Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
File:                     tendxr8J-JRYVWCHRC2UjEQDRTA.mft (raw, json)
Hash identifier:          SmiXdnSiNHxOjdfi7cnf2xUs94FxT13i4LRPvdsCmqs=
Subject key identifier:   27:CF:42:87:A2:AD:77:15:46:13:39:89:5D:D6:4B:46:0A:D6:D6:E4
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Certificate issuer:       /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
Manifest number:          0230
Signing time:             Sun 01 Mar 2026 23:35:57 +0000
Manifest this update:     Sun 01 Mar 2026 23:35:56 +0000
Manifest next update:     Sun 08 Mar 2026 23:35:56 +0000
Files and hashes:         1: tendxr8J-JRYVWCHRC2UjEQDRTA.crl (hash: EzpmuKuOK440lnCW/xRwXcmsDkjh0fe2jw3NviioTFw=)
                          2: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (hash: Lz0Fc8hLdVpUwq0rWWRGfBrBUOO4zvem/eI45NS8d2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
                          rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
        Validity
            Not Before: Mar  1 23:35:56 2026 GMT
            Not After : Mar  8 23:35:56 2026 GMT
        Subject: CN=69a4cd5d-2c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f7:e8:da:db:92:90:7a:b1:24:d9:ca:6c:c0:
                    d1:86:32:6c:e3:ba:02:a1:ae:d5:2f:44:33:dd:98:
                    13:4f:80:3d:a0:55:67:55:4a:de:23:2b:a5:93:af:
                    a2:80:0b:97:2a:1c:2b:9d:70:38:19:21:14:0e:af:
                    67:da:bd:c4:41:48:b4:09:35:b5:73:95:e3:f3:1f:
                    6d:a7:3b:85:ed:03:14:d8:17:02:4b:a0:23:11:dd:
                    c3:23:99:c8:e8:81:dd:04:5e:ff:37:5d:35:c8:c3:
                    88:e1:a1:db:77:79:32:5f:ca:22:57:56:21:89:12:
                    85:ae:b4:27:01:56:16:bc:dd:7f:ff:92:4c:10:24:
                    10:c7:3d:e7:9e:13:12:8d:a7:c4:7d:5e:34:cc:56:
                    dd:5a:f7:c0:fe:eb:e3:4e:ff:85:77:54:a1:ff:74:
                    9d:53:9a:eb:29:7b:40:3c:68:73:6c:7b:10:66:00:
                    aa:da:8b:6c:3c:50:16:37:30:c5:60:50:31:42:bb:
                    4d:3c:39:e9:b7:f4:8e:dd:f0:f7:51:c0:ad:19:65:
                    04:78:de:f1:e4:00:85:4c:6b:ef:6a:f6:ff:c2:8c:
                    df:9c:b1:c5:cb:bf:8e:6d:20:fe:50:fa:12:f1:11:
                    df:74:0f:16:59:41:30:1d:cf:0b:cc:72:4f:0a:6e:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:42:87:A2:AD:77:15:46:13:39:89:5D:D6:4B:46:0A:D6:D6:E4
            X509v3 Authority Key Identifier:
                keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:87:a8:c4:94:10:12:45:33:85:9f:7b:0b:42:a8:66:77:3f:
         64:dd:87:15:e9:f1:86:9c:86:9d:95:b5:c3:0a:b9:d7:c7:d5:
         65:a1:c5:ee:20:d8:ca:96:fd:b3:7e:4b:df:60:b4:1c:f6:c3:
         8d:80:64:0a:73:b7:36:e6:9c:04:d6:5a:a7:65:e8:4a:85:38:
         b6:49:7a:44:65:b4:a9:ea:fa:c0:32:6a:0c:51:fb:03:6c:50:
         29:bd:73:27:b6:6b:02:2b:43:be:94:7d:34:82:b1:3a:3d:a8:
         d6:b4:c3:cd:f4:c6:7a:9a:fa:f8:df:d8:c9:05:d4:81:5d:db:
         71:8a:19:94:4c:3b:4d:b7:9a:f7:21:53:fe:9a:9b:7d:1f:47:
         0b:7d:c6:0c:8a:02:af:35:75:0f:3d:0b:e2:26:53:a5:60:0c:
         a7:42:9e:bc:9a:b7:4d:8c:41:d4:2a:cb:c0:12:9f:24:90:a0:
         5d:79:5d:e4:a0:53:af:41:e1:62:50:e9:65:61:4f:73:0b:d1:
         aa:72:b3:26:12:68:77:dc:fd:29:b6:9a:ea:92:1a:a2:d8:fb:
         10:e8:38:3e:62:f0:31:f1:fe:88:34:b6:43:a2:b4:ba:e9:d1:
         c0:d8:79:3a:82:94:c0:8f:6f:09:55:14:da:55:c2:4f:0f:89:
         00:9f:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:48 2026 by rpki-client