Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File:                     TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier:          8eYEvqLSuzOWRYbtg8xh9a73FSuMeOoEDmdyM1z9OtY=
Subject key identifier:   35:FB:AA:3D:8D:42:F0:C5:C1:2E:53:AE:E3:09:55:07:39:55:A7:25
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer:       /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number:          0490
Signing time:             Mon 02 Mar 2026 03:08:41 +0000
Manifest this update:     Mon 02 Mar 2026 03:08:40 +0000
Manifest next update:     Mon 09 Mar 2026 03:08:40 +0000
Files and hashes:         1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: yhOMO2+AI8N5/hDjQYypBKN9mJirAS3JXQ0Uht8L6pw=)
                          2: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 9llJReApVBmo5bvUcRrTyqYgxX0J7Rw+SzZuoT8YjSw=)
                          3: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
                          rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
        Validity
            Not Before: Mar  2 03:08:40 2026 GMT
            Not After : Mar  9 03:08:40 2026 GMT
        Subject: CN=69a4ff39-4543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:d7:17:b0:18:d8:c2:47:8d:af:2d:a7:66:
                    aa:15:5b:7e:8b:be:92:53:1c:06:0b:a5:b7:49:77:
                    1d:49:f8:84:ad:99:9c:f1:5b:cd:e9:99:6a:ca:e9:
                    b1:6a:53:fd:af:13:71:d5:73:1f:5b:cf:54:6b:dc:
                    39:91:64:81:98:9b:5f:0b:60:df:5a:d1:42:06:ed:
                    57:be:11:5c:53:29:32:bc:5d:5e:14:d6:5a:cd:aa:
                    1c:ad:0d:66:29:1f:19:f7:11:da:19:41:30:61:45:
                    90:a9:8d:a1:c6:77:9e:af:74:9d:89:9a:a0:d7:cc:
                    af:1b:f1:7c:e5:b9:0a:9c:e9:cb:c0:41:aa:a8:6d:
                    11:63:30:7c:b0:45:31:bf:97:9f:d2:f0:7b:46:7e:
                    29:5a:45:87:4a:34:ae:57:9b:e3:18:24:a0:6b:0f:
                    55:94:8a:95:5d:85:7a:cc:13:f1:4b:22:f5:af:d8:
                    46:92:d2:76:a9:81:47:c0:d6:12:80:af:68:9d:fb:
                    1f:ea:8d:dd:61:34:13:7a:33:be:47:27:65:99:f6:
                    99:af:ab:61:c5:c3:eb:5d:6f:1e:e6:77:12:bc:a7:
                    47:5b:44:fd:09:28:36:5d:7d:c2:23:f0:75:36:1c:
                    b1:e8:11:41:87:45:58:af:80:f3:81:b7:f7:77:d2:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FB:AA:3D:8D:42:F0:C5:C1:2E:53:AE:E3:09:55:07:39:55:A7:25
            X509v3 Authority Key Identifier:
                keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:00:6b:26:b8:7e:7b:50:09:8c:c4:a5:4d:a7:13:07:a4:44:
         6e:14:ce:76:3c:1d:42:fd:6b:14:dc:50:96:e2:dd:2b:1e:29:
         c0:37:41:d1:87:52:e9:db:bb:d2:21:59:6d:37:eb:ba:30:26:
         af:c0:4f:9a:08:aa:fd:78:ad:23:99:9f:70:a1:2a:ee:d2:02:
         1e:29:7d:19:0d:7a:7c:51:c3:b1:28:f0:ff:b7:98:a7:5a:16:
         0d:19:69:1d:79:86:77:31:76:e0:83:9c:c8:91:4c:fd:10:68:
         3b:d9:22:8d:a3:9b:e0:ee:26:c6:60:fc:a3:98:bb:c5:19:94:
         2f:6a:79:e0:21:68:4f:43:d9:de:ac:88:b6:76:f2:17:7f:e9:
         fe:17:b1:ba:8f:77:03:e6:1a:29:81:7b:14:be:25:b4:cd:c4:
         87:40:b4:57:77:be:f0:3d:1b:7b:46:f5:73:18:70:15:6a:9a:
         0d:b8:e9:8a:38:66:ff:4d:8b:8b:69:ad:29:82:71:7f:c6:cb:
         aa:b0:42:08:5a:cf:9f:40:63:3e:4f:1f:57:c2:5e:88:55:a9:
         2d:28:02:ea:1f:07:8b:0b:53:44:6e:7f:a0:3c:39:57:7e:91:
         27:58:e4:d9:83:92:78:d3:76:fe:e1:23:0c:84:80:d4:d1:4b:
         fe:f3:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:19:15 2026 by rpki-client