Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
File:                     tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json)
Hash identifier:          pd0iEFN9J4jzO8JEh0prCZKGKgHawC3q63XY+oMJRBs=
Subject key identifier:   5B:B5:EE:07:57:5C:C9:12:3A:01:40:96:C9:DC:57:8F:AB:13:D9:32
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
Manifest number:          9C
Signing time:             Sun 01 Mar 2026 23:06:33 +0000
Manifest this update:     Sun 01 Mar 2026 23:06:32 +0000
Manifest next update:     Sun 08 Mar 2026 23:06:32 +0000
Files and hashes:         1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: OT3rQmLifZTaW8e0tcLr0OTGHflrlwA/lDzptoFR75s=)
                          2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: bVsu56znidGrIajKiO+ImUloohJgR7Y2wqgwesz6s7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: Mar  1 23:06:32 2026 GMT
            Not After : Mar  8 23:06:32 2026 GMT
        Subject: CN=69a4c679-229f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:59:1d:2b:d7:f3:20:d6:c8:87:16:d7:92:
                    d1:75:67:d1:b6:8e:17:2f:9c:07:a1:c8:33:5c:bb:
                    cb:f6:75:58:d3:64:1b:5b:3e:25:0d:17:b0:d8:2d:
                    2d:95:14:97:61:28:a1:ee:a0:9e:ba:35:45:70:0a:
                    2b:7f:30:ba:c0:2d:81:c2:5c:29:91:24:7d:24:bc:
                    05:9d:c3:68:ae:8f:5e:47:d4:d6:93:7b:1c:12:99:
                    11:f9:fd:c6:0c:3e:84:3f:3c:15:8c:f4:d4:04:54:
                    47:e7:fe:df:41:56:fa:2d:94:21:0f:1d:d3:87:d5:
                    6b:02:42:76:34:ff:89:c5:65:1b:09:52:09:3c:d1:
                    1a:bc:13:e6:c2:83:65:69:56:fd:47:ac:35:35:b6:
                    26:b3:aa:08:31:5c:34:09:77:1b:60:fb:33:a7:96:
                    e8:51:b1:f3:04:fe:89:76:a4:c7:4f:98:c0:48:c7:
                    a6:81:90:58:01:8d:c5:bb:4d:1c:01:b8:5a:27:ae:
                    b8:00:fa:ef:bc:ac:0e:82:d2:78:19:16:7f:2e:b5:
                    d6:2a:2e:91:bb:7a:6a:1c:0d:bb:fe:ed:8b:d6:6a:
                    5d:60:78:07:75:fa:b9:d9:69:be:dd:34:c0:c7:b8:
                    73:56:31:c4:52:6f:25:7a:91:84:0c:e5:ac:c4:17:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:EE:07:57:5C:C9:12:3A:01:40:96:C9:DC:57:8F:AB:13:D9:32
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:2e:0f:ea:89:97:48:44:c8:a8:ce:0d:5e:80:ae:60:bb:
         49:d7:49:38:19:25:be:47:10:5e:f0:d9:7f:04:9a:3a:c2:e6:
         ee:83:d9:b1:08:e5:d8:46:06:73:1a:a5:ae:ae:5a:ae:62:53:
         c6:f2:fe:fc:62:70:a1:32:52:31:5f:9e:66:44:7e:31:4f:4e:
         50:60:24:57:8a:ad:33:7b:ab:7d:aa:33:26:cf:6c:1e:ac:6b:
         1c:cc:09:f6:3b:af:7c:87:df:1b:63:8a:c6:95:db:c7:99:d1:
         83:30:6d:d7:a2:ae:03:24:41:85:95:71:1f:ee:2a:92:0e:02:
         fb:c9:39:20:f6:fb:c9:7a:d0:94:17:7a:38:33:a0:12:b7:f8:
         28:22:a4:97:77:db:ca:41:58:aa:f6:23:26:df:b7:cf:31:6d:
         8c:3a:cb:a1:44:10:3d:1b:73:93:2a:a2:0f:3e:d2:37:43:ed:
         92:f1:1f:5d:81:04:d4:6c:85:6f:4f:03:f0:d9:59:4a:23:63:
         59:54:82:09:9d:3b:d8:e5:6b:ba:25:20:ed:0a:d2:00:bd:1d:
         92:b8:7a:4b:e8:a7:f1:38:2e:82:fa:02:0b:db:c5:25:9e:05:
         4d:66:30:8d:ca:61:41:00:e4:4a:ec:8d:e9:2a:d2:3c:57:a9:
         68:c3:c7:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBOTUxMTAvBgNVBAUTKEI2QUM1ODdFQzI3RDUzNUVDRjREOEZERTE3MTE3NjU3
OURBRjRENEYwHhcNMjYwMzAxMjMwNjMyWhcNMjYwMzA4MjMwNjMyWjAYMRYwFAYD
VQQDEw02OWE0YzY3OS0yMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKhZHSvX8yDWyIcW15LRdWfRto4XL5wHocgzXLvL9nVY02QbWz4lDRew2C0t
lRSXYSih7qCeujVFcAorfzC6wC2BwlwpkSR9JLwFncNoro9eR9TWk3scEpkR+f3G
DD6EPzwVjPTUBFRH5/7fQVb6LZQhDx3Th9VrAkJ2NP+JxWUbCVIJPNEavBPmwoNl
aVb9R6w1NbYms6oIMVw0CXcbYPszp5boUbHzBP6JdqTHT5jASMemgZBYAY3Fu00c
AbhaJ664APrvvKwOgtJ4GRZ/LrXWKi6Ru3pqHA27/u2L1mpdYHgHdfq52Wm+3TTA
x7hzVjHEUm8lepGEDOWsxBcBVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu17gdX
XMkSOgFAlsncV4+rE9kyMB8GA1UdIwQYMBaAFLasWH7CfVNez02P3hcRdledr01P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE5NS84QzQ0QTkzNDJC
RDkxMUYwQUI0NDMxMjJDNEY5QUUwMi90cXhZZnNKOVUxN1BUWV9lRnhGMlY1MnZU
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUE5NS84QzQ0QTkzNDJCRDkxMUYwQUI0NDMxMjJDNEY5QUUwMi90cXhZZnNKOVUx
N1BUWV9lRnhGMlY1MnZUVTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfM0uD+qJl0hEyKjODV6ArmC7SddJOBklvkcQXvDZfwSaOsLm7oPZsQjl2EYG
cxqlrq5armJTxvL+/GJwoTJSMV+eZkR+MU9OUGAkV4qtM3urfaozJs9sHqxrHMwJ
9juvfIffG2OKxpXbx5nRgzBt16KuAyRBhZVxH+4qkg4C+8k5IPb7yXrQlBd6ODOg
Erf4KCKkl3fbykFYqvYjJt+3zzFtjDrLoUQQPRtzkyqiDz7SN0PtkvEfXYEE1GyF
b08D8NlZSiNjWVSCCZ072OVruiUg7QrSAL0dkrh6S+in8TgugvoCC9vFJZ4FTWYw
jcphQQDkSuyN6SrSPFepaMPHsw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:50 2026 by rpki-client