Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
File:                     tji5qb9-MI8fus87TDpEVx8p33c.mft (raw, json)
Hash identifier:          ngoqVradeWVUpgwHu9ULzqFfd+uB1f+7kR8pR1f0mjc=
Subject key identifier:   78:71:97:DC:72:9B:C6:B7:68:2F:BD:4D:61:AE:6C:1C:6C:41:9A:B6
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Certificate issuer:       /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial:       097D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
Manifest number:          0972
Signing time:             Tue 12 May 2026 20:08:01 +0000
Manifest this update:     Tue 12 May 2026 20:08:01 +0000
Manifest next update:     Tue 19 May 2026 20:08:01 +0000
Files and hashes:         1: tji5qb9-MI8fus87TDpEVx8p33c.crl (hash: DjNNPuxQX29h2Sa5r/8Tp8u13cbL21sigrV4irS3tgI=)
                          2: 5B5592F07B0711ED9D595969C4F9AE02.roa (hash: Bv7FCEy1DuhQYtEp2itDznv/9h0ww6ROsc4RqG1d0DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
                          rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
        Validity
            Not Before: May 12 20:08:01 2026 GMT
            Not After : May 19 20:08:01 2026 GMT
        Subject: CN=6a0388a1-7476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fb:98:e4:3b:bb:ee:9e:7c:f4:a8:41:5d:50:
                    64:42:14:b3:c6:5c:e5:d8:36:e9:5c:d0:09:92:0b:
                    68:3e:db:f8:54:3a:f7:f5:47:49:fc:92:99:ce:79:
                    44:81:10:6a:a5:c7:06:d0:b2:1a:84:b4:d1:ce:4b:
                    84:12:bc:fc:f2:9d:f9:a1:2a:71:cf:a3:ca:de:a5:
                    08:6f:cb:cf:ee:bf:b1:98:c8:9d:19:f1:cf:1a:ed:
                    80:dc:91:dc:ae:3b:d2:8e:5a:c2:97:c7:61:29:66:
                    01:25:10:74:b2:00:6c:00:40:63:8d:8f:d9:c3:cf:
                    0d:4a:35:ca:3b:5e:68:83:2a:0a:58:f2:59:a3:4e:
                    e2:be:64:51:f9:cf:a7:d3:3e:0c:b6:6b:c1:90:68:
                    17:49:d0:28:3f:30:15:ca:8e:97:0f:a6:a5:35:03:
                    14:1d:70:21:3c:57:9f:9c:61:74:92:c8:d1:23:a9:
                    7f:1c:29:99:c4:f1:e6:89:58:5e:3f:86:3d:b5:27:
                    ff:26:1b:84:d0:6e:43:b1:c2:1c:41:6e:b5:f8:70:
                    ce:d6:f1:97:01:68:7d:4e:bc:0f:19:9e:bd:63:00:
                    1f:68:3c:0b:98:6b:e5:db:a5:06:b5:fa:84:5a:6b:
                    2d:4a:70:d1:0f:1b:c9:0e:d8:a7:62:25:82:e0:f3:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:71:97:DC:72:9B:C6:B7:68:2F:BD:4D:61:AE:6C:1C:6C:41:9A:B6
            X509v3 Authority Key Identifier:
                keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:79:b6:3e:61:96:3c:b0:4d:76:a2:72:76:ce:ca:57:65:23:
         33:0e:8e:83:a7:65:fe:a8:80:b8:ce:54:ea:21:6b:8f:0e:fd:
         3b:e7:39:4f:f7:82:34:4c:c4:66:8b:d0:eb:e4:48:14:7f:68:
         ee:c8:de:ca:98:e8:47:f9:c4:b5:f3:d2:ff:7e:e5:d8:f1:04:
         5e:22:91:5f:8a:14:58:1e:6c:3f:10:8e:ba:87:76:b3:e5:55:
         72:67:50:9b:8f:58:b1:d7:84:0d:82:fd:35:be:ad:95:8f:93:
         75:fa:fb:c6:af:fa:e2:3b:45:6b:66:f9:36:4f:21:a6:d6:3b:
         24:7d:9b:56:4c:f4:f0:cb:59:51:fe:37:87:d4:b3:7f:cd:98:
         3e:61:42:0d:75:22:c7:48:9b:bc:e9:08:1d:03:33:33:08:8f:
         3f:45:80:31:9b:b9:3f:1a:18:44:91:9e:0b:be:da:7e:f0:86:
         2c:ca:23:a2:11:52:87:55:f0:54:4b:33:54:51:ae:79:dd:80:
         d8:0f:51:c2:03:3d:f5:18:ff:a3:de:0f:ad:81:98:f2:38:13:
         51:d8:a3:bc:1a:96:da:12:04:29:2c:d1:88:16:29:94:cb:ac:
         55:1e:58:33:57:91:1a:c9:38:10:ed:4a:b4:2d:b2:14:2a:e0:
         fc:da:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:54 2026 by rpki-client