Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
File:                     tazSZrqWgpXIzcB1c3QT3XcbGf8.mft (raw, json)
Hash identifier:          hv8Yl69cUkF9Ta3vDvGxu3lvMB/Qgvf/NVRagNkfxZ0=
Subject key identifier:   06:F2:A9:DF:71:79:58:A5:BA:38:2D:5F:3F:C6:57:C6:D4:7E:3C:9B
Authority key identifier: B5:AC:D2:66:BA:96:82:95:C8:CD:C0:75:73:74:13:DD:77:1B:19:FF
Certificate issuer:       /CN=A9139FBB/serialNumber=B5ACD266BA968295C8CDC075737413DD771B19FF
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
Manifest number:          25
Signing time:             Sun 01 Mar 2026 10:17:13 +0000
Manifest this update:     Sun 01 Mar 2026 10:17:12 +0000
Manifest next update:     Sun 08 Mar 2026 10:17:12 +0000
Files and hashes:         1: tazSZrqWgpXIzcB1c3QT3XcbGf8.crl (hash: QeMwiq8hVmFT4K1AETMpkUCIgIFTLm1gWymE4nKPglg=)
                          2: 068272B8EB1411F088D77099366F56BC.roa (hash: BzioGtQex10DUW3Ewz2viC/+ENRqNsiDR9OZl6xdYg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.crl
                          rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139FBB, serialNumber=B5ACD266BA968295C8CDC075737413DD771B19FF
        Validity
            Not Before: Mar  1 10:17:12 2026 GMT
            Not After : Mar  8 10:17:12 2026 GMT
        Subject: CN=69a41229-062f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:fa:8c:df:ac:51:10:1f:df:49:fa:3a:ef:
                    71:b8:e6:cd:07:e5:6f:47:8b:30:3c:c0:5f:66:1e:
                    7c:a8:ce:5e:e3:7e:74:43:51:a2:15:4f:cf:6c:e9:
                    f6:95:e6:ee:14:50:6c:85:b4:18:42:6c:c9:84:5b:
                    dd:4d:9e:59:b1:63:80:c4:0b:b7:65:ff:8f:44:2f:
                    6c:82:e8:ae:93:63:77:58:26:63:d8:89:41:a5:28:
                    77:34:77:bc:c0:46:b9:79:e7:8e:c1:14:b2:a0:2a:
                    9d:af:c6:1e:da:c2:23:a5:05:7c:19:ea:fe:4b:1e:
                    6b:1f:31:63:fc:34:9f:aa:37:ff:0c:7c:a1:ef:2c:
                    64:ab:52:e8:af:6c:cc:99:18:05:d6:51:84:1b:f4:
                    fa:7c:9d:b6:20:2a:d7:52:ca:ab:16:eb:ed:dd:e0:
                    bd:ac:98:64:37:6f:a3:62:4b:b2:d1:19:85:77:3f:
                    97:9f:96:b4:bb:00:d3:75:69:11:de:28:8c:59:8d:
                    01:7b:cf:12:9e:c5:54:2e:e7:d5:be:6d:82:49:09:
                    dd:41:8f:75:c2:1f:a5:51:1f:82:74:a9:50:3f:1d:
                    43:f9:bc:a5:fb:4a:88:f1:ed:1c:9e:99:35:15:67:
                    1a:c0:8d:68:8a:63:b5:1f:bb:52:ed:7a:b3:21:4d:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F2:A9:DF:71:79:58:A5:BA:38:2D:5F:3F:C6:57:C6:D4:7E:3C:9B
            X509v3 Authority Key Identifier:
                keyid:B5:AC:D2:66:BA:96:82:95:C8:CD:C0:75:73:74:13:DD:77:1B:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:74:ff:9c:73:86:29:53:87:97:81:44:b6:aa:40:d1:7e:1a:
         18:bb:54:84:ca:09:93:82:07:db:2e:6b:42:ae:70:a7:ad:ac:
         fa:73:bb:73:06:0a:c5:f9:23:79:f2:de:e9:05:dd:ac:75:82:
         03:e5:45:3b:cd:57:e0:1e:60:7f:c0:b1:f8:4c:e7:7e:98:ff:
         dd:a9:e9:d0:9b:1e:41:ae:7f:c1:0c:3a:7d:5c:34:c6:d4:9c:
         e8:16:dc:fd:94:fd:50:74:96:9d:42:22:ee:64:c3:b9:f1:ce:
         07:76:60:02:dc:ef:ce:2e:b7:2b:5e:38:7a:1e:72:9d:02:4e:
         d3:a3:3e:44:fa:d6:df:26:43:10:a9:d7:5e:37:89:50:2f:e4:
         c9:99:cf:2c:d5:85:0c:8e:d3:84:88:98:94:9e:b0:38:e1:51:
         3e:1f:24:46:07:2c:30:63:91:81:e7:d2:60:ab:df:d3:0c:47:
         12:c2:03:56:6d:2f:0e:06:a0:47:90:e0:76:5a:a7:83:c0:58:
         59:1c:f1:a1:04:98:e3:34:a3:98:93:d6:f8:76:bc:df:31:6b:
         aa:de:17:07:20:07:cd:e6:4c:11:8f:a3:e8:02:91:b9:8f:e7:
         4f:fa:e9:87:6e:a3:e0:ac:ba:6e:08:12:1a:15:60:b2:f9:74:
         3e:fa:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:43:14 2026 by rpki-client