Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
File:                     TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft (raw, json)
Hash identifier:          Jo9vS2wDkuGzkdpJqumianDCXFUDcOJhR0dbBq2ktmk=
Subject key identifier:   59:E8:0B:A1:ED:3A:F3:9E:A5:0E:F0:0E:DF:97:60:25:22:2A:E9:99
Authority key identifier: 4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96
Certificate issuer:       /CN=A91ADCB5/serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
Manifest number:          1B
Signing time:             Mon 11 May 2026 09:10:12 +0000
Manifest this update:     Mon 11 May 2026 09:10:12 +0000
Manifest next update:     Mon 18 May 2026 09:10:12 +0000
Files and hashes:         1: TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl (hash: tL+3zW39dJRx3FIhOJA3ait97i8k+mlqcYplQiwXAjU=)
                          2: 444120CE2D6111F1A40866B8CB833773.roa (hash: ZAH3UvNZsRyQgkmq6DAPegLexqNQ6jKxjrSkeAlJ2aM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADCB5, serialNumber=4DD803A2B149692589C8B5935BE53010F86F3F96
        Validity
            Not Before: May 11 09:10:12 2026 GMT
            Not After : May 18 09:10:12 2026 GMT
        Subject: CN=6a019cf4-1d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:a5:e4:57:c6:45:b8:a5:f4:99:0c:db:05:
                    74:0c:d4:03:3a:82:fe:b2:68:cf:17:96:af:75:a8:
                    4e:4b:d2:05:21:04:49:8a:ec:8a:5b:d7:a3:6e:8d:
                    8f:17:4f:96:16:82:51:fc:7b:f3:3d:c5:07:f8:29:
                    cc:7c:f2:19:ce:b6:df:62:5b:65:1c:24:a5:df:0b:
                    60:00:56:4d:08:e3:00:43:17:2b:cb:c8:1b:47:58:
                    60:fb:de:c4:19:6d:eb:48:46:77:98:22:98:e3:d8:
                    f1:9c:2d:8b:4c:f9:1a:73:c3:f4:fc:48:0b:5a:f3:
                    ff:88:5f:c3:28:af:02:a6:c3:74:1e:e8:93:39:27:
                    b3:e5:46:a1:52:fa:05:b6:68:25:79:88:f1:74:d7:
                    69:10:a4:4e:34:52:64:2b:3b:31:46:c5:d6:88:0c:
                    ce:c6:24:43:31:9a:86:e1:e4:61:a7:d6:54:61:58:
                    b1:0f:d6:69:15:da:67:31:e3:43:97:41:16:72:83:
                    af:2e:dc:d4:23:e4:5d:5b:db:f8:9d:6a:6d:b5:70:
                    16:95:66:5f:c5:44:99:09:7e:98:0e:37:4e:51:8d:
                    53:00:62:3b:66:31:36:cf:f9:6f:b0:fe:6e:bf:92:
                    b0:e6:4a:ab:a0:53:d5:6e:3a:98:a0:bb:7b:29:68:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E8:0B:A1:ED:3A:F3:9E:A5:0E:F0:0E:DF:97:60:25:22:2A:E9:99
            X509v3 Authority Key Identifier:
                keyid:4D:D8:03:A2:B1:49:69:25:89:C8:B5:93:5B:E5:30:10:F8:6F:3F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TdgDorFJaSWJyLWTW-UwEPhvP5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/0927CEAC285211F1A4C07CC897833773/TdgDorFJaSWJyLWTW-UwEPhvP5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:ea:17:cf:2a:66:bc:99:ad:c1:b6:a0:ea:b8:6b:b5:f5:
         25:cc:ec:98:43:9b:cc:f0:ae:d1:21:f3:5f:ae:73:69:af:b8:
         60:11:bf:b8:38:8e:1a:35:f7:e8:e2:c9:65:21:ea:5f:5e:ab:
         46:a5:99:7b:e3:73:d1:0e:c6:66:0e:26:6f:85:4a:3f:d6:79:
         1d:e8:99:58:85:82:69:ca:7a:11:0b:3a:ea:31:c4:7a:83:93:
         7c:b1:7f:f7:59:27:a6:5e:2b:4d:6d:40:fa:c7:22:d2:bf:09:
         4d:95:1f:cd:52:30:88:84:63:fb:8b:38:36:21:e4:1b:91:4b:
         1f:e5:f8:c3:d1:6b:fb:d4:0b:5f:70:fd:2f:60:99:e8:7a:05:
         c8:c1:b2:15:f6:98:40:fc:db:81:5e:99:8e:6b:cb:95:bf:48:
         34:bd:ee:ec:87:64:c2:51:e4:0a:8c:85:e7:0f:fe:fa:ca:9a:
         72:1d:96:ad:6b:dc:bd:05:b6:ea:53:19:99:8c:f9:17:57:00:
         d1:ef:d7:de:b8:2b:06:ed:6c:71:39:39:73:e6:6e:55:bf:9f:
         1d:60:80:69:54:7a:b7:4b:05:25:3a:49:a3:d1:bd:ef:5c:d1:
         99:b4:c3:49:bc:78:de:f8:93:6e:0a:da:83:bd:bb:dc:d3:aa:
         9d:12:ee:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:26 2026 by rpki-client