Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
File:                     TLITKnI2puO1uWMMoDARSGMoVfc.mft (raw, json)
Hash identifier:          A825fbiGfiaGbFAnAGSCLK/MAAcrjlfU0GMLRqsoRmk=
Subject key identifier:   21:AE:DD:A0:F8:CE:B1:AE:D1:45:EE:F7:5C:5B:EC:09:02:E7:A9:61
Authority key identifier: 4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7
Certificate issuer:       /CN=A91F8F9B/serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
Manifest number:          0146
Signing time:             Mon 11 May 2026 05:19:58 +0000
Manifest this update:     Mon 11 May 2026 05:19:57 +0000
Manifest next update:     Mon 18 May 2026 05:19:57 +0000
Files and hashes:         1: TLITKnI2puO1uWMMoDARSGMoVfc.crl (hash: bSC4/AL+dwCj9u/qeKGyIfdD3eKhWnN1eou+YA0Nahw=)
                          2: 71DBC7BE5DBF11EFB8714857C4F9AE02.roa (hash: DxEefx3v0VIE+PRbAwkcYP/T2AQ/uh/zxBc6m9wV8g4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8F9B, serialNumber=4CB2132A7236A6E3B5B9630CA0301148632855F7
        Validity
            Not Before: May 11 05:19:57 2026 GMT
            Not After : May 18 05:19:57 2026 GMT
        Subject: CN=6a0166fe-037b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:7c:86:1e:f1:c4:ee:0f:79:02:5c:3d:62:
                    ac:27:c4:cd:c1:12:34:33:ab:69:80:d6:99:56:1e:
                    18:9c:d4:77:f2:01:72:5b:53:98:e5:7c:71:af:17:
                    e6:ef:bd:ba:30:d1:cf:e2:2c:87:77:25:c2:ca:29:
                    8c:64:ac:bb:54:be:3f:3d:26:5f:69:e1:ad:9f:ee:
                    68:b3:ec:28:84:d1:eb:0b:29:de:e3:96:6f:21:c7:
                    44:f7:e4:54:5b:ff:af:58:70:be:af:7f:24:da:68:
                    7f:b6:af:e4:21:a1:5b:65:9b:a5:1a:f9:40:e5:21:
                    ac:44:21:e9:f2:55:61:ee:d9:30:d7:fb:72:65:14:
                    df:43:9f:c4:2b:9d:db:70:ff:28:2a:a4:0d:c1:8c:
                    2e:0c:7a:bc:dc:77:02:4f:e2:db:71:bd:da:00:3b:
                    af:03:4f:73:4d:98:4e:87:11:67:34:16:38:c9:da:
                    7f:29:09:b9:2c:18:56:fc:cd:04:af:dc:89:5e:f8:
                    d6:6a:f6:e5:17:d1:80:cf:73:e4:a3:33:ef:29:5e:
                    20:ab:4e:f4:7e:67:90:be:8e:57:d8:dd:ea:d0:2d:
                    e8:4f:e2:bc:3a:15:c7:bb:47:59:ec:0c:07:5e:25:
                    02:6f:dc:04:4f:80:7c:1b:f7:4e:53:17:c2:d1:4e:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AE:DD:A0:F8:CE:B1:AE:D1:45:EE:F7:5C:5B:EC:09:02:E7:A9:61
            X509v3 Authority Key Identifier:
                keyid:4C:B2:13:2A:72:36:A6:E3:B5:B9:63:0C:A0:30:11:48:63:28:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLITKnI2puO1uWMMoDARSGMoVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/01EDEF965DBE11EF8A06ED40C4F9AE02/TLITKnI2puO1uWMMoDARSGMoVfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:5e:ec:8d:24:c9:ce:72:5c:04:11:b7:19:e4:37:2d:9d:
         91:ad:93:fe:97:2f:5a:65:0d:fe:05:71:e8:11:9d:2d:67:6c:
         14:e3:fd:71:cc:e6:14:bb:37:4f:48:ab:ac:2f:a7:43:7c:a1:
         e8:2b:ad:b2:68:1d:f7:12:7d:ed:5d:80:ba:d3:e0:59:19:df:
         8d:a3:b0:2a:e4:85:a2:d5:a7:a6:61:b6:ed:ae:40:1d:c1:cd:
         66:27:eb:f9:3f:a3:c2:00:15:0e:f0:e5:d1:e4:19:29:6b:c3:
         04:f5:bb:cf:49:2b:d9:31:91:c6:d5:79:bc:3f:e4:f6:70:4e:
         bb:fe:2d:fe:73:3a:c7:56:ba:50:43:79:df:83:ff:dd:10:a0:
         fe:63:e8:eb:46:d1:db:5e:97:d6:b2:33:a3:76:bf:32:b3:70:
         78:3b:60:de:9b:ff:4f:df:b2:dd:3b:2f:b3:ea:ff:a3:73:ae:
         64:10:93:ee:e5:84:ad:81:59:d1:7e:a8:98:41:cc:14:ec:40:
         d0:33:9d:22:f9:95:e6:4b:2c:ab:54:f4:33:69:ad:57:28:63:
         3b:ec:0f:ba:a0:a5:50:ba:e1:e5:ce:c3:ed:ac:9b:87:a0:1f:
         9b:68:81:3c:c7:5f:f4:b3:fa:be:3e:08:bb:72:3d:82:e8:81:
         11:20:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:47 2026 by rpki-client