Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
File:                     tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json)
Hash identifier:          3NpNKGKpJa4Xjs62ljjeKnuu7pJzNYs3CNuC/6XsNNA=
Subject key identifier:   B6:2D:D2:3A:84:C7:21:E4:31:1F:54:DF:22:F8:7D:7F:62:72:9F:AD
Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E
Certificate issuer:       /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
Manifest number:          0B99
Signing time:             Tue 12 May 2026 20:21:15 +0000
Manifest this update:     Tue 12 May 2026 20:21:14 +0000
Manifest next update:     Tue 19 May 2026 20:21:14 +0000
Files and hashes:         1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: SUPzQ0yEUYvPFk+iy46+rocEWGirNJNjb5DuCs/Fjm0=)
                          2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: amtsGIZ1bAiDpg3BaPYjx1lqeDVrGcipi92mNwNuQSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E
        Validity
            Not Before: May 12 20:21:14 2026 GMT
            Not After : May 19 20:21:14 2026 GMT
        Subject: CN=6a038bbb-c20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4e:21:dc:19:d9:c2:85:84:1b:4d:19:b1:db:
                    44:73:46:d2:ac:59:60:cc:ca:1b:22:a3:99:cd:96:
                    86:0d:9a:71:f0:cb:0f:1c:c0:29:69:3b:bf:f7:7c:
                    bd:98:bd:5d:52:09:05:dc:a1:12:05:aa:d4:d5:a8:
                    5a:6d:b3:47:d2:9a:b5:a0:62:ec:e4:a8:18:ef:41:
                    0f:4b:32:a4:d5:18:21:e2:de:68:02:97:e9:69:ce:
                    f9:e6:7a:a6:4f:b4:93:69:4a:21:c4:21:3b:87:a9:
                    2c:40:d2:ac:1b:c3:77:6c:8b:15:b2:e0:c7:b5:17:
                    8d:df:54:07:57:e4:e5:8b:8f:1c:fe:ea:c2:80:2e:
                    8d:15:2a:cb:a8:e0:f5:7c:f7:e0:43:f6:11:59:1b:
                    46:c9:5d:35:3e:2f:c6:6c:2a:5d:a8:a2:da:ea:fd:
                    d1:11:9f:30:87:06:81:c8:7e:0f:58:da:94:a3:07:
                    02:54:0a:25:00:c3:ec:b0:a2:12:ca:18:ae:7f:bc:
                    d4:3e:d0:c9:ce:44:b7:df:89:4d:9b:79:21:09:1e:
                    7b:0a:f2:33:a0:21:10:e7:41:3d:b3:ab:3e:83:81:
                    c5:88:1b:0c:2c:24:4a:39:bd:3e:ba:a4:1b:eb:af:
                    e6:9d:7b:5e:ea:a6:3a:a3:85:e9:c2:2f:2f:4f:1b:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:D2:3A:84:C7:21:E4:31:1F:54:DF:22:F8:7D:7F:62:72:9F:AD
            X509v3 Authority Key Identifier:
                keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:42:98:ff:8c:2d:13:7b:f9:7a:7e:cb:22:77:38:1b:61:
         3c:54:56:11:60:91:d4:58:ab:6c:19:76:29:94:e5:a2:70:5e:
         c1:9c:f1:23:60:ff:fa:37:3b:6e:4c:cb:66:06:91:d6:64:ce:
         ae:c8:4a:48:89:6b:af:d9:46:f4:4b:5b:d6:09:26:96:c1:79:
         34:14:b6:9e:c0:90:7b:17:dd:56:e9:d5:a2:6b:2f:b1:74:46:
         3b:19:a9:05:f5:34:b0:a8:b2:8e:fd:36:6d:6d:e9:bd:2e:26:
         9a:bc:7b:09:9f:c3:7b:c6:73:bd:4f:9c:d7:76:aa:5d:6e:8a:
         a2:b6:da:a5:2b:9e:6f:83:3a:b5:d0:41:f8:a9:8d:b1:16:06:
         ab:4b:cd:54:dd:a3:c8:7f:2b:17:63:03:09:8b:62:27:74:fa:
         d1:c5:20:fb:9a:dc:75:4b:fe:93:37:fa:2c:dd:8f:12:ff:d8:
         33:72:5a:75:a2:13:06:36:a7:56:b2:4d:83:de:9c:f5:79:24:
         6c:ab:ff:8a:22:5c:6d:e4:7f:4e:18:e6:58:99:5c:4a:9b:dc:
         a2:67:7f:bc:87:8e:2b:01:07:6c:9c:ee:11:f3:e2:69:b6:25:
         87:db:79:bf:07:7d:44:7d:8c:63:3d:6b:ab:61:b4:d9:1b:40:
         ae:af:5b:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4
NkE4RDFFM0UwHhcNMjYwNTEyMjAyMTE0WhcNMjYwNTE5MjAyMTE0WjAYMRYwFAYD
VQQDEw02YTAzOGJiYi1jMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm04h3BnZwoWEG00ZsdtEc0bSrFlgzMobIqOZzZaGDZpx8MsPHMApaTu/93y9
mL1dUgkF3KESBarU1ahabbNH0pq1oGLs5KgY70EPSzKk1Rgh4t5oApfpac755nqm
T7STaUohxCE7h6ksQNKsG8N3bIsVsuDHtReN31QHV+Tli48c/urCgC6NFSrLqOD1
fPfgQ/YRWRtGyV01Pi/GbCpdqKLa6v3REZ8whwaByH4PWNqUowcCVAolAMPssKIS
yhiuf7zUPtDJzkS334lNm3khCR57CvIzoCEQ50E9s6s+g4HFiBsMLCRKOb0+uqQb
66/mnXte6qY6o4Xpwi8vTxuOEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYt0jqE
xyHkMR9U3yL4fX9icp+tMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5
NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I
ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh
b0dTd2JUUy1NeHFHcU5IajQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWixCmP+MLRN7+Xp+yyJ3OBthPFRWEWCR1FirbBl2KZTlonBewZzxI2D/+jc7
bkzLZgaR1mTOrshKSIlrr9lG9Etb1gkmlsF5NBS2nsCQexfdVunVomsvsXRGOxmp
BfU0sKiyjv02bW3pvS4mmrx7CZ/De8ZzvU+c13aqXW6KorbapSueb4M6tdBB+KmN
sRYGq0vNVN2jyH8rF2MDCYtiJ3T60cUg+5rcdUv+kzf6LN2PEv/YM3JadaITBjan
VrJNg96c9XkkbKv/iiJcbeR/ThjmWJlcSpvcomd/vIeOKwEHbJzuEfPiabYlh9t5
vwd9RH2MYz1rq2G02RtArq9bZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:48:46 2026 by rpki-client