Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
File:                     TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft (raw, json)
Hash identifier:          Xj7fRyMmosJd1TRJT4P09R2VQY58zNxXpL565UqPfuk=
Subject key identifier:   12:2A:0E:50:4F:3B:86:CD:1D:4F:82:B2:60:59:95:8E:B6:BF:FA:73
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       19AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
Manifest number:          1965
Signing time:             Tue 12 May 2026 16:26:59 +0000
Manifest this update:     Tue 12 May 2026 16:26:59 +0000
Manifest next update:     Tue 19 May 2026 16:26:59 +0000
Files and hashes:         1: TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl (hash: OruJaNX22ytpNlH4ptW5iyypOiyayzjo1OzHMOSwXb0=)
                          2: 8AE56254350111F1850F2A1285EE528E.roa (hash: EVL8w1VZpVQdj+EsP8KpnsmrCBSTcfGw4trEyAyrKbE=)
                          3: 8BE1358E350111F1850F2A1285EE528E.roa (hash: Wot74Yhz0AUHTlwE/GCNR2qDk9eiDYMFoNBTC2K9mpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
                          rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6570 (0x19aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: May 12 16:26:59 2026 GMT
            Not After : May 19 16:26:59 2026 GMT
        Subject: CN=6a0354d3-dd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9b:40:bf:8b:89:7c:a5:b6:89:44:7d:01:5e:
                    30:5c:50:9c:d7:04:6d:f9:29:ae:75:38:ed:65:51:
                    4c:54:41:5c:84:a3:c5:7e:c6:3c:74:87:b8:47:3c:
                    f5:d7:cd:6d:3b:a9:d3:0b:a4:44:50:01:c9:ad:33:
                    27:c8:e4:3d:c6:79:fe:4c:eb:12:3b:0d:3c:f7:09:
                    73:70:b2:48:aa:67:bb:fa:b3:c1:7d:66:e2:b9:04:
                    80:7e:a0:f1:2d:3e:eb:c6:63:d3:cf:2f:79:dd:40:
                    dc:45:99:9e:21:8a:a6:80:e6:c1:a2:43:da:6d:b6:
                    91:87:2f:ad:10:c0:ba:c4:b1:18:b8:ca:85:1c:e7:
                    f0:35:e6:18:3d:3b:00:84:6a:b2:09:45:6f:73:0c:
                    48:73:bc:1e:2b:46:ad:9e:b1:92:95:a4:d6:eb:45:
                    45:2e:e8:1a:95:c9:59:d4:1d:1d:fc:55:28:3c:53:
                    ae:cb:1a:64:d8:6e:d6:ab:eb:69:b6:ff:a6:34:56:
                    eb:92:92:81:8f:36:ec:19:d7:65:40:d6:dc:c3:76:
                    77:0e:1f:3f:a5:76:2e:e2:31:df:1c:a5:03:83:9c:
                    41:bb:9f:f7:ac:45:2a:2c:6b:44:e0:b9:86:26:7c:
                    20:d0:d9:b1:ba:e9:2a:0b:30:6a:64:2f:28:c8:87:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2A:0E:50:4F:3B:86:CD:1D:4F:82:B2:60:59:95:8E:B6:BF:FA:73
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:06:cd:1d:25:65:49:6b:66:23:56:53:82:27:a4:f4:fa:
         be:bb:f9:92:5d:d9:30:84:72:05:68:30:51:b2:c5:07:4a:9c:
         8c:46:9b:b4:26:4b:1d:0e:c0:83:30:05:de:a5:f4:af:d2:81:
         14:a3:a0:8e:5f:cb:ce:13:6b:89:28:8c:88:24:9c:fd:79:8e:
         d1:c4:b0:59:02:94:7b:ec:2c:72:44:f9:9f:25:90:54:ed:20:
         6f:c6:83:68:9a:d4:98:6b:eb:1e:94:ee:89:fd:ed:53:25:cb:
         a7:86:36:74:6a:e5:76:97:ea:55:b6:3e:a4:e9:ae:0b:c7:df:
         34:f0:2a:97:65:44:11:cd:32:b5:74:85:a9:c1:3e:38:3d:b4:
         42:18:11:d3:a0:da:de:a5:9b:c2:0b:87:58:8a:3a:41:ac:68:
         37:0d:43:4b:b2:af:35:8f:10:3b:dc:37:eb:73:89:e1:c6:69:
         06:1c:82:e2:fa:3c:7b:c4:30:87:5b:e3:19:ff:70:29:fe:d0:
         3f:80:8d:4e:53:f0:18:30:66:0c:ee:f4:54:f0:3d:36:2a:80:
         c3:1b:15:91:56:96:9a:3b:72:31:da:b6:1c:58:76:39:12:59:
         1f:72:e1:6c:49:8c:42:ec:b7:4c:6e:16:63:d0:56:78:a4:74:
         0b:ef:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:58 2026 by rpki-client