Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          fgl0MvlVDGOfbxiAJSu+n1JZ3uNliVv8MjT+NdaTKF4=
Subject key identifier:   C5:34:32:86:05:B9:0E:AF:AD:8C:FE:8A:47:A7:D3:C4:B3:F5:DB:49
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          D8
Signing time:             Mon 02 Mar 2026 02:50:14 +0000
Manifest this update:     Mon 02 Mar 2026 02:50:12 +0000
Manifest next update:     Mon 09 Mar 2026 02:50:12 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: g8ajMwyAha4XwRfOZbIEZL6tKIT7IGQ7ogyeLHmQIAk=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Mar  2 02:50:12 2026 GMT
            Not After : Mar  9 02:50:12 2026 GMT
        Subject: CN=69a4fae6-5053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:6a:12:78:b2:6d:cf:2b:a2:03:22:b7:97:
                    f3:f9:2b:2e:71:18:a2:e1:08:c0:38:16:0a:a4:8e:
                    fb:7d:dd:9c:6c:ad:2d:07:d9:cb:53:05:4b:13:4a:
                    4c:70:a7:c2:46:10:d1:5e:96:f1:3c:79:4e:63:38:
                    61:af:38:81:91:67:3b:c6:52:5f:56:4e:27:1c:19:
                    52:b0:84:cb:2b:0d:00:a9:5f:28:49:dd:77:c3:d5:
                    74:65:11:7d:cd:9a:dc:e2:15:db:ab:10:e8:bb:63:
                    c7:d1:8e:34:f8:97:95:68:d6:b9:5c:18:61:e9:e3:
                    4d:f9:e3:d9:c1:b4:c3:54:6e:44:5f:85:91:3e:87:
                    4a:1f:2d:95:ea:fd:0e:70:d7:c1:a5:83:c0:10:c8:
                    f6:65:57:11:fa:c9:17:79:b7:ca:28:72:68:e1:3b:
                    d8:d1:23:c7:12:65:41:d0:10:ee:c6:8a:30:a1:f0:
                    95:9b:90:dd:5c:57:87:ef:cc:2c:99:af:21:2a:ec:
                    f4:09:ce:9c:67:8c:95:dc:4c:d9:25:41:c0:93:b5:
                    1d:de:c2:d6:38:f5:63:50:07:7f:9b:5e:86:f0:87:
                    3b:c1:bb:db:07:45:a3:52:37:29:ab:90:fa:d0:4f:
                    d7:ca:56:fe:11:26:76:02:a1:8a:c8:5a:be:af:42:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:34:32:86:05:B9:0E:AF:AD:8C:FE:8A:47:A7:D3:C4:B3:F5:DB:49
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7b:19:33:8d:bb:9c:48:97:5e:60:42:5d:ec:dc:13:d0:72:
         4b:c3:3a:1a:f6:d2:cf:ce:6f:70:11:2f:7d:fa:4b:eb:f8:62:
         1a:4e:3b:dd:05:62:93:bb:45:eb:92:bd:93:02:5b:5a:c0:be:
         cc:5a:53:74:ba:2f:ea:b0:45:01:af:59:50:e8:07:8c:e7:64:
         be:db:3a:d2:aa:81:37:fd:3d:75:77:ca:a3:78:d4:34:f0:16:
         51:28:d8:2c:79:66:62:08:4c:14:b3:c8:29:6a:ef:de:e6:ce:
         d9:b2:af:40:63:5f:ec:f5:98:cc:cb:a6:79:9f:32:00:2d:b6:
         a8:07:1d:d2:a2:1a:96:72:9d:1d:c3:f6:b7:80:b4:08:d2:b6:
         76:7b:6b:e1:11:0d:ac:b9:6e:20:28:0b:53:4c:62:5a:2b:53:
         cb:00:f2:29:2e:6e:30:fe:db:84:8d:4c:7d:05:cb:fd:af:ce:
         e7:52:50:5d:97:ea:25:04:67:70:45:06:04:ab:e6:80:5f:2f:
         b3:da:54:f1:a0:c6:fc:d0:0b:7c:38:1b:ac:b0:f0:a5:34:b6:
         73:53:56:33:cb:a9:be:93:4b:0f:51:4d:93:64:eb:21:dd:e4:
         83:01:b2:41:9b:41:de:b7:b4:c0:11:b4:a0:c6:1d:67:e9:dd:
         15:4d:26:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:39 2026 by rpki-client