Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
File:                     TA-99pF0oywUEWcaumPJ6rdWs4E.mft (raw, json)
Hash identifier:          fCfSQV1oqsnRruBJM/Nj6OniFKpRI43MZPBGJads3/o=
Subject key identifier:   30:53:E9:E0:1B:F7:C8:46:62:97:5F:AA:E0:10:27:EC:A2:20:E7:04
Authority key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
Certificate issuer:       /CN=A915F38F/serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
Manifest number:          32
Signing time:             Sun 01 Mar 2026 10:07:18 +0000
Manifest this update:     Sun 01 Mar 2026 10:07:18 +0000
Manifest next update:     Sun 08 Mar 2026 10:07:18 +0000
Files and hashes:         1: TA-99pF0oywUEWcaumPJ6rdWs4E.crl (hash: dkbe/NtwxB5N+OpxRPMSTd/rQyg+aQV/KrOkj8IPfQ8=)
                          2: 75576E0ED0E911F0BF43FD85C4F9AE02.roa (hash: ipQdS/VlQkOxf1Hsp4sheFfGELACfRYo77XmCiNbqFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl
                          rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
        Validity
            Not Before: Mar  1 10:07:18 2026 GMT
            Not After : Mar  8 10:07:18 2026 GMT
        Subject: CN=69a40fd6-5e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:52:4a:39:ff:79:95:bb:29:0f:3a:c5:36:
                    61:e1:06:61:b1:ba:88:cc:18:8e:52:e6:d1:dd:8d:
                    8e:6c:0c:d8:86:f8:5e:15:8d:9d:73:fd:c1:36:25:
                    fe:76:7c:f4:47:b6:dc:99:17:cc:76:94:56:2a:0f:
                    91:13:78:80:76:36:2f:6b:fa:45:d8:9e:a5:da:cf:
                    17:69:83:42:28:21:63:5a:36:b4:d5:2e:f4:00:33:
                    b9:c4:91:4f:4c:9e:87:2d:ed:17:eb:33:a8:b2:fe:
                    67:28:ed:3f:e4:5d:4a:c2:7d:9e:ae:26:db:9f:fa:
                    90:bc:64:fe:f1:1f:a4:67:d0:ec:ae:9a:22:bc:2d:
                    f0:18:ec:83:81:c7:20:2c:d2:f8:a7:23:4c:fe:79:
                    d4:c3:eb:4b:45:0a:3e:a9:89:22:46:25:93:31:86:
                    51:29:5c:cb:73:1d:a1:c6:f8:02:7c:ac:83:6a:c3:
                    08:19:6f:2a:02:40:5c:51:de:94:4e:e3:86:21:4c:
                    35:35:20:a1:5f:e8:ad:f7:0e:5c:8e:9c:29:15:87:
                    77:30:e8:e0:33:1e:a7:b4:56:48:3f:3b:e1:ac:71:
                    cb:3f:52:b0:9a:24:24:11:89:42:f3:7b:e0:f7:6e:
                    e6:c1:44:d8:61:a5:c7:cc:eb:ee:98:2d:17:c7:63:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:E9:E0:1B:F7:C8:46:62:97:5F:AA:E0:10:27:EC:A2:20:E7:04
            X509v3 Authority Key Identifier:
                keyid:4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:c8:28:1e:9b:39:bc:36:85:b7:8a:24:c5:a5:4a:d8:01:
         94:8e:27:4e:2c:4b:94:e3:a6:f3:89:af:bb:a8:97:1f:51:b8:
         6b:21:4a:d8:e0:85:30:d6:78:0c:49:b3:0a:a0:7e:c8:74:96:
         90:4d:19:a8:b6:fb:68:d0:34:44:59:a4:40:f0:1e:9b:bc:77:
         8b:87:53:37:11:10:f4:9d:83:07:de:c9:be:03:6e:73:49:66:
         e2:ae:67:72:41:80:a0:2b:a6:40:61:9b:7d:34:c8:69:82:a1:
         72:95:da:02:8a:8d:e1:9e:02:5d:7c:d3:6f:12:1d:18:8c:a2:
         6e:df:61:1a:17:9e:4a:ec:cd:0b:ad:b7:31:a4:51:35:5c:47:
         96:02:fc:70:e8:ea:48:b3:17:06:1f:b0:1c:dd:e6:6a:32:9f:
         73:33:77:73:04:05:8b:f0:0a:7b:8f:e2:eb:7f:35:c9:6a:9c:
         a6:2d:ff:88:98:8a:76:43:31:65:a8:fb:ac:42:e5:ec:92:b9:
         b4:60:9b:62:f5:cc:b5:66:c1:e2:3c:ac:d0:92:77:95:a2:49:
         7d:7f:41:6c:49:18:de:89:c6:6c:1a:82:cb:33:b5:7f:52:7f:
         7f:8e:04:98:b2:90:8d:33:29:52:b7:a1:cb:70:74:c3:eb:80:
         82:b9:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:03 2026 by rpki-client