Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          8of4R7qHFtVsBJDQI4HTEElwyw+eqQ9D7QMfT4z/iGg=
Subject key identifier:   99:58:0D:C4:65:9E:BA:DD:8D:3F:F9:36:85:AF:11:D0:BF:F7:42:37
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0419
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          0414
Signing time:             Sun 01 Mar 2026 01:14:55 +0000
Manifest this update:     Sun 01 Mar 2026 01:14:54 +0000
Manifest next update:     Sun 08 Mar 2026 01:14:54 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: jisV/DGoZCoultOp3UA3odmapQSje8UmxAu1FtRRFio=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: ypQGr8fcGrxnVWfQ2RrFsZZ4R7tmsDgEITmj6bx0ScA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Mar  1 01:14:54 2026 GMT
            Not After : Mar  8 01:14:54 2026 GMT
        Subject: CN=69a3930e-c345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2c:f0:84:ce:fc:24:2e:03:0e:b8:8c:9d:df:
                    2e:1f:7b:6e:d9:40:89:3c:25:2f:5e:da:f2:48:52:
                    ef:dc:2e:61:a4:de:59:86:d6:40:68:66:ec:e5:e7:
                    c1:0a:af:c8:fe:31:40:b4:b9:90:4b:b6:c9:99:7d:
                    16:3d:11:b7:8f:21:6f:bc:2b:17:7b:6c:24:e7:9f:
                    d8:dc:c0:96:4e:24:f0:6d:65:f6:d7:73:28:80:d8:
                    88:d5:09:62:4d:63:9e:13:10:02:fb:97:5e:a9:86:
                    b8:02:36:4e:93:67:39:9a:54:90:8b:c8:8e:a7:9e:
                    ba:73:46:35:c4:d7:e1:67:62:c0:66:ff:f8:02:e9:
                    75:46:8f:38:d2:23:e8:05:89:ad:3f:99:1f:a6:df:
                    0e:a2:b3:c6:5f:cc:00:54:9e:d5:a4:ec:92:65:d3:
                    51:6d:5b:b1:93:11:56:82:88:53:fd:00:4f:e0:1a:
                    a9:33:63:72:8f:27:5c:36:e7:16:13:58:f6:0b:29:
                    f6:74:8b:15:83:79:e5:a8:e8:85:c6:db:59:b2:c7:
                    60:2b:52:a0:83:60:d2:f8:9c:4d:c2:87:d6:27:d4:
                    8b:03:1d:a1:34:78:5f:a5:e5:57:df:9e:50:e8:d0:
                    2c:91:11:08:23:c7:ac:b3:17:18:72:df:ea:8d:64:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:58:0D:C4:65:9E:BA:DD:8D:3F:F9:36:85:AF:11:D0:BF:F7:42:37
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:04:8f:30:b4:25:f3:34:89:ec:fa:34:9b:28:91:3a:87:de:
         7b:8e:84:bd:19:87:37:fb:06:97:5d:6c:33:29:2d:2c:2e:07:
         4a:6c:f3:0c:57:04:0d:73:56:31:2c:0a:00:30:a8:4e:99:4a:
         01:7f:2a:e8:8a:3c:23:3f:bb:95:b3:01:e5:5f:e8:d7:ac:c5:
         84:7d:d6:6f:81:50:5e:c8:90:3a:89:a1:32:a5:05:5d:38:6d:
         df:73:c1:b6:55:5a:06:a1:4b:f2:71:47:61:67:0e:08:26:2b:
         01:42:d1:f8:8b:f4:8d:b9:05:ab:1a:18:c4:3e:98:c3:54:17:
         6e:8b:ae:55:27:31:60:54:18:53:28:c6:5a:de:96:90:e5:9d:
         4e:08:98:db:6a:e9:ea:ea:62:4d:e6:d8:28:55:cb:df:95:3e:
         40:58:ac:7d:94:39:ed:fa:56:ae:40:9a:f1:79:00:ef:4b:45:
         12:88:01:54:e0:46:ca:c4:68:3f:cf:90:c6:36:bb:9b:1b:74:
         93:19:b2:71:0d:ec:25:18:43:65:cd:1d:cc:0c:6e:22:1f:aa:
         85:e2:af:1d:fd:a4:0e:fa:e6:98:27:2a:35:5c:e8:08:af:08:
         55:b1:ad:8f:3e:7e:d1:9e:8f:9f:ff:19:e0:66:42:04:b1:c3:
         9a:7f:15:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQyQzUxMTAvBgNVBAUTKDREMjc4OTUxRTJCRDhBRDI4NUI5NDBBOEVBOUU1N0Uz
Nzk3MTFFNkIwHhcNMjYwMzAxMDExNDU0WhcNMjYwMzA4MDExNDU0WjAYMRYwFAYD
VQQDDA02OWEzOTMwZS1jMzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+CzwhM78JC4DDriMnd8uH3tu2UCJPCUvXtrySFLv3C5hpN5ZhtZAaGbs5efB
Cq/I/jFAtLmQS7bJmX0WPRG3jyFvvCsXe2wk55/Y3MCWTiTwbWX213MogNiI1Qli
TWOeExAC+5deqYa4AjZOk2c5mlSQi8iOp566c0Y1xNfhZ2LAZv/4Aul1Ro840iPo
BYmtP5kfpt8OorPGX8wAVJ7VpOySZdNRbVuxkxFWgohT/QBP4BqpM2NyjydcNucW
E1j2Cyn2dIsVg3nlqOiFxttZssdgK1Kgg2DS+JxNwofWJ9SLAx2hNHhfpeVX355Q
6NAskREII8essxcYct/qjWRqlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlYDcRl
nrrdjT/5NoWvEdC/90I3MB8GA1UdIwQYMBaAFE0niVHivYrShblAqOqeV+N5cR5r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xNjYzN0MyRUE0
RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9UU2VKVWVLOWl0S0Z1VUNvNnA1WDQzbHhI
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1RTZUpVZUs5aXRLRnVVQ282cDVYNDNseEhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDJDNS8xNjYzN0MyRUE0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9UU2VKVWVLOWl0
S0Z1VUNvNnA1WDQzbHhIbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASQSPMLQl8zSJ7Po0myiROofee46EvRmHN/sGl11sMyktLC4HSmzzDFcEDXNW
MSwKADCoTplKAX8q6Io8Iz+7lbMB5V/o16zFhH3Wb4FQXsiQOomhMqUFXTht33PB
tlVaBqFL8nFHYWcOCCYrAULR+Iv0jbkFqxoYxD6Yw1QXbouuVScxYFQYUyjGWt6W
kOWdTgiY22rp6upiTebYKFXL35U+QFisfZQ57fpWrkCa8XkA70tFEogBVOBGysRo
P8+Qxja7mxt0kxmycQ3sJRhDZc0dzAxuIh+qheKvHf2kDvrmmCcqNVzoCK8IVbGt
jz5+0Z6Pn/8Z4GZCBLHDmn8VRw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:49 2026 by rpki-client