Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
File:                     TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json)
Hash identifier:          XQsTj/qtTDPoj9kTRBeyWTCGmxzPxZpuYFndRHsBTKw=
Subject key identifier:   32:44:0B:B5:52:63:DD:66:AF:0B:FB:69:95:77:7A:B2:5A:88:24:5D
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Certificate issuer:       /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
Manifest number:          77
Signing time:             Sun 01 Mar 2026 09:09:46 +0000
Manifest this update:     Sun 01 Mar 2026 09:09:45 +0000
Manifest next update:     Sun 08 Mar 2026 09:09:45 +0000
Files and hashes:         1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: AeHJPDxDeO2PNVsKaRghC61+tD/K7LuSe2kky03I2Do=)
                          2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: 1rdsiyPcI00KSV/hreF4AXkXOxk2hHL3dZ7PhIJoG0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
                          rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
        Validity
            Not Before: Mar  1 09:09:45 2026 GMT
            Not After : Mar  8 09:09:45 2026 GMT
        Subject: CN=69a40259-7af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:b7:89:fc:53:e0:05:43:b9:cd:d7:94:48:
                    86:ea:d7:79:a5:3a:61:ec:a5:86:49:a0:48:6b:ac:
                    11:4c:50:11:fb:81:f6:f9:51:e2:0b:20:09:da:75:
                    2f:6c:4d:a1:ef:6d:29:21:23:66:ee:bd:c5:45:55:
                    26:1f:38:ed:36:33:50:ae:59:90:f5:f9:14:fa:f8:
                    b0:a6:1c:f5:82:e2:b8:c9:4d:f6:3d:7d:d9:30:84:
                    12:24:5e:c8:6c:58:3c:18:15:12:9e:0d:13:ee:d3:
                    ae:50:69:af:c4:e4:e8:6e:d7:9b:f1:50:93:00:49:
                    be:e7:4c:57:c1:a2:95:a0:be:9d:9a:94:ef:fb:07:
                    79:fd:6b:73:1c:6f:c6:99:43:d4:68:2f:bd:e3:22:
                    3d:a8:8e:bd:6a:b2:31:7d:99:54:10:58:38:43:4e:
                    22:4d:a2:77:91:56:95:9e:84:a4:4b:10:c1:76:b5:
                    eb:85:65:34:5c:68:b2:84:48:ec:65:a3:23:49:47:
                    11:fd:b1:dc:75:3e:1a:55:a3:f0:32:71:f4:c7:d2:
                    d6:00:73:a3:6b:ae:4c:af:f3:d8:39:35:28:c6:a2:
                    65:fe:e5:17:e2:b8:f0:a1:a0:cb:1d:dc:de:09:d2:
                    c7:31:41:24:c1:4e:79:eb:49:ea:ba:4a:e1:16:b9:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:44:0B:B5:52:63:DD:66:AF:0B:FB:69:95:77:7A:B2:5A:88:24:5D
            X509v3 Authority Key Identifier:
                keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:35:e5:de:2e:2f:59:45:40:fb:83:67:d0:4c:0a:a2:86:73:
         fa:41:89:dd:a6:bd:fc:c0:29:08:96:4f:18:d0:01:3c:d4:22:
         88:a6:d8:b7:73:47:d5:a8:76:1b:d3:40:fb:c5:e0:f9:d6:4f:
         e8:0d:09:0f:26:b9:5f:c9:99:50:e1:99:8c:c4:d6:02:1c:3b:
         5e:ce:38:ab:c5:34:05:0f:71:31:41:8b:17:03:3e:cf:75:ad:
         a0:f2:db:80:14:ab:77:38:ee:f0:cc:61:ca:d8:ec:12:3a:b9:
         e1:a5:ad:88:aa:2d:e2:f9:d0:1c:ba:0b:e1:ae:7c:5f:35:88:
         7a:8d:be:bf:6f:49:a5:83:a6:75:e8:3f:bd:c6:eb:f3:9f:09:
         8a:2f:e2:ff:22:01:74:ec:d0:30:ae:2e:12:19:ac:1b:66:a3:
         27:10:48:e4:5e:a5:87:7e:4a:e5:ef:a1:c9:18:62:93:1e:c4:
         09:7e:55:9f:05:ad:2e:65:4f:29:0b:62:48:c0:8d:69:e3:74:
         b3:5b:25:1f:94:35:9a:dd:f7:4f:b2:ac:bc:9a:0e:3f:ae:b1:
         22:b9:ea:50:5d:bb:13:00:1e:89:a1:b6:cf:31:41:94:dc:7e:
         d0:60:cb:57:cd:46:16:b2:e2:6a:db:46:62:65:7c:5e:e8:57:
         04:a4:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:17 2026 by rpki-client