Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
File:                     TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json)
Hash identifier:          0SKsq7Ax1v+efaAntaAiebLWrq+pcRk+DtRSh6SrbBc=
Subject key identifier:   BE:BD:B4:3A:6F:BA:1C:3E:4F:21:5C:33:1A:27:40:94:A9:C2:76:43
Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
Certificate issuer:       /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
Manifest number:          0146
Signing time:             Sun 01 Mar 2026 06:14:01 +0000
Manifest this update:     Sun 01 Mar 2026 06:14:01 +0000
Manifest next update:     Sun 08 Mar 2026 06:14:01 +0000
Files and hashes:         1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: 1Gfg/DMq9XRWvMGwSU71oJy0jHCbtqUnbXx0vgTJZwc=)
                          2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: iyVM1h+Ep3e3RRmXJiIJW8+nb71UCnekaP7xnKvCLmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
        Validity
            Not Before: Mar  1 06:14:01 2026 GMT
            Not After : Mar  8 06:14:01 2026 GMT
        Subject: CN=69a3d929-c44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:f9:c6:65:a6:b9:75:d5:cf:7e:33:f8:20:
                    5f:24:36:7d:32:fc:b7:e3:1d:ea:aa:84:5a:41:6d:
                    d1:09:5c:e0:c5:3c:58:00:96:23:e9:5b:a6:79:e5:
                    1a:97:67:8f:b3:dc:62:de:51:d5:87:52:23:6f:9c:
                    90:76:e1:9f:ca:83:30:a2:58:af:96:82:13:2e:22:
                    03:98:69:59:d0:89:04:a0:ec:99:18:31:87:2e:2d:
                    ca:15:1f:ba:9c:3b:00:8a:d8:7f:42:c2:47:86:d5:
                    f5:71:6d:b9:a6:7f:09:e2:fa:6d:ac:9d:9e:a6:86:
                    96:1a:31:83:31:d0:62:33:fd:65:84:70:ab:bd:b6:
                    1a:36:dc:c5:26:d4:03:ea:f3:c6:55:37:7a:60:5e:
                    7b:49:76:6a:94:20:95:eb:df:02:1a:ac:fe:20:44:
                    ce:e6:c6:c7:d6:b1:8c:e7:e8:3a:84:78:5e:4f:2a:
                    76:c9:b4:1d:97:25:95:f5:25:56:04:22:b7:c6:96:
                    f8:fe:14:a7:a4:75:36:4c:db:75:e4:c8:65:e5:35:
                    2c:7b:a6:b2:77:77:a2:96:ba:30:4a:c2:b7:67:12:
                    b8:2d:e5:b6:c8:1f:bf:b5:44:99:c7:53:89:fb:80:
                    7c:f3:3a:c4:c1:34:6e:b3:8f:44:b6:85:87:00:e3:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BD:B4:3A:6F:BA:1C:3E:4F:21:5C:33:1A:27:40:94:A9:C2:76:43
            X509v3 Authority Key Identifier:
                keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:34:e4:82:65:69:43:8c:6f:bc:4e:92:fb:b2:45:94:88:d2:
         41:79:14:d4:db:e1:65:f4:47:ff:f5:26:42:cd:b3:5a:67:84:
         d6:74:ad:b8:0a:22:34:c1:ed:7c:d9:28:1c:ed:cb:b3:f6:f9:
         89:b0:10:24:90:ce:e0:3b:17:5a:65:ed:51:7a:15:f7:fb:65:
         e3:70:ea:e7:aa:13:dc:e7:20:5f:cd:d5:9a:3f:64:2c:23:70:
         15:df:1b:0f:d9:1a:12:ba:1c:58:fd:c0:b9:e3:90:a5:35:16:
         5f:d0:64:2f:73:ab:af:19:1c:67:75:aa:f8:bb:d8:78:56:7e:
         ab:5b:e1:a2:a8:0d:28:bc:41:34:16:8d:e6:5d:f0:5e:09:73:
         c0:7d:09:7d:aa:91:c8:5d:98:13:bd:e7:91:14:2d:f0:9f:23:
         e7:c3:4d:36:71:0b:cd:f0:a7:85:ce:bf:d0:8c:f6:ae:1a:8d:
         e2:48:46:92:2f:63:77:3d:52:f1:17:a1:1b:a8:e6:47:0d:9d:
         ba:d4:fd:21:7f:5f:06:df:8b:69:f4:c4:15:7f:9c:1e:b1:96:
         2e:ae:c0:82:e8:f9:b9:c5:64:20:e0:35:e4:5c:36:36:2c:cd:
         71:20:66:5b:af:4a:69:3d:0f:72:48:c7:b3:49:a4:8b:9c:e9:
         75:c8:25:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0
MUExRUU1NDYwHhcNMjYwMzAxMDYxNDAxWhcNMjYwMzA4MDYxNDAxWjAYMRYwFAYD
VQQDEw02OWEzZDkyOS1jNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArk75xmWmuXXVz34z+CBfJDZ9Mvy34x3qqoRaQW3RCVzgxTxYAJYj6VumeeUa
l2ePs9xi3lHVh1Ijb5yQduGfyoMwolivloITLiIDmGlZ0IkEoOyZGDGHLi3KFR+6
nDsAith/QsJHhtX1cW25pn8J4vptrJ2epoaWGjGDMdBiM/1lhHCrvbYaNtzFJtQD
6vPGVTd6YF57SXZqlCCV698CGqz+IETO5sbH1rGM5+g6hHheTyp2ybQdlyWV9SVW
BCK3xpb4/hSnpHU2TNt15Mhl5TUse6ayd3eilrowSsK3ZxK4LeW2yB+/tUSZx1OJ
+4B88zrEwTRus49EtoWHAOP+pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL69tDpv
uhw+TyFcMxonQJSpwnZDMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy
ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTAyMy9GMzNCQjRBNjIyODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJ
YzRJdm9lTTBVcVZCb2U1VVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMzTkgmVpQ4xvvE6S+7JFlIjSQXkU1NvhZfRH//UmQs2zWmeE1nStuAoiNMHt
fNkoHO3Ls/b5ibAQJJDO4DsXWmXtUXoV9/tl43Dq56oT3OcgX83Vmj9kLCNwFd8b
D9kaErocWP3AueOQpTUWX9BkL3OrrxkcZ3Wq+LvYeFZ+q1vhoqgNKLxBNBaN5l3w
XglzwH0JfaqRyF2YE73nkRQt8J8j58NNNnELzfCnhc6/0Iz2rhqN4khGki9jdz1S
8RehG6jmRw2dutT9IX9fBt+LafTEFX+cHrGWLq7Aguj5ucVkIOA15Fw2NizNcSBm
W69KaT0PckjHs0mki5zpdcglPg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:49 2026 by rpki-client