Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
File:                     tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft (raw, json)
Hash identifier:          NlLsxoSqZy9wYjKCWOQPNEPPeSZaFTYK1ilMqbjphl8=
Subject key identifier:   EC:A1:36:41:76:94:2B:92:6A:E0:E3:AC:F5:48:12:1F:8D:07:3F:67
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Certificate issuer:       /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
Manifest number:          0195
Signing time:             Sun 01 Mar 2026 05:15:41 +0000
Manifest this update:     Sun 01 Mar 2026 05:15:41 +0000
Manifest next update:     Sun 08 Mar 2026 05:15:41 +0000
Files and hashes:         1: tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl (hash: Ftl9T/hVysCKHSPJC3mxsEPlPo9qccvKKEWW79P5JDU=)
                          2: DDFD7F92A36311F0BCF40B3CC4F9AE02.roa (hash: u/ef+wLT7FMIGaLkpQxZZeykZ8rHM5KkEvDLjP/UbhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
        Validity
            Not Before: Mar  1 05:15:41 2026 GMT
            Not After : Mar  8 05:15:41 2026 GMT
        Subject: CN=69a3cb7d-b950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:51:ef:b0:3d:98:16:87:44:37:18:c4:f7:
                    4c:70:f6:f1:fb:7c:50:5c:ce:d4:36:dc:21:9a:f3:
                    fb:51:ec:e5:89:16:5f:3f:d9:2e:6a:e6:2f:45:90:
                    ee:28:21:48:9b:f3:79:de:a2:f2:db:f9:8a:38:4c:
                    07:6e:76:90:c6:b3:10:71:72:5b:d7:76:ff:df:f4:
                    b7:78:f4:8d:3d:ab:a5:0c:5d:6e:3e:35:9b:12:0e:
                    ff:fa:49:d7:a8:79:05:71:d4:f5:50:9f:d7:de:3c:
                    17:ab:f0:c3:28:36:7f:f6:e3:ee:0c:d6:b7:7d:e5:
                    ae:c8:b5:92:90:43:d1:5b:9b:79:96:5a:b6:b9:1d:
                    8c:92:58:dd:a4:21:51:82:c0:07:0e:bb:09:99:0d:
                    ea:7a:6b:8b:eb:30:6b:69:ad:7c:47:a1:4d:62:48:
                    17:69:f6:3e:b5:92:b9:11:47:dd:a6:d9:de:53:d1:
                    70:21:28:75:0b:2c:6b:38:84:bd:39:90:35:b6:bc:
                    42:7f:90:83:cb:d6:b0:4b:7e:d7:3c:14:d9:64:51:
                    ea:bf:84:66:4c:0f:e2:4d:c5:ba:24:28:6c:b8:24:
                    ff:28:b6:bb:8e:63:5c:87:5a:f4:cf:1f:3e:41:2c:
                    de:1b:1a:60:8e:a3:3c:3f:f3:bc:03:13:80:19:0f:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:36:41:76:94:2B:92:6A:E0:E3:AC:F5:48:12:1F:8D:07:3F:67
            X509v3 Authority Key Identifier:
                keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:52:da:54:f2:51:9f:09:95:71:fd:06:bd:9f:55:95:cb:
         71:cb:8e:4a:94:ec:74:c8:8a:0d:99:78:f8:4f:f2:61:06:18:
         82:1f:12:4e:8c:10:2a:1e:9a:a1:96:10:7f:57:53:69:e7:d7:
         94:51:cc:94:f8:97:fe:5f:25:ef:3f:8e:3c:7b:2f:fb:54:30:
         05:77:50:2b:03:b4:11:6a:0d:ad:91:83:7f:84:ce:85:b2:68:
         29:23:d6:46:ba:57:8d:3a:95:1e:42:e9:b4:c2:79:02:55:84:
         a6:69:53:22:7f:98:1c:b7:f9:08:6e:b7:8d:01:2f:05:5c:cd:
         60:04:f7:9b:82:b8:07:b6:87:32:e4:49:96:ac:77:ee:f3:ab:
         cd:5c:77:3b:b6:18:13:d5:7d:7d:80:f2:17:87:8f:b8:e2:33:
         a0:8c:2a:9a:69:43:16:33:a9:53:84:c4:0a:14:e8:3d:e5:df:
         64:de:97:e3:b6:1e:0a:1f:2b:62:f7:53:cb:da:f7:c7:3a:fa:
         ee:89:e5:eb:f8:6e:8d:a0:33:ae:d4:3b:d7:62:d7:b7:ab:ca:
         62:62:d3:78:89:7b:23:dc:a1:fe:d6:93:3d:d1:14:fd:7d:0a:
         1b:51:6f:ff:68:26:80:0d:73:2e:c5:5e:53:f1:ba:1e:d4:2a:
         4e:58:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:03 2026 by rpki-client