Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
File:                     TU86rMc5WhPWQgB_mRDfiAQOS6s.mft (raw, json)
Hash identifier:          2f+Z9Z37cjkQyVRst4T4UY5Ar7/QTfa18RZdTlIaTMw=
Subject key identifier:   DE:0A:FC:E0:1E:1D:A5:5D:3D:6B:40:CF:E7:C1:88:43:9C:F8:30:C3
Authority key identifier: 4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB
Certificate issuer:       /CN=A91C2B6D/serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
Manifest number:          92
Signing time:             Mon 11 May 2026 07:38:45 +0000
Manifest this update:     Mon 11 May 2026 07:38:44 +0000
Manifest next update:     Mon 18 May 2026 07:38:44 +0000
Files and hashes:         1: TU86rMc5WhPWQgB_mRDfiAQOS6s.crl (hash: nnmVJ8Jk1fAjMfJsRT1uqMPBnj8k+DYw9zgjijoy4eI=)
                          2: 47F872C4768911F0AC56AE5AC4F9AE02.roa (hash: 9knzdW0PCXzgpdwkDT1Tbch9gGjitaXc+H32jDp8ksw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B6D, serialNumber=4D4F3AACC7395A13D642007F9910DF88040E4BAB
        Validity
            Not Before: May 11 07:38:44 2026 GMT
            Not After : May 18 07:38:44 2026 GMT
        Subject: CN=6a018784-6e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:7e:46:aa:1b:b9:64:c9:2d:b4:47:83:09:
                    52:fe:f2:4f:a0:46:85:1f:ca:16:f8:a7:a7:b3:91:
                    f6:3a:fc:2c:a1:ac:b4:c2:1e:17:78:70:d7:0a:a7:
                    1b:23:78:c8:72:48:d5:4c:9c:b6:00:0b:25:d9:10:
                    be:19:13:53:ef:be:3f:0d:cf:32:9c:04:a0:94:f2:
                    82:1d:3c:23:ae:3a:24:63:07:7a:98:b0:91:59:46:
                    94:7b:29:a1:38:82:b8:d9:fc:bc:d0:c1:bd:e9:5f:
                    b0:d9:01:1e:8c:70:df:40:0f:71:d6:33:83:62:a6:
                    ec:0a:77:28:bc:5e:92:74:d9:25:cd:57:b3:2c:73:
                    b8:0d:63:fe:41:31:4b:30:73:e8:b4:45:a2:e8:92:
                    33:df:a0:9b:94:8a:62:fd:10:bc:89:8b:62:bb:88:
                    f6:1e:64:1a:60:82:71:08:96:ec:68:99:09:b5:11:
                    5c:ee:03:df:16:e5:51:86:8b:f7:7d:60:fb:c9:ec:
                    15:8a:d7:4d:17:3b:81:62:99:8e:3a:59:25:f5:13:
                    74:17:85:0e:8c:06:29:94:68:f8:ee:6e:64:b9:ff:
                    df:c6:ce:5a:31:c3:50:e2:f6:73:b6:23:81:a8:c2:
                    39:77:13:31:32:c4:2b:9a:ca:55:d0:75:3c:b3:38:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:FC:E0:1E:1D:A5:5D:3D:6B:40:CF:E7:C1:88:43:9C:F8:30:C3
            X509v3 Authority Key Identifier:
                keyid:4D:4F:3A:AC:C7:39:5A:13:D6:42:00:7F:99:10:DF:88:04:0E:4B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TU86rMc5WhPWQgB_mRDfiAQOS6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B6D/86DF6C7E710511F0854F5A14C4F9AE02/TU86rMc5WhPWQgB_mRDfiAQOS6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:f0:12:fb:15:a3:cb:22:17:47:86:d8:cb:ee:fb:eb:b7:
         47:64:ff:38:6c:8c:e1:f4:e9:50:dc:3c:5a:63:ab:a0:f6:73:
         1b:4f:3a:f4:f7:2a:8d:d0:d0:b3:3f:6a:c8:fa:96:cc:63:b6:
         54:ab:6b:0a:fc:a5:61:da:19:8e:e0:d5:07:cd:a7:f1:11:41:
         0e:bb:92:c3:b0:f6:39:99:90:34:6f:4f:28:74:91:d1:13:7e:
         64:57:c8:ee:55:0a:53:e4:62:38:b9:1d:7f:fc:45:d1:11:e0:
         bb:13:a1:2b:b2:b7:5b:02:13:64:56:56:b4:97:17:f9:23:5e:
         07:d1:2b:52:d2:b8:c1:18:a9:5a:68:f6:19:44:c5:b9:f3:d9:
         72:7b:3c:b7:f6:3a:84:ca:c5:1f:d1:c4:b8:c2:32:a0:98:1a:
         78:2e:c4:af:55:f7:0d:11:34:6c:7b:2a:a6:48:7c:59:25:25:
         b0:9e:c6:1f:e5:e4:6f:78:21:ae:69:82:25:5f:66:34:27:41:
         61:92:4e:39:2c:a3:b6:00:9d:98:f7:1c:23:13:f2:1a:16:ea:
         7c:12:97:11:a7:e1:20:9c:2e:b6:18:a1:01:17:41:8b:74:00:
         f9:0f:bf:89:5f:db:22:5d:32:32:fe:b7:59:64:a5:89:e0:2c:
         94:3b:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:37 2026 by rpki-client