Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
File:                     TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json)
Hash identifier:          3AL5cUELxBd3fr4i5dVAOJtrp7SURlYd8ZSYN25F2yc=
Subject key identifier:   EB:B8:8C:59:16:50:9F:2C:B8:2D:75:D6:90:56:FD:6D:FA:3D:48:3B
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Certificate issuer:       /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial:       0EAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
Manifest number:          0E9A
Signing time:             Sun 01 Mar 2026 22:51:43 +0000
Manifest this update:     Sun 01 Mar 2026 22:51:43 +0000
Manifest next update:     Sun 08 Mar 2026 22:51:43 +0000
Files and hashes:         1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: wC1GF6KPWRKcr/NfjHos015RbGwbs38mYbUR/hdYBGI=)
                          2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: RzqIGI8r+oQW3NlWivzrVB3dYHmPEddV5f3NgyB8w0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
                          rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3756 (0xeac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
        Validity
            Not Before: Mar  1 22:51:43 2026 GMT
            Not After : Mar  8 22:51:43 2026 GMT
        Subject: CN=69a4c2ff-32fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:ef:bb:2d:bb:a0:08:38:a5:45:4c:8e:56:
                    b3:57:0e:88:a9:0f:4f:99:be:00:5b:1c:6f:d0:de:
                    de:82:17:b9:4b:3d:0c:2f:e8:8f:29:ae:ff:b0:57:
                    53:6f:39:d1:52:45:1e:35:7b:a8:19:29:45:7e:1e:
                    9e:5f:bb:c7:72:e0:14:a3:36:e9:55:cf:a7:3e:40:
                    33:76:1a:d1:ef:2c:40:85:e1:a4:69:12:d2:6e:27:
                    c6:35:5c:a5:aa:10:8a:c8:a1:7a:6f:41:68:cb:66:
                    af:84:32:76:61:0c:bb:21:40:ca:ec:8b:13:30:3e:
                    53:a5:eb:88:38:bf:bd:6d:39:33:e4:2d:22:5f:5d:
                    29:60:83:2e:f7:56:36:51:b7:4a:3b:b3:d7:93:f1:
                    ac:91:9a:66:95:2c:6d:76:4b:7c:a4:ed:09:c8:26:
                    2c:c3:b7:09:4a:b9:76:3b:20:62:0c:18:aa:7d:28:
                    ee:34:26:57:97:42:26:8c:5a:32:ef:cb:ed:83:19:
                    bf:cb:55:6e:43:f9:76:b4:22:a8:68:7e:0e:9f:c2:
                    33:2e:1a:84:7f:4e:3f:99:6e:f8:96:e8:7c:78:06:
                    1a:0b:5b:9e:6e:b5:fa:a3:b4:07:d5:b3:67:9a:56:
                    de:08:89:d9:07:3b:e4:2e:17:2f:ec:bc:8d:d7:16:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:8C:59:16:50:9F:2C:B8:2D:75:D6:90:56:FD:6D:FA:3D:48:3B
            X509v3 Authority Key Identifier:
                keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:28:0d:6f:80:2f:76:15:53:b7:18:b2:56:fb:06:c3:b9:
         12:0f:b7:2e:01:24:a4:28:12:4f:16:6a:fe:3b:05:c8:88:ab:
         e0:b0:ee:05:cb:b5:06:a6:9c:52:78:3e:dd:30:81:b0:28:ab:
         56:db:3b:6e:ea:6d:8f:bc:a0:f0:7e:ed:2b:5b:08:2e:bf:65:
         dd:f6:76:a4:b4:de:18:17:53:c2:9f:b2:6a:7d:8c:0d:40:8c:
         08:8d:31:c3:e7:2a:a0:12:09:cb:ec:1c:67:c4:b0:e2:e4:bc:
         1a:61:8a:90:95:f6:29:c2:d3:5e:8a:e3:3a:75:62:46:23:72:
         9d:ed:f3:cb:66:c2:7f:67:d3:fb:f3:38:ec:66:ba:be:a5:2a:
         73:19:91:5c:b9:c9:64:c3:46:c3:58:53:c2:fa:bc:9f:e5:99:
         6b:9a:15:cf:e4:3d:3e:9e:35:ba:ec:30:5b:bc:59:8e:1b:2e:
         60:b1:b5:89:56:da:01:99:44:f0:eb:02:27:06:4c:83:0b:44:
         31:f4:ca:3a:1e:08:aa:b6:1e:7e:e9:29:93:99:1a:a5:e9:8f:
         e3:41:bf:15:6e:db:66:b0:fc:fe:61:16:90:01:c5:02:b1:6b:
         b9:a8:22:57:ff:95:d0:0b:c9:19:fd:f1:4f:93:fe:e6:6b:77:
         e6:75:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:44 2026 by rpki-client