Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
File:                     tbNfkk61wy-7QYZ9OhZuSpa77KI.mft (raw, json)
Hash identifier:          OJ5qwLp9yhHqPklf/pDjfdTaaZmtEetQyUsgd1oAs2c=
Subject key identifier:   B6:19:38:D5:D7:05:A2:12:B0:8C:61:D3:A0:11:8B:6E:BA:A2:1C:59
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Certificate issuer:       /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
Manifest number:          77
Signing time:             Mon 11 May 2026 07:53:33 +0000
Manifest this update:     Mon 11 May 2026 07:53:32 +0000
Manifest next update:     Mon 18 May 2026 07:53:32 +0000
Files and hashes:         1: tbNfkk61wy-7QYZ9OhZuSpa77KI.crl (hash: P0VGQ8suUTV95EF9b77Q5ttQQ1v4/NfX7AzwiKNVwh8=)
                          2: A71814CA984F11F0B7A01E76C4F9AE02.roa (hash: Wqlgag3JASt9EH/u+Cc5ukalg78nje36S+xtNjVr+A4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
        Validity
            Not Before: May 11 07:53:32 2026 GMT
            Not After : May 18 07:53:32 2026 GMT
        Subject: CN=6a018afc-d9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:c6:db:35:9f:15:72:e3:d2:08:f6:b5:bf:
                    8d:68:45:ee:d2:bb:d7:71:0e:bb:b6:6c:f1:c0:4c:
                    02:83:33:78:f7:8d:55:f5:dc:0c:99:09:5a:6f:7b:
                    2b:0c:ad:79:39:fd:32:e5:55:f8:b2:dd:e2:32:09:
                    19:47:16:ef:c9:78:da:17:c2:ff:ed:0f:d3:f1:c7:
                    be:48:23:0a:b2:92:20:78:19:ca:89:5d:64:54:91:
                    21:e4:84:63:8d:d4:a7:68:e1:6b:fe:09:f2:42:09:
                    cb:15:e9:6f:f7:da:a2:09:08:82:7c:47:7e:57:25:
                    9e:b5:1b:a6:e7:5c:94:a6:48:57:33:e7:4d:3b:51:
                    02:f4:c1:ed:f2:03:6f:7a:b6:d0:bb:02:c4:e1:ef:
                    30:0d:fa:99:0c:9e:96:74:bc:ab:c8:33:ed:d9:f3:
                    e4:2b:2d:9c:3c:6f:e4:53:27:c5:9d:37:0c:70:87:
                    e0:2c:a8:2a:77:a6:c1:04:9a:1a:1c:11:3f:61:61:
                    32:d0:75:c0:89:94:a5:b4:37:c9:d9:1c:e3:91:8f:
                    27:f2:77:b6:48:12:6d:35:6c:f4:b6:e2:a9:9d:ae:
                    20:ee:c3:0c:2e:e3:4c:af:06:33:82:c1:19:fe:b0:
                    87:28:46:a0:b1:20:dd:86:40:29:47:47:ac:5e:69:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:38:D5:D7:05:A2:12:B0:8C:61:D3:A0:11:8B:6E:BA:A2:1C:59
            X509v3 Authority Key Identifier:
                keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:65:a4:dd:d6:cf:e7:80:54:e5:da:04:95:a7:e0:32:a8:08:
         e4:29:85:06:51:3b:30:e9:bd:eb:c8:94:f1:b1:47:0a:9b:8a:
         3c:a1:00:6b:3a:96:a0:b2:3b:ba:de:b8:24:08:de:d2:16:a5:
         2e:8e:90:e3:04:4d:1f:55:64:86:9b:62:55:ee:24:50:d2:1d:
         73:af:fd:54:a8:77:1e:60:a2:1a:cc:de:5e:78:4d:3d:44:43:
         ce:7a:b1:4f:ba:05:5f:06:77:89:dd:3b:1a:2e:49:ae:46:ae:
         4d:7d:e1:ff:5f:91:6d:96:87:fb:5a:cc:22:d7:4c:83:2b:97:
         cb:2a:ad:70:98:e0:ee:3b:77:85:44:e3:cb:fa:9e:d1:6f:98:
         85:bc:b4:7a:dc:d8:e6:eb:db:ba:d2:5b:c6:43:b1:da:ff:14:
         a4:94:de:d5:4e:7b:fb:09:69:67:b5:bb:76:d4:de:d6:f9:0e:
         0f:94:ba:78:30:a9:9d:8e:5d:f1:e6:05:b8:34:40:2c:87:72:
         20:2a:7c:1b:3f:ac:f0:44:f5:09:ba:08:94:1e:e3:77:b4:15:
         b6:9c:08:5b:7e:0d:76:d5:18:d9:41:3c:22:d2:15:3c:c3:d7:
         66:76:ba:85:12:33:da:83:c5:85:e5:a7:2f:ee:4c:48:26:37:
         87:74:75:e3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OTkyODExMC8GA1UEBRMoQjVCMzVGOTI0RUI1QzMyRkJCNDE4NjdEM0ExNjZFNEE5
NkJCRUNBMjAeFw0yNjA1MTEwNzUzMzJaFw0yNjA1MTgwNzUzMzJaMBgxFjAUBgNV
BAMTDTZhMDE4YWZjLWQ5ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDBsbbNZ8VcuPSCPa1v41oRe7Su9dxDru2bPHATAKDM3j3jVX13AyZCVpveysM
rXk5/TLlVfiy3eIyCRlHFu/JeNoXwv/tD9Pxx75IIwqykiB4GcqJXWRUkSHkhGON
1Kdo4Wv+CfJCCcsV6W/32qIJCIJ8R35XJZ61G6bnXJSmSFcz5007UQL0we3yA296
ttC7AsTh7zAN+pkMnpZ0vKvIM+3Z8+QrLZw8b+RTJ8WdNwxwh+AsqCp3psEEmhoc
ET9hYTLQdcCJlKW0N8nZHOORjyfyd7ZIEm01bPS24qmdriDuwwwu40yvBjOCwRn+
sIcoRqCxIN2GQClHR6xeaS9hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUthk41dcF
ohKwjGHToBGLbrqiHFkwHwYDVR0jBBgwFoAUtbNfkk61wy+7QYZ9OhZuSpa77KIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5OTI4LzU3REZCRUJDOTg0
RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3ktN1FZWjlPaFp1U3BhNzdL
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdGJOZmtrNjF3eS03UVlaOU9oWnVTcGE3N0tJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
OTI4LzU3REZCRUJDOTg0RjExRjA4NTQwMjk3NUM0RjlBRTAyL3RiTmZrazYxd3kt
N1FZWjlPaFp1U3BhNzdLSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNZaTd1s/ngFTl2gSVp+AyqAjkKYUGUTsw6b3ryJTxsUcKm4o8oQBrOpagsju6
3rgkCN7SFqUujpDjBE0fVWSGm2JV7iRQ0h1zr/1UqHceYKIazN5eeE09REPOerFP
ugVfBneJ3TsaLkmuRq5NfeH/X5Ftlof7Wswi10yDK5fLKq1wmODuO3eFROPL+p7R
b5iFvLR63Njm69u60lvGQ7Ha/xSklN7VTnv7CWlntbt21N7W+Q4PlLp4MKmdjl3x
5gW4NEAsh3IgKnwbP6zwRPUJugiUHuN3tBW2nAhbfg121RjZQTwi0hU8w9dmdrqF
EjPag8WF5acv7kxIJjeHdHXj
-----END CERTIFICATE-----
Generated at Wed May 13 07:17:33 2026 by rpki-client