:77:e0:e9:85:73:1c:80:c0:09:be:
                    2f:7c:95:3c:d2:0e:35:26:50:96:12:d7:70:1c:5b:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:A2:E2:88:E8:9F:60:A0:99:72:16:73:C6:1C:0B:1B:55:53:CE
            X509v3 Authority Key Identifier:
                keyid:4E:44:60:CF:63:B2:4B:7C:35:B9:ED:AE:C9:7E:63:A7:2C:4B:DE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRgz2OyS3w1ue2uyX5jpyxL3iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915203C/46C88C82747711EA83654F4DC4F9AE02/TkRgz2OyS3w1ue2uyX5jpyxL3iM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ca:d5:f0:0b:ab:04:9d:ff:51:ea:bd:cc:0e:58:8d:20:31:
         9b:ff:c6:30:e6:d5:ab:2d:52:62:2d:50:66:d7:83:8a:73:69:
         fa:a9:80:a6:bf:64:71:39:e8:40:23:b6:25:8b:ab:0c:15:51:
         3e:12:29:e9:fc:36:bf:f7:3a:d3:4e:7f:6e:5e:2b:82:a6:06:
         fe:21:0f:f4:a5:1f:d7:90:9f:6a:03:be:ec:7e:82:1d:7c:b2:
         1b:9f:db:f4:40:9b:e7:33:8b:89:ba:28:b2:c2:85:d4:2d:28:
         58:fa:4a:7d:4b:9c:29:07:e1:29:f4:9c:81:bd:7d:50:17:52:
         03:ce:a5:30:1d:7c:06:bc:83:d2:de:42:bf:a6:96:5f:b5:79:
         5e:98:0b:d8:b9:2b:f1:99:cb:39:a5:5a:6d:ef:f8:36:30:43:
         3c:c2:68:cd:bb:8a:9b:07:f6:03:33:3c:01:e4:da:95:32:c2:
         3f:75:e8:d1:39:c8:18:95:88:6c:e4:2a:75:0b:4f:68:99:cf:
         25:53:99:07:3e:e7:ed:73:14:15:f3:2d:11:f9:3c:8a:33:87:
         20:3b:d3:57:ed:0e:65:c5:33:a3:04:97:b9:fe:5e:51:08:e1:
         d6:e9:97:35:b8:27:2b:22:59:81:d0:10:8a:99:d8:cb:59:da:
         2b:a6:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:09 2026 by rpki-client