Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
File:                     tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json)
Hash identifier:          ij6DkwcKYiJIc6ulQLCPG2ZcaiFBkdt9j+L9XuEnanM=
Subject key identifier:   6B:54:46:EA:A0:FB:27:2E:13:8C:6F:8B:20:95:1A:03:7C:61:B6:19
Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
Certificate issuer:       /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Certificate serial:       3537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
Manifest number:          3525
Signing time:             Sat 28 Feb 2026 14:55:36 +0000
Manifest this update:     Sat 28 Feb 2026 14:55:36 +0000
Manifest next update:     Sat 07 Mar 2026 14:55:36 +0000
Files and hashes:         1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: xZT0CcnuA7kqFYdlMf7xh48JaFboWDewVnKh/85VPfc=)
                          2: 2DB78476C69411F09B705765C4F9AE02.roa (hash: w34KSwkw6CEkBPQcFxY9qpFzqznOsG3ipoXTw6sgBMc=)
                          3: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
                          rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
        Validity
            Not Before: Feb 28 14:55:36 2026 GMT
            Not After : Mar  7 14:55:36 2026 GMT
        Subject: CN=69a301e8-e055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:99:0f:a0:b8:17:3e:57:0f:64:b8:1b:59:
                    6f:fa:6e:c2:bd:97:44:bb:38:bb:f3:c4:a1:11:86:
                    1f:45:1d:7e:30:36:1a:4d:6f:bd:86:bb:c3:f5:31:
                    cd:e4:32:5c:40:02:5f:42:e1:a5:fd:b8:76:23:7f:
                    6d:ac:03:cc:fa:18:55:fe:71:de:33:45:64:cd:32:
                    91:b8:4f:60:a3:5b:70:14:b3:54:a0:6f:ce:10:3d:
                    46:7b:73:64:85:a2:c7:05:2e:b7:cf:a1:bd:1e:b1:
                    d7:d7:2f:ad:4b:d5:dc:61:df:c4:98:f6:dd:03:02:
                    4d:0c:1b:d8:50:a2:16:a6:56:48:5a:4e:3e:c8:4b:
                    c7:c3:5b:a6:88:93:fb:e8:67:ba:3c:ed:ca:01:31:
                    a5:7d:cb:fc:6c:94:ca:2b:8c:ea:ea:f2:29:81:2b:
                    97:c2:f9:09:46:8b:a7:5a:d4:fd:0a:df:27:cf:ae:
                    93:67:32:ff:5e:af:24:06:a8:c6:e0:bb:bf:cb:87:
                    fc:34:6b:8a:a0:e6:9d:f9:9e:9d:45:63:6d:ea:60:
                    0d:d5:c1:89:bb:6a:32:31:0e:ae:48:5b:00:7c:d8:
                    a3:18:bd:d4:0a:5e:5e:be:4c:4e:52:93:cf:59:d0:
                    09:d5:b3:32:e3:0a:4e:fb:a1:57:f2:18:7c:0b:bf:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:54:46:EA:A0:FB:27:2E:13:8C:6F:8B:20:95:1A:03:7C:61:B6:19
            X509v3 Authority Key Identifier:
                keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9d:63:93:f7:eb:00:04:90:5d:57:28:3f:07:db:aa:cf:04:
         99:f1:95:f2:f6:f8:e3:d7:9b:5b:10:08:ec:34:5f:10:70:3a:
         e4:17:5a:9e:81:af:04:d1:e6:8c:3c:8f:f3:36:44:ca:c8:b6:
         8a:43:02:9e:83:35:30:d9:7a:df:20:c5:2d:0d:56:fd:75:66:
         c7:52:3a:a8:e7:51:34:72:68:a5:02:c6:1d:b6:cf:40:11:24:
         b1:07:bc:76:e9:bd:27:c4:fa:df:21:25:d5:26:b7:e6:ef:2f:
         84:5c:b4:0b:4c:c6:3c:c7:28:22:4c:46:16:3d:1d:89:d1:a0:
         cf:c3:56:e2:bb:5e:63:17:54:66:c3:49:7e:38:0b:c1:49:cb:
         45:53:9a:06:07:6a:3d:f5:a7:96:c8:9d:e3:b1:1a:75:24:1d:
         a6:31:cd:44:2e:88:72:92:96:13:b4:da:84:9c:b3:61:ae:9b:
         b5:01:79:9b:c2:99:8f:44:a0:99:ea:fe:a7:cb:3e:29:72:b1:
         c6:8e:cc:a9:db:c2:37:7f:9a:92:d2:3a:f4:11:47:f5:d5:d0:
         c5:f2:5b:57:6d:1a:6a:bc:94:ba:08:f1:01:87:5e:93:a5:1f:
         56:cc:ba:48:62:ff:8e:c6:e4:1a:9c:e8:fa:9d:4a:84:6e:33:
         4c:3a:3f:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3
NEQ3RTlENzMwHhcNMjYwMjI4MTQ1NTM2WhcNMjYwMzA3MTQ1NTM2WjAYMRYwFAYD
VQQDDA02OWEzMDFlOC1lMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAaZD6C4Fz5XD2S4G1lv+m7CvZdEuzi788ShEYYfRR1+MDYaTW+9hrvD9THN
5DJcQAJfQuGl/bh2I39trAPM+hhV/nHeM0VkzTKRuE9go1twFLNUoG/OED1Ge3Nk
haLHBS63z6G9HrHX1y+tS9XcYd/EmPbdAwJNDBvYUKIWplZIWk4+yEvHw1umiJP7
6Ge6PO3KATGlfcv8bJTKK4zq6vIpgSuXwvkJRounWtT9Ct8nz66TZzL/Xq8kBqjG
4Lu/y4f8NGuKoOad+Z6dRWNt6mAN1cGJu2oyMQ6uSFsAfNijGL3UCl5evkxOUpPP
WdAJ1bMy4wpO+6FX8hh8C7+bqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtURuqg
+ycuE4xviyCVGgN8YbYZMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE
OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI
TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoZ1jk/frAASQXVcoPwfbqs8EmfGV8vb449ebWxAI7DRfEHA65BdanoGvBNHm
jDyP8zZEysi2ikMCnoM1MNl63yDFLQ1W/XVmx1I6qOdRNHJopQLGHbbPQBEksQe8
dum9J8T63yEl1Sa35u8vhFy0C0zGPMcoIkxGFj0didGgz8NW4rteYxdUZsNJfjgL
wUnLRVOaBgdqPfWnlsid47EadSQdpjHNRC6IcpKWE7TahJyzYa6btQF5m8KZj0Sg
mer+p8s+KXKxxo7MqdvCN3+aktI69BFH9dXQxfJbV20aaryUugjxAYdek6UfVsy6
SGL/jsbkGpzo+p1KhG4zTDo/Wg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:39 2026 by rpki-client