Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
File:                     tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json)
Hash identifier:          dn3tQ0J06deKYeal4q6StEM2qFKXiI2cuiK9cgNzZlA=
Subject key identifier:   84:84:20:C7:CC:B4:63:A2:3D:3A:CE:4B:B1:42:D8:F4:D7:19:C2:53
Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5
Certificate issuer:       /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
Certificate serial:       29F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
Manifest number:          29E1
Signing time:             Tue 24 Mar 2026 15:32:07 +0000
Manifest this update:     Tue 24 Mar 2026 15:32:07 +0000
Manifest next update:     Tue 31 Mar 2026 15:32:07 +0000
Files and hashes:         1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: rNFWRk+q2xAbUjZka/m+x9ieLx8UM/lx5cUBlmDWd50=)
                          2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10745 (0x29f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5
        Validity
            Not Before: Mar 24 15:32:07 2026 GMT
            Not After : Mar 31 15:32:07 2026 GMT
        Subject: CN=69c2ae77-49a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:18:61:52:97:aa:dc:68:41:40:be:ad:f6:
                    0a:df:e7:5b:a0:77:8b:31:bc:89:02:4c:16:69:28:
                    fc:a7:e1:59:52:56:9f:05:39:ee:55:bb:63:b3:5d:
                    be:f7:0b:f8:b5:e5:61:b9:2d:73:8f:b5:0e:dc:53:
                    cd:ee:f2:95:91:73:12:cb:73:28:92:3e:23:ef:f6:
                    19:f0:08:4d:3a:25:7e:89:6e:41:0a:51:36:16:b5:
                    6b:ef:4d:73:5b:92:e3:7a:4e:70:f8:20:6c:78:62:
                    43:27:5a:c1:7f:34:17:33:bb:91:70:4a:a5:83:2a:
                    45:52:08:59:a8:7b:45:fb:c0:22:57:2a:f8:6e:4a:
                    fa:69:07:e6:e5:71:98:ec:13:00:5d:95:87:8d:ac:
                    bf:4b:c7:85:3e:17:4e:91:dc:db:e4:5e:a5:18:34:
                    26:dd:a8:4e:e4:a9:64:58:d3:cc:9a:0d:64:4e:c5:
                    91:6a:4a:4b:49:ef:c1:86:85:e2:7e:dc:f8:90:6a:
                    bc:63:a8:27:1d:2c:db:b1:5b:42:aa:87:ee:84:8d:
                    91:c0:3c:16:63:14:ff:05:19:f7:2b:3d:a1:fc:f7:
                    6b:5c:3e:e0:02:e5:21:3e:cf:0a:8a:11:03:6d:56:
                    18:7f:f1:6a:63:19:53:85:08:dd:19:ab:e3:95:4c:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:20:C7:CC:B4:63:A2:3D:3A:CE:4B:B1:42:D8:F4:D7:19:C2:53
            X509v3 Authority Key Identifier:
                keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:12:29:49:b4:de:08:bd:9b:92:fb:74:ce:83:20:39:df:2e:
         8f:ac:5e:af:8b:56:19:00:ce:82:05:42:da:4e:f3:c0:33:a1:
         61:90:5f:81:65:a0:48:28:2f:59:79:92:b7:cd:2b:c1:6c:85:
         83:3a:e6:9e:30:49:4e:b1:e0:28:c6:91:f5:37:d6:85:29:9f:
         bf:76:db:aa:1c:09:03:8e:41:fa:85:df:c0:58:ad:4a:84:95:
         b6:0f:b3:32:a4:ee:f0:90:e8:0b:a5:68:a7:df:3a:2d:09:99:
         3d:ab:8f:30:a1:5c:11:08:36:c8:d5:ad:bb:4e:b3:b3:47:63:
         11:ae:94:31:97:3f:4d:7b:7c:00:7b:d1:c4:f0:bc:97:8d:7a:
         c9:99:03:3c:19:06:fc:bf:55:80:04:b8:cb:49:0d:5e:00:3b:
         1f:5a:aa:bd:0a:c3:4c:c7:75:c1:ac:36:1f:63:60:37:84:e1:
         7c:dd:c3:5b:74:6e:d3:88:e6:9c:75:55:3d:3d:46:0e:45:9c:
         68:86:bb:65:06:21:e6:17:f0:a3:ed:59:28:49:a9:62:52:c1:
         65:8b:e0:ac:31:5c:19:38:f5:37:e0:7b:f8:4e:bb:c6:5b:82:
         d3:ab:a9:e2:4d:d7:00:49:26:6f:fa:4a:71:a5:58:88:b5:71:
         f7:93:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:39 2026 by rpki-client