Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
File:                     TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json)
Hash identifier:          GCof+21ioMfuP7KTzs6sVf/67Bo1zWGAyUlgZD2vQhg=
Subject key identifier:   C6:8E:FB:C0:61:CF:EE:78:25:2B:2A:9F:28:98:CD:77:F5:B7:E7:F6
Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Certificate issuer:       /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
Manifest number:          D7
Signing time:             Mon 11 May 2026 06:50:48 +0000
Manifest this update:     Mon 11 May 2026 06:50:47 +0000
Manifest next update:     Mon 18 May 2026 06:50:47 +0000
Files and hashes:         1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: oTb6Us0Xa9COuuwkLZKsKc0Ep8qgefoHBoRTFCTBF/c=)
                          2: 9B4952122CC411F18DA02C7B8F833773.roa (hash: bxkYgKM3AZY7JP6+Ac7J2hlgQV4hzjnKcNdgfr1Hzwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
        Validity
            Not Before: May 11 06:50:47 2026 GMT
            Not After : May 18 06:50:47 2026 GMT
        Subject: CN=6a017c48-dcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:54:be:a6:7c:1f:ac:82:cb:63:c4:2a:15:
                    7e:87:6d:84:04:fa:d2:75:25:71:51:f6:fb:b2:3f:
                    4b:9f:79:aa:ac:87:c2:0f:34:43:b8:8f:1e:68:86:
                    e2:57:9d:e5:16:f9:51:24:48:55:37:68:88:4c:45:
                    2b:1b:e5:27:15:72:33:5f:32:05:9d:35:05:fb:ee:
                    7c:6f:8d:7a:22:25:32:fd:11:55:59:db:ba:9c:1e:
                    b1:2b:42:a8:c9:e2:22:d7:42:af:da:f1:f3:f4:99:
                    8f:89:1a:2a:b8:12:c3:ea:3b:83:61:37:cf:89:93:
                    d3:ba:4b:f0:14:68:df:0f:17:3a:3b:19:62:c1:9b:
                    11:9e:ec:45:c3:50:c3:ff:0c:68:3d:e4:5e:07:dc:
                    99:81:32:00:ac:f5:4f:20:e6:bf:c8:1d:8a:eb:8a:
                    05:db:4b:e5:61:00:ab:a5:e0:4a:84:29:9d:a1:26:
                    2f:3a:12:73:b4:49:3a:5b:57:2a:be:ba:5f:d9:75:
                    ea:5a:f6:2d:ef:4f:5c:3c:be:bf:fa:d7:cb:96:ff:
                    fc:f2:20:23:f8:fc:4a:31:6b:16:b3:e5:32:54:c9:
                    5c:c5:0f:9d:14:f7:5b:25:54:c8:54:1f:b6:c5:bf:
                    30:f0:e1:7c:12:90:e8:6b:bd:95:5d:c3:56:9f:8a:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:FB:C0:61:CF:EE:78:25:2B:2A:9F:28:98:CD:77:F5:B7:E7:F6
            X509v3 Authority Key Identifier:
                keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:a4:38:f0:24:c9:13:7b:5a:1e:3b:7f:24:af:fc:ae:46:
         94:9a:fc:cf:14:2f:45:cf:d1:03:1b:7f:c0:4d:58:47:c5:7d:
         1b:58:48:f4:c3:a0:d7:1d:5b:77:10:7a:01:93:35:1a:a3:e5:
         61:b8:be:e6:61:c4:ad:cb:80:43:3c:ec:8b:cd:c4:ea:0b:c2:
         a1:94:cb:c6:dd:1f:47:30:7f:47:cc:78:87:33:4c:bf:22:dd:
         a6:0e:f1:c5:23:09:9b:f6:02:cd:18:da:d2:69:97:0b:19:f9:
         56:10:e5:49:ae:99:92:e8:13:54:63:53:b9:ac:f5:3f:e7:5a:
         28:3e:9f:1b:60:a1:4f:08:86:51:f9:30:ee:10:e0:80:42:cd:
         7d:32:46:c7:99:c9:6a:7a:04:c6:f4:1d:89:c8:8f:4a:5b:db:
         e9:f6:86:9a:a0:da:2c:69:e4:74:f9:3b:b3:ac:1f:90:56:21:
         a6:42:d2:04:09:94:05:14:b4:89:03:25:4c:a2:db:8f:31:17:
         d6:99:90:37:fb:d0:9b:80:40:6c:7a:b8:ce:2d:30:37:b8:a2:
         f0:fb:1e:50:45:0a:41:c2:ca:50:df:d9:5e:fc:26:ef:0a:d3:
         34:fc:0e:8c:d2:d7:db:29:13:0c:1e:77:62:64:b2:96:eb:a5:
         33:f7:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:57 2026 by rpki-client