Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
File:                     TYBwR6bhsNMLr2Qme_lSJIr906k.mft (raw, json)
Hash identifier:          cAUm7XmeEPGGPrDwcrSzJ4d2cjQEV2kUEetXvRVDAcU=
Subject key identifier:   C5:A2:C9:18:CD:2E:CE:CA:25:40:90:5F:6F:8C:E7:56:32:5E:5A:77
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Certificate issuer:       /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
Manifest number:          40
Signing time:             Mon 11 May 2026 08:39:41 +0000
Manifest this update:     Mon 11 May 2026 08:39:40 +0000
Manifest next update:     Mon 18 May 2026 08:39:40 +0000
Files and hashes:         1: TYBwR6bhsNMLr2Qme_lSJIr906k.crl (hash: jGC+9ZIygAWSofDiDWRlc96U+V+/k6SiMPBt6ofItBI=)
                          2: 07DEEBF0F20311F09027AFE1496F56BC.roa (hash: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
        Validity
            Not Before: May 11 08:39:40 2026 GMT
            Not After : May 18 08:39:40 2026 GMT
        Subject: CN=6a0195cd-0bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:07:f6:cf:5b:b8:cb:5d:50:d0:f6:d7:3a:
                    b1:6c:67:ce:47:6d:a0:13:d9:05:6c:a4:53:24:46:
                    49:83:14:25:29:db:44:b0:94:33:c6:50:d0:43:fd:
                    1b:ea:99:55:cc:cd:67:5a:bc:2e:72:54:19:e1:2e:
                    54:83:85:9e:79:a2:f9:d3:99:9e:48:ef:3b:c1:5f:
                    6b:3f:0c:f6:c4:8d:8d:ba:b9:2d:be:ac:80:d3:4c:
                    5c:3a:11:3d:91:f8:6d:47:57:c4:b4:09:0e:9b:40:
                    6f:3d:d6:d3:7e:03:a6:76:0d:1c:5b:31:1b:95:c4:
                    90:af:e2:21:89:9f:45:7f:cd:f4:27:b1:e4:f5:4b:
                    b0:7e:1e:5c:c2:e7:53:e3:36:f5:58:5b:a0:92:c3:
                    8b:db:34:01:aa:ee:8e:cb:2e:52:c2:e0:14:06:b3:
                    60:9d:4a:82:cc:c1:58:b6:e8:58:d1:43:61:4c:ff:
                    cd:e7:02:7e:51:9c:75:4d:8b:7b:77:e9:e1:96:0f:
                    21:84:22:ff:47:99:d6:85:8d:32:88:21:17:9e:fb:
                    de:4e:0d:6a:cc:42:c2:db:9b:ee:5f:a4:7a:2b:06:
                    5d:88:63:aa:7b:4d:bf:f7:d6:9f:0f:51:ca:43:b9:
                    01:8c:92:65:c6:96:84:b1:16:35:9f:84:05:f3:40:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:C9:18:CD:2E:CE:CA:25:40:90:5F:6F:8C:E7:56:32:5E:5A:77
            X509v3 Authority Key Identifier:
                keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:02:d6:59:ea:81:0a:bc:0a:d9:32:8a:8b:da:e2:26:69:89:
         96:3d:e4:fe:8f:b5:62:59:05:f0:4e:08:ef:37:ef:33:8b:6c:
         98:96:61:53:f1:3a:a3:7a:3d:1b:7e:ff:7c:f6:b0:ae:a4:52:
         c5:d1:8b:27:fd:77:a1:9b:30:c3:b9:03:ce:d8:91:88:13:30:
         28:30:80:3e:12:e2:d2:a8:59:20:d6:aa:8f:32:40:39:26:72:
         67:b4:bd:b2:7d:18:fa:ec:9a:74:3c:0e:26:2e:04:3e:3d:0b:
         79:c8:b5:46:4e:46:b7:f4:5e:25:ff:79:4b:32:8d:8f:6f:66:
         19:a6:a0:58:b5:32:75:fb:fb:38:1f:1e:9f:c1:51:9b:77:66:
         8b:76:68:11:ff:5a:61:84:da:70:7f:67:f8:f1:fd:03:e2:e1:
         17:54:c5:2d:ad:cc:cc:c7:b3:82:ef:c1:67:37:fd:f6:47:69:
         fe:3a:77:28:c1:8c:9a:42:29:20:e0:fa:0f:82:6f:ed:32:3b:
         6b:52:8e:c4:e9:10:df:64:5b:2c:62:04:6f:6a:5e:64:89:6e:
         72:7c:0c:4d:85:35:44:0a:49:08:2e:0d:c6:3c:49:22:16:55:
         d0:26:db:73:7b:33:42:a0:6d:0e:d0:33:a8:bc:a1:ff:3c:53:
         72:b5:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:20 2026 by rpki-client