Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File:                     tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier:          gKCifJrEDprCtxrR4lkS1lmLZPS6xfHMnjwPf6071tM=
Subject key identifier:   AC:2C:3E:CE:6E:7B:80:65:6B:B8:2E:E9:2B:60:B6:26:24:BD:79:A0
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer:       /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial:       0800
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number:          07F5
Signing time:             Mon 02 Mar 2026 01:49:47 +0000
Manifest this update:     Mon 02 Mar 2026 01:49:46 +0000
Manifest next update:     Mon 09 Mar 2026 01:49:46 +0000
Files and hashes:         1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: /BUcLum/d1e1NsSUbVCQeiQm7soXKL1YBdtBF/KovXs=)
                          2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
                          rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
        Validity
            Not Before: Mar  2 01:49:46 2026 GMT
            Not After : Mar  9 01:49:46 2026 GMT
        Subject: CN=69a4ecbb-aa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:d7:5a:e3:39:ab:32:61:c7:3e:40:e0:65:
                    3e:07:bd:09:92:50:99:31:12:9d:02:40:9f:a8:38:
                    b4:b3:d6:92:8c:63:8f:8f:df:4c:81:11:37:b4:ca:
                    a0:ba:e3:00:cb:e0:57:c0:d6:b0:5a:5c:c8:31:be:
                    90:a1:41:62:35:d1:2a:06:26:2a:f1:78:ed:ab:25:
                    c3:4c:83:98:a8:76:cb:51:27:69:e0:76:f4:31:82:
                    37:a5:1c:1f:78:27:af:17:43:4b:80:f9:76:d0:ca:
                    1a:15:c8:a0:85:4e:4e:1b:d6:54:5c:fe:4a:d3:8d:
                    bf:fc:ec:57:7f:70:47:9a:b0:67:50:9d:a5:0c:ba:
                    03:f2:3f:40:62:d3:50:c4:42:c5:9b:98:24:ad:99:
                    dc:3c:e8:fb:78:53:bb:f7:68:6a:2e:e4:f2:0a:9e:
                    b6:e6:2e:e6:b2:c9:5d:2e:5c:e8:91:be:5f:4a:39:
                    b3:7d:7e:52:04:63:c8:ac:a9:f2:a7:6d:86:25:4d:
                    4d:c2:75:b7:ab:e4:d5:30:e1:6b:cc:e8:d9:ec:ae:
                    3f:72:4a:5d:ce:b5:a2:73:61:05:a3:d2:33:b0:30:
                    85:c9:e2:de:4b:35:8c:49:a6:76:f7:21:99:1a:ea:
                    05:c1:1a:c8:9a:e0:ae:03:e7:6c:83:e9:1d:a6:c5:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2C:3E:CE:6E:7B:80:65:6B:B8:2E:E9:2B:60:B6:26:24:BD:79:A0
            X509v3 Authority Key Identifier:
                keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ad:54:c0:54:8a:ef:8d:79:a6:1f:85:0d:88:c7:f9:f6:bd:
         ff:ef:fc:3b:c2:a6:87:f9:1e:dd:18:37:b9:02:8a:4b:68:3c:
         73:71:72:bf:2f:0f:b9:b0:60:6b:f8:25:7f:00:fc:bb:9e:1e:
         9f:8e:d1:9a:ad:9b:f8:4d:55:06:de:2d:7d:15:69:2c:8b:5d:
         9e:7c:85:f5:54:64:73:d0:e8:67:ec:12:93:f5:ad:2f:8b:2a:
         50:61:20:29:66:9e:42:15:95:2c:c7:ed:89:c0:f6:a4:fa:14:
         d9:eb:87:13:80:d7:52:6a:82:81:41:49:91:76:fd:dc:e1:90:
         77:6e:53:aa:1e:d7:eb:b7:bd:a2:76:32:7b:6a:21:95:b1:6c:
         70:9a:32:bd:7f:27:aa:f5:a4:0a:33:0c:8b:d7:86:c9:60:12:
         19:50:fd:91:f6:ca:f9:01:b3:9b:73:f4:2a:a1:ea:ae:d3:f7:
         1a:29:54:22:2c:8c:d7:32:0e:df:b6:dd:ba:f6:d1:83:82:a3:
         e4:bf:b0:8a:94:4b:b9:aa:75:b1:85:63:91:7d:9d:1c:be:0d:
         d1:f7:ff:a4:4f:e4:25:ca:86:8e:5e:e9:71:35:5a:9e:62:66:
         a6:07:38:49:56:97:38:e3:08:14:52:91:f5:4d:61:1a:98:1a:
         0b:58:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:09 2026 by rpki-client