Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
File:                     tdRsD3W7vyQRKYrr0rVitaqV7Go.mft (raw, json)
Hash identifier:          InXfPWlIF4T4k4QT2hm+8l0UJqhBCdHdm5qgMQMCmWA=
Subject key identifier:   FE:46:84:92:10:13:36:F0:67:70:EA:1A:E5:B8:F7:59:F4:48:0D:AE
Authority key identifier: B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A
Certificate issuer:       /CN=A919C230/serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
Certificate serial:       0B04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
Manifest number:          0AF2
Signing time:             Mon 02 Mar 2026 01:32:47 +0000
Manifest this update:     Mon 02 Mar 2026 01:32:45 +0000
Manifest next update:     Mon 09 Mar 2026 01:32:45 +0000
Files and hashes:         1: tdRsD3W7vyQRKYrr0rVitaqV7Go.crl (hash: gGZPG/hvu9zAFYFqHg3lyMUgBVyFTZ7H2XuPSiqYhdE=)
                          2: 1429DACC099B11ED8A62781AC4F9AE02.roa (hash: Fanpld4VVwaoYG94GzGbb0OhM2Vk2NZntXiUdQVh2c4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl
                          rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2820 (0xb04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C230, serialNumber=B5D46C0F75BBBF2411298AEBD2B562B5AA95EC6A
        Validity
            Not Before: Mar  2 01:32:45 2026 GMT
            Not After : Mar  9 01:32:45 2026 GMT
        Subject: CN=69a4e8be-7284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:b7:f3:5a:13:dd:4c:09:74:21:0f:43:b2:
                    aa:d7:2c:d8:4b:0d:e4:6b:ea:1c:bc:4c:52:4b:07:
                    6c:34:20:cd:6b:eb:a9:91:c6:dc:c3:1b:b5:99:67:
                    7c:63:bf:19:d2:c3:58:c0:45:1b:41:ab:47:8c:5f:
                    cf:00:93:74:18:b3:69:bd:4e:6d:ea:44:cb:93:c4:
                    0a:20:0b:c0:aa:7a:01:94:89:1e:c0:81:e0:8e:a6:
                    f0:98:05:96:4f:e5:f1:b7:d8:bc:fe:2a:46:c7:34:
                    bc:6b:aa:f3:40:83:09:44:98:0a:28:d3:fc:df:25:
                    07:c9:f7:35:2b:19:04:42:85:7a:46:42:c0:13:73:
                    7d:c3:e9:74:c0:9c:06:57:5b:cf:dd:25:6a:b0:fc:
                    fe:7c:55:8c:a8:5b:8a:7a:b6:f4:9b:67:87:b3:f4:
                    5c:f1:3d:76:5e:71:d7:6f:af:a3:31:c2:99:6b:b4:
                    6f:75:4e:a8:ac:15:0f:db:86:36:05:b2:50:4d:95:
                    72:1a:27:7e:d8:99:49:17:d2:a4:29:58:50:ee:3f:
                    07:f6:9e:ae:56:ec:d7:03:82:53:6a:a0:42:0d:ef:
                    27:3c:e5:96:e3:e3:ff:e4:f4:02:10:b6:e2:23:fd:
                    ca:ac:dd:6e:34:05:c1:18:54:af:0b:46:b9:11:31:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:84:92:10:13:36:F0:67:70:EA:1A:E5:B8:F7:59:F4:48:0D:AE
            X509v3 Authority Key Identifier:
                keyid:B5:D4:6C:0F:75:BB:BF:24:11:29:8A:EB:D2:B5:62:B5:AA:95:EC:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdRsD3W7vyQRKYrr0rVitaqV7Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C230/2954ABDC654E11EA90C63580C4F9AE02/tdRsD3W7vyQRKYrr0rVitaqV7Go.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:23:3e:10:27:a5:70:d6:19:35:d3:07:4b:de:83:b3:f5:6c:
         24:d1:04:17:c2:01:79:33:f0:a5:a8:67:10:b9:95:18:de:e9:
         b7:8d:12:3d:ba:96:b9:ee:8e:71:4b:f7:14:66:8d:b9:95:c9:
         f0:a7:e9:62:f9:f4:31:bd:5e:6c:9c:8d:97:60:0e:77:ff:4c:
         41:c2:12:15:e4:17:e7:5e:b3:56:f8:bf:a8:3a:10:ea:1e:7d:
         85:e4:85:3e:d3:42:ed:65:e4:14:02:2f:54:de:54:17:aa:d9:
         b8:75:f9:e3:c6:df:2d:e9:2b:59:74:45:c1:85:3a:b9:1c:53:
         8f:71:dd:0b:e7:19:20:45:66:b4:89:3f:44:c2:85:f6:ff:91:
         21:9b:12:60:b6:b3:74:41:bd:9f:b3:f7:be:3a:db:d5:a7:d4:
         9e:cd:43:63:67:ab:90:ec:46:6b:fe:94:7b:a7:c9:d9:36:1f:
         7e:08:71:4f:7a:16:05:48:0b:02:45:ce:f1:61:ab:f8:db:00:
         c9:e5:3f:35:95:66:83:63:6a:29:8f:07:2a:22:28:84:84:a3:
         9a:26:dd:d1:ac:36:c5:cd:43:48:14:a0:3a:2d:14:1f:66:65:
         ca:a7:e9:9b:9c:98:54:29:be:37:ce:0d:96:1b:52:b7:c5:f4:
         e4:08:97:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:19 2026 by rpki-client