Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
File:                     TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json)
Hash identifier:          9m8grdL3V5rhlVNHoyTM/VS0OSYp3XoveCt2lJ0DqSU=
Subject key identifier:   EB:B9:39:0C:E7:03:92:47:17:13:2C:74:84:EC:07:A1:5C:32:46:D8
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       0ABB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
Manifest number:          0AA2
Signing time:             Mon 02 Mar 2026 19:25:00 +0000
Manifest this update:     Mon 02 Mar 2026 19:24:59 +0000
Manifest next update:     Mon 09 Mar 2026 19:24:59 +0000
Files and hashes:         1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: u8W3Kyryif5nYpIqsfzJ4LTCVAFiRWJZkV6o7gXeDJs=)
                          2: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: EbOmNI7pCvPrjoYlxuO9Tzo0OfRycsU5uM6JLnWzUkE=)
                          3: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: UKzO6fJ8O7kuibwIUH1aGZnI4vviF9UxI9CQHk+Pqrc=)
                          4: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: OHHlg82SYMCj0nhG6pczg1mnIfcmqYmPHe/Fcr0oG4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: Mar  2 19:24:59 2026 GMT
            Not After : Mar  9 19:24:59 2026 GMT
        Subject: CN=69a5e40c-e72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:67:e3:70:92:c7:05:a8:78:35:5f:3b:29:
                    fe:39:52:a3:5d:55:4a:fe:b3:70:0a:c4:20:97:0c:
                    6c:b8:d5:53:43:24:d3:ae:6a:fa:a1:8a:dd:8b:1c:
                    ab:84:3c:50:74:65:33:f1:91:49:d9:63:c0:dc:52:
                    47:6d:fc:58:0e:20:ed:70:2a:6a:e7:d8:7b:81:be:
                    67:12:63:d8:87:aa:40:e5:c5:94:aa:64:29:b1:e4:
                    d5:2e:21:8c:9e:26:3e:2c:57:15:ce:33:cc:79:14:
                    8b:95:49:c5:ba:e2:36:4b:9a:d1:ed:cc:c8:5d:52:
                    24:9e:1a:63:32:20:3f:cf:78:78:2d:ec:92:98:d0:
                    3d:1e:b6:19:9b:a4:6d:97:bf:fe:2d:3a:45:6b:ba:
                    f3:20:c4:da:b2:a6:5b:60:33:22:bb:f8:29:d9:02:
                    f1:a5:6f:b1:8b:d0:d0:8a:95:c8:48:71:31:ad:19:
                    ce:6b:8d:f9:08:d7:5a:25:e5:39:f9:d4:18:d7:5f:
                    01:86:42:9f:4e:db:b2:80:62:83:a8:7c:20:9f:56:
                    12:32:94:8c:56:0d:e6:17:4d:0a:48:bf:3d:7b:fd:
                    62:5e:5b:97:37:bb:b4:66:8c:e5:5e:bc:25:67:da:
                    90:6e:b9:32:13:f3:3e:48:dc:d0:c3:76:0c:c7:71:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:39:0C:E7:03:92:47:17:13:2C:74:84:EC:07:A1:5C:32:46:D8
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:21:45:da:d4:f7:bb:c3:f1:cb:b1:5d:aa:ab:09:ef:9c:05:
         cc:81:af:ab:a5:47:03:47:e4:c8:77:32:03:fb:e8:a6:bc:85:
         14:5b:7a:6d:47:77:37:07:55:3d:9a:15:7c:78:a4:5f:c0:1f:
         fb:48:c9:7f:22:01:c8:41:aa:62:23:58:c8:37:62:b9:dd:f0:
         1a:90:c2:bb:43:a8:1d:1c:64:69:2d:e8:9c:df:17:2b:ff:48:
         72:89:1d:7e:40:be:1c:f4:90:9c:07:1e:11:0d:e1:2d:f0:47:
         88:ef:a7:a9:10:b1:51:b8:68:c6:64:56:0a:4b:06:5c:05:ae:
         85:67:1d:5d:f1:ce:81:45:c8:05:d7:02:fd:f0:83:f2:c7:8d:
         6f:9d:67:23:8f:49:39:15:03:55:ea:ec:e3:e0:4a:45:b3:10:
         a5:6d:44:26:bf:4c:a5:aa:99:c0:3d:60:7d:f5:bd:63:df:a6:
         d2:ef:2b:81:70:01:5e:e9:65:63:f3:da:48:5a:ac:ad:4a:67:
         9f:a9:46:b9:9d:78:96:57:ab:f7:74:99:93:70:e4:b0:03:34:
         7c:c8:8d:1c:4f:23:45:25:63:3f:55:b0:c6:6b:69:41:1f:1b:
         0d:2e:18:15:02:70:df:60:64:48:c1:ee:2f:c5:6f:7a:61:13:
         50:cb:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:21 2026 by rpki-client