Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
File:                     tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json)
Hash identifier:          Dyx8pvaTFCSlsynyljVGQfmLfXu452sATNwcIk+SNAs=
Subject key identifier:   F8:39:2A:01:23:B8:22:2B:A6:48:5B:4B:4E:37:56:48:67:84:43:B4
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Certificate issuer:       /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial:       28AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
Manifest number:          2890
Signing time:             Tue 12 May 2026 15:36:03 +0000
Manifest this update:     Tue 12 May 2026 15:36:02 +0000
Manifest next update:     Tue 19 May 2026 15:36:02 +0000
Files and hashes:         1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: 6ZdJPacjPr4r1vIUUMiHTi5dh1rMJtXdPu1X3Y/FCSY=)
                          2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: UmJO0KSnCSvHXcJ5e26UAgnZ2y1lkvWGmHME2yVB9kg=)
                          3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10413 (0x28ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
        Validity
            Not Before: May 12 15:36:02 2026 GMT
            Not After : May 19 15:36:02 2026 GMT
        Subject: CN=6a0348e3-40b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:9c:05:5d:af:52:0e:d4:9c:e7:1c:5b:5e:
                    91:14:45:80:40:3e:00:a8:1d:77:06:b1:e0:e2:61:
                    d0:46:01:d2:49:9c:91:08:73:b8:1d:d8:db:dc:c2:
                    5e:5e:10:9c:51:1e:f3:c7:35:f6:db:da:aa:bf:f2:
                    45:32:94:12:cb:46:11:f8:f3:5f:7d:96:e8:5a:e2:
                    13:c5:48:2b:91:8a:f6:0e:bb:cc:ea:5e:3a:cb:50:
                    32:2a:e0:33:9e:2f:4a:7b:7e:81:c1:30:16:1b:e2:
                    95:85:f0:2f:8e:1c:6c:54:50:53:e3:06:20:df:73:
                    40:af:7c:ef:7a:5b:8c:98:2a:0f:d9:96:a7:2e:39:
                    df:43:aa:65:2c:60:6b:21:19:94:ac:2d:b9:7e:bd:
                    88:f5:76:f7:61:b0:96:2f:b6:61:61:b2:34:f4:58:
                    be:fc:d2:c4:14:7a:9c:4a:b3:b9:37:75:44:47:d2:
                    db:67:d3:9c:a5:af:f6:4b:84:5b:9d:b6:56:1d:0a:
                    9a:90:38:88:78:fa:f9:de:4a:73:1b:fb:05:65:8f:
                    bd:87:ad:88:d7:2e:87:e7:20:33:c7:8f:26:04:1b:
                    55:bc:23:5c:10:77:e2:a7:5f:8c:15:32:4f:7c:9b:
                    4a:1d:1f:ac:06:d8:29:c3:0a:a5:c8:bd:5d:a9:5c:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:2A:01:23:B8:22:2B:A6:48:5B:4B:4E:37:56:48:67:84:43:B4
            X509v3 Authority Key Identifier:
                keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0f:47:00:92:51:4b:28:ac:1d:92:71:bc:73:9d:15:24:a6:
         3f:09:65:a8:35:1e:35:c2:d1:32:7f:18:1d:2b:8e:e6:6f:49:
         b7:67:a8:f0:39:f2:fa:b8:ca:6b:1b:97:01:dc:22:cd:78:c6:
         61:c2:86:5e:33:2f:58:2b:65:d6:49:ae:79:1a:81:56:99:93:
         c5:0e:2c:f4:85:49:49:fc:8b:bf:9a:65:c7:bc:bc:9f:35:7b:
         c9:41:4b:6d:2f:10:6b:be:06:43:88:cd:1e:9c:a5:9c:69:8b:
         ab:5a:a5:07:ff:07:a0:67:9c:36:1a:23:eb:65:0b:e0:0b:1b:
         67:e1:9c:8d:90:8a:e2:99:36:90:52:dd:cb:fd:84:28:12:8f:
         6c:c4:fc:f8:e5:53:e3:81:77:00:f6:59:cd:b6:36:b2:1a:a3:
         2f:52:23:9d:db:41:2d:96:cf:20:57:b7:ad:06:35:ce:74:b7:
         cb:23:da:e3:5f:c9:82:82:57:90:d1:87:9c:14:f7:dc:fa:fc:
         94:74:c6:a3:58:05:23:ec:6c:ec:c7:34:b5:d5:0d:45:8c:00:
         c2:be:79:7b:5c:e5:bb:60:49:bd:2d:69:1e:17:d9:48:b7:af:
         2a:b7:c4:de:80:24:8d:b1:9e:02:d2:07:ed:68:95:fd:1d:60:
         d1:f6:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:59 2026 by rpki-client