Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
File:                     TbOy41mbZG6fMK90pYxmePrx0rc.mft (raw, json)
Hash identifier:          E4x6cqMCFpgdTarkJFAhct5KAP7tr1T1/PhUI7M8c1k=
Subject key identifier:   40:0A:7B:4A:08:29:DC:FF:47:E3:A9:EF:7C:93:BE:75:35:CB:A7:C6
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Certificate issuer:       /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
Manifest number:          0176
Signing time:             Wed 13 May 2026 04:47:51 +0000
Manifest this update:     Wed 13 May 2026 04:47:50 +0000
Manifest next update:     Wed 20 May 2026 04:47:50 +0000
Files and hashes:         1: TbOy41mbZG6fMK90pYxmePrx0rc.crl (hash: 60E5RSxnlp9lhOogRug/g4j6MmfHnQBWJWUlLSFO69Y=)
                          2: 206DB948214F11EFAB245D49C4F9AE02.roa (hash: TNEM4VNwQk6CJq6g7Tw93nqe1s3+SXsaXip/J0usQiA=)
                          3: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (hash: vlR6KwXR8TL2mf6RJa/2FvIbd+B9HhzeWeJ+vJVsVYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
        Validity
            Not Before: May 13 04:47:50 2026 GMT
            Not After : May 20 04:47:50 2026 GMT
        Subject: CN=6a040277-f28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:ae:49:8e:f2:c1:65:64:20:4c:7a:17:7f:
                    97:b6:fd:4a:96:4e:c4:47:f4:fc:c1:45:dc:77:b4:
                    8c:11:66:90:f4:83:a8:8a:e3:11:02:c8:45:a4:8c:
                    b3:e4:09:43:c8:2d:c8:89:96:83:0b:c3:80:8a:d1:
                    ea:74:29:53:02:74:79:54:58:17:c3:9b:50:c2:41:
                    9a:9f:cc:59:3a:92:f8:27:06:48:53:69:99:16:b7:
                    8c:b6:d6:47:51:42:5e:10:1e:8a:dd:48:68:5a:0b:
                    66:61:3f:d8:ee:38:a2:ba:aa:7f:17:0d:b4:b3:e9:
                    4e:4e:7c:38:86:0f:72:72:d6:65:56:49:11:eb:02:
                    be:6a:e6:97:9b:60:c3:a9:30:25:b7:8f:77:56:27:
                    9b:3b:d9:b7:7f:97:fa:27:9f:ba:e9:19:08:86:2e:
                    88:d7:2f:b6:05:79:d0:aa:ab:5d:69:1a:c3:12:dc:
                    36:ef:39:6b:1d:29:46:01:5c:ef:b6:9e:66:62:dc:
                    da:d6:c1:40:97:0b:8b:96:19:c1:24:05:82:24:b3:
                    9c:a7:0c:f1:48:18:6d:0a:26:cb:a9:ae:bd:c0:01:
                    9f:c8:87:0b:91:df:d9:0d:2a:e4:af:0b:49:64:fb:
                    5e:4e:9d:43:f1:e4:79:e0:27:9b:62:f5:c4:d1:71:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0A:7B:4A:08:29:DC:FF:47:E3:A9:EF:7C:93:BE:75:35:CB:A7:C6
            X509v3 Authority Key Identifier:
                keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:b4:d2:5a:5b:0d:c0:26:41:09:42:93:cf:99:49:cc:75:
         ec:47:5f:9e:ed:f4:c9:97:3e:d6:bf:42:3d:85:04:55:aa:6c:
         fc:27:fd:76:4d:0c:7b:e1:ef:fe:5d:c7:76:ee:12:ff:ab:92:
         41:b0:3c:a5:3b:93:2b:e8:7d:48:97:dd:7d:1d:38:ab:83:40:
         a3:ad:33:2b:42:53:9d:4d:07:ea:46:ba:97:4b:11:9e:8b:1b:
         3a:4f:16:8c:58:75:aa:6a:06:0c:86:36:3e:b4:34:0d:b3:60:
         57:ee:c4:93:77:a7:f5:a7:d2:98:5a:a2:28:b0:e8:d1:9d:a9:
         ae:ad:a8:36:09:8e:28:e8:72:12:0a:c9:55:01:77:03:d6:f4:
         ee:22:cc:1c:62:1d:10:98:d3:c1:5e:a2:c6:8f:e4:cc:32:b8:
         79:a0:52:cb:0d:53:ed:2e:b1:ef:22:26:5a:77:29:80:c7:26:
         c1:81:8e:63:af:41:7e:85:1b:fe:67:31:0a:ab:26:3d:7a:a7:
         e5:d9:a8:13:62:26:fe:93:7b:62:2c:94:af:c4:cc:d2:29:52:
         30:fb:9a:72:4c:b4:60:b7:cb:e1:d3:44:1c:6a:e5:71:3b:dc:
         90:ea:85:73:6e:79:42:85:3f:ac:bd:5e:4f:85:f0:39:e0:5d:
         9c:8b:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:17 2026 by rpki-client