Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
File:                     TnWast4kVGn4MRuSc7VVOH51CpA.mft (raw, json)
Hash identifier:          R6RS87eWVAwP2Avy+rWTwct7QMAdc0Wah5sICBe5pG8=
Subject key identifier:   0E:CA:3A:CB:6C:3B:E0:3E:06:8A:CB:C8:07:25:32:62:A6:A3:51:1E
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Certificate issuer:       /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
Manifest number:          010F
Signing time:             Mon 11 May 2026 06:06:39 +0000
Manifest this update:     Mon 11 May 2026 06:06:38 +0000
Manifest next update:     Mon 18 May 2026 06:06:38 +0000
Files and hashes:         1: TnWast4kVGn4MRuSc7VVOH51CpA.crl (hash: 0CaMhQcmxl9lbJLBBPL3/jtjiC+VuM99agPt6/dt/uY=)
                          2: 1FE0E016B37D11EFBDE18263C4F9AE02.roa (hash: dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
        Validity
            Not Before: May 11 06:06:38 2026 GMT
            Not After : May 18 06:06:38 2026 GMT
        Subject: CN=6a0171ee-4944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:97:e8:f6:7b:e5:74:7a:a9:7f:71:2b:b0:
                    85:14:e9:40:45:a5:46:4b:17:4d:3d:c5:ba:54:f3:
                    fe:47:b1:40:b5:dc:fc:46:59:cd:2e:f7:df:46:bb:
                    13:e9:9c:87:88:a9:0a:b9:60:af:5b:97:3f:e4:98:
                    6f:59:0b:99:b8:0c:1b:24:32:f9:53:68:86:73:19:
                    3b:ea:8a:e6:d7:2c:d4:66:2f:b3:14:65:f5:ec:74:
                    28:ee:e0:fb:c3:35:17:4f:73:0c:c5:74:68:71:8b:
                    11:ba:2e:e9:6e:ae:2b:f7:66:3f:58:aa:c8:0d:cf:
                    58:ad:a0:29:4f:8e:16:5a:87:b8:04:ab:9e:e0:01:
                    b6:ba:53:a9:86:6c:20:b7:44:fb:3a:84:78:ed:f2:
                    4f:9a:61:10:23:8f:44:0f:d0:a7:0d:a4:09:3c:ea:
                    6f:02:7f:2d:98:84:c0:d5:53:f6:b6:82:c0:cd:d3:
                    ec:7c:43:49:fd:f7:df:85:59:e8:ab:e7:e0:27:2b:
                    ff:fe:45:56:14:29:9e:dd:0e:10:04:e8:d8:77:a2:
                    82:34:d0:dc:3c:12:af:3c:65:8d:9b:31:6d:e1:26:
                    68:db:cd:b8:a5:14:9a:dc:f5:c8:12:ae:32:4b:74:
                    5c:e7:f9:27:98:d5:9c:fe:5b:3e:03:02:55:32:f6:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:3A:CB:6C:3B:E0:3E:06:8A:CB:C8:07:25:32:62:A6:A3:51:1E
            X509v3 Authority Key Identifier:
                keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:05:42:55:ce:17:37:43:cb:71:85:ba:0f:a7:a1:13:07:9b:
         16:a5:e3:c7:ff:89:63:65:2c:e0:df:55:a2:ec:1d:9d:84:0a:
         29:82:c1:bf:1a:f9:f5:78:6e:ec:06:a6:83:70:3f:56:66:aa:
         aa:23:3e:b3:fc:e1:82:33:b8:30:25:fe:53:9f:e2:ab:97:94:
         47:0d:80:62:e2:50:52:ef:86:1d:24:f2:97:ee:53:4c:5b:33:
         96:b7:2c:5d:48:19:82:11:4c:35:82:16:c0:99:71:16:8c:6f:
         e3:04:58:53:d1:bb:5c:7f:1a:0c:51:69:08:b5:e8:b8:f2:d5:
         ba:fa:ef:fa:1f:f8:04:04:97:f2:e6:bb:de:8d:9b:4a:e8:37:
         03:4c:94:9a:ec:52:f7:18:42:5c:24:00:ae:df:23:77:d6:3b:
         5e:eb:f7:48:3d:fd:5f:29:73:0e:f9:1d:d0:da:9c:9d:51:53:
         bc:10:33:66:4a:d8:fc:56:66:0b:6a:f8:09:66:b5:76:d5:af:
         eb:61:ac:e8:bb:ce:f2:3b:27:26:f5:e1:fa:83:fd:f6:92:3d:
         d0:25:d3:24:e8:af:09:38:ea:be:ee:7b:66:20:94:e8:44:93:
         07:c7:71:43:f1:6a:59:17:5e:32:3f:af:ba:71:70:4d:b8:9e:
         e9:3c:e8:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYyMzMxMTAvBgNVBAUTKDRFNzU5QUIyREUyNDU0NjlGODMxMUI5MjczQjU1NTM4
N0U3NTBBOTAwHhcNMjYwNTExMDYwNjM4WhcNMjYwNTE4MDYwNjM4WjAYMRYwFAYD
VQQDEw02YTAxNzFlZS00OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdKX6PZ75XR6qX9xK7CFFOlARaVGSxdNPcW6VPP+R7FAtdz8RlnNLvffRrsT
6ZyHiKkKuWCvW5c/5JhvWQuZuAwbJDL5U2iGcxk76orm1yzUZi+zFGX17HQo7uD7
wzUXT3MMxXRocYsRui7pbq4r92Y/WKrIDc9YraApT44WWoe4BKue4AG2ulOphmwg
t0T7OoR47fJPmmEQI49ED9CnDaQJPOpvAn8tmITA1VP2toLAzdPsfENJ/fffhVno
q+fgJyv//kVWFCme3Q4QBOjYd6KCNNDcPBKvPGWNmzFt4SZo2824pRSa3PXIEq4y
S3Rc5/knmNWc/ls+AwJVMvaBfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7KOsts
O+A+BorLyAclMmKmo1EeMB8GA1UdIwQYMBaAFE51mrLeJFRp+DEbknO1VTh+dQqQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjIzMy8wOEYwNTI2MEIz
NzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZHbjRNUnVTYzdWVk9INTFD
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RuV2FzdDRrVkduNE1SdVNjN1ZWT0g1MUNwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjIzMy8wOEYwNTI2MEIzNzgxMUVGODgzMjJCMEZDNEY5QUUwMi9Ubldhc3Q0a1ZH
bjRNUnVTYzdWVk9INTFDcEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmAVCVc4XN0PLcYW6D6ehEwebFqXjx/+JY2Us4N9VouwdnYQKKYLBvxr59Xhu
7Aamg3A/VmaqqiM+s/zhgjO4MCX+U5/iq5eURw2AYuJQUu+GHSTyl+5TTFszlrcs
XUgZghFMNYIWwJlxFoxv4wRYU9G7XH8aDFFpCLXouPLVuvrv+h/4BASX8ua73o2b
Sug3A0yUmuxS9xhCXCQArt8jd9Y7Xuv3SD39XylzDvkd0NqcnVFTvBAzZkrY/FZm
C2r4CWa1dtWv62Gs6LvO8jsnJvXh+oP99pI90CXTJOivCTjqvu57ZiCU6ESTB8dx
Q/FqWRdeMj+vunFwTbie6Tzo/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 09:27:57 2026 by rpki-client