Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft
File:                     tkuBBCq0EWB9hgdv78nllia7iBY.mft (raw, json)
Hash identifier:          Gn0oQFpRKTLnmhoj0Eodp5LUGlybXujUV42ropnf0pc=
Subject key identifier:   F3:BF:0A:57:38:89:EF:26:2B:6F:C1:56:77:6E:8F:46:7D:23:B7:A7
Authority key identifier: B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16
Certificate issuer:       /CN=A91D3037/serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft
Manifest number:          6A
Signing time:             Wed 25 Mar 2026 07:10:37 +0000
Manifest this update:     Wed 25 Mar 2026 07:10:36 +0000
Manifest next update:     Wed 01 Apr 2026 07:10:36 +0000
Files and hashes:         1: tkuBBCq0EWB9hgdv78nllia7iBY.crl (hash: QFmiHs0HcuMJw7DxgFzAGW3cHbkfXQNSTxQPwIh70qA=)
                          2: 0A16B10E8EE011F09A1AE72BC4F9AE02.roa (hash: oQE4lKjrb9uBnPjONyf7ZrBM9Hns2uL/UwtMTK49Mk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl
                          rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3037, serialNumber=B64B81042AB411607D86076FEFC9E59626BB8816
        Validity
            Not Before: Mar 25 07:10:36 2026 GMT
            Not After : Apr  1 07:10:36 2026 GMT
        Subject: CN=69c38a6d-c2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:2f:50:ec:16:59:56:51:02:92:ac:8d:74:
                    e4:0a:8b:4e:c2:a4:e8:03:ba:0f:98:6a:6f:32:ba:
                    12:8f:41:54:27:07:3d:4d:71:75:63:e7:c8:61:74:
                    52:68:60:09:6b:ca:e5:af:9e:8e:d7:12:4d:b3:b6:
                    60:d9:ab:3c:82:b6:1f:75:c6:ee:48:31:59:08:20:
                    4b:b6:c1:39:44:f3:d0:fb:1d:c0:04:1f:b9:3e:85:
                    5d:5e:ed:5c:ba:47:d8:7c:44:cb:84:aa:be:b5:6c:
                    9e:5a:59:5f:ac:26:70:31:35:4b:2e:cc:a4:4d:ff:
                    11:3e:97:20:31:3e:2c:c3:64:18:ed:e3:eb:ee:fc:
                    67:df:88:35:d4:c9:80:1b:fa:c7:0a:ae:a7:5c:49:
                    28:ed:d5:2d:1c:93:38:cf:fc:4a:8c:9c:ea:a9:b3:
                    61:32:96:78:87:03:26:6b:fb:8e:25:81:e0:46:54:
                    ad:e3:d7:66:8a:08:63:95:94:a8:c8:ae:93:f6:23:
                    1c:31:07:6e:13:35:42:06:10:b8:2a:52:cf:7c:21:
                    77:51:de:ce:ed:0e:e8:75:d3:ff:0c:a8:20:f1:c5:
                    21:de:0b:60:f0:17:b8:5a:51:c5:8c:dd:d7:9c:f4:
                    26:13:41:bc:20:a3:43:40:bc:40:38:1b:c8:d3:20:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BF:0A:57:38:89:EF:26:2B:6F:C1:56:77:6E:8F:46:7D:23:B7:A7
            X509v3 Authority Key Identifier:
                keyid:B6:4B:81:04:2A:B4:11:60:7D:86:07:6F:EF:C9:E5:96:26:BB:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkuBBCq0EWB9hgdv78nllia7iBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3037/8B8DE27E8EDC11F09880C478C4F9AE02/tkuBBCq0EWB9hgdv78nllia7iBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:45:e6:03:77:fc:5f:9d:c1:2f:0f:6f:73:0e:3a:ef:5d:df:
         9f:ce:c9:5a:32:a3:10:0b:b1:9a:83:c1:6d:c3:57:0b:00:80:
         2c:55:97:8d:98:bb:96:6f:0c:7a:b3:0c:14:46:e7:13:12:16:
         22:f6:64:41:f4:ee:77:4e:77:85:e6:b6:89:ba:1f:8f:4e:4f:
         c4:e6:5a:4e:ab:3e:e3:f2:bb:9e:11:2b:47:fa:53:86:c4:ab:
         6b:2e:2b:b8:ed:05:02:cc:13:7f:3e:2f:d6:20:7c:76:e6:62:
         24:6f:56:8b:3b:b9:e3:28:7f:91:8a:d8:02:c9:f1:ca:de:64:
         46:91:8e:5d:0e:a5:a1:eb:e9:d5:a8:25:66:32:da:81:f7:e2:
         9c:9d:4a:c0:f9:3a:6c:bd:44:19:3b:d0:54:8e:bb:a2:09:9a:
         24:b9:07:e1:84:ae:81:37:fc:f4:20:5c:83:61:74:f4:00:be:
         4d:29:91:c2:33:64:8b:de:78:ef:c2:21:02:b0:5d:eb:25:6a:
         a7:6e:3e:e7:5e:48:a9:1d:2a:0b:dc:07:c2:cd:01:ef:08:84:
         04:8a:a7:a5:90:13:f4:7c:6b:7b:f7:44:13:67:9f:38:78:c8:
         e9:54:f9:13:01:d1:aa:03:ad:60:e1:7b:39:a0:35:bd:df:13:
         10:df:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:53:14 2026 by rpki-client