Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
File:                     TKAS9bToBGfvDuxPjAJEoj1WmbU.mft (raw, json)
Hash identifier:          GaDVIjMZehirPB4mvr3Z3vSnAq8A42Ihm5l3cATAwPo=
Subject key identifier:   09:B1:91:21:EB:1D:05:8C:D0:95:59:CE:67:25:5F:F2:AA:9A:0F:14
Authority key identifier: 4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5
Certificate issuer:       /CN=A91B1E8B/serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
Manifest number:          012F
Signing time:             Sun 01 Mar 2026 06:33:33 +0000
Manifest this update:     Sun 01 Mar 2026 06:33:32 +0000
Manifest next update:     Sun 08 Mar 2026 06:33:32 +0000
Files and hashes:         1: TKAS9bToBGfvDuxPjAJEoj1WmbU.crl (hash: Pjsi46N2H3qrxqDNCe3lzBMy57KhkSA1BziV1vbhXl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl
                          rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1E8B, serialNumber=4CA012F5B4E80467EF0EEC4F8C0244A23D5699B5
        Validity
            Not Before: Mar  1 06:33:32 2026 GMT
            Not After : Mar  8 06:33:32 2026 GMT
        Subject: CN=69a3ddbd-f716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:13:60:67:ff:d8:a0:15:4e:e1:a5:52:3c:
                    74:67:86:ae:31:d0:24:34:12:dc:d3:75:35:bb:a1:
                    28:18:2e:af:e5:e8:d5:a3:e6:29:48:9c:54:af:b7:
                    0f:7b:b0:9f:22:cb:48:16:af:73:49:b3:86:5f:01:
                    3c:26:9a:d5:59:05:4d:52:d7:8e:41:ff:ac:c8:1c:
                    cc:60:dd:05:d1:94:27:4c:0c:d6:56:2e:2b:56:34:
                    4c:18:2f:e1:36:97:6a:9f:0d:ef:86:0f:7b:f4:f7:
                    6f:f4:13:88:30:87:ff:80:ca:98:b3:01:ee:39:a6:
                    19:85:99:3f:e8:8c:63:05:6f:63:4e:07:14:43:e8:
                    60:ae:95:c1:7b:0f:02:22:76:30:78:40:d1:bd:6f:
                    27:9c:11:36:3c:2e:6f:18:e6:3b:32:ed:92:e1:68:
                    10:1d:86:a6:4e:db:10:24:ac:a7:a2:90:d2:bd:99:
                    fa:51:6f:52:d0:19:05:b7:e5:7a:b9:15:a1:0e:99:
                    f0:c7:0a:f4:6c:8d:4d:0c:e6:f1:ca:20:72:f3:d3:
                    d0:c1:c5:0f:99:5a:2f:66:27:c4:30:c9:75:2b:33:
                    6e:4b:c3:19:b2:92:33:10:5a:22:a5:2a:29:bf:2f:
                    97:73:7c:01:8a:b4:7e:20:28:8d:9d:a3:26:1e:3b:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B1:91:21:EB:1D:05:8C:D0:95:59:CE:67:25:5F:F2:AA:9A:0F:14
            X509v3 Authority Key Identifier:
                keyid:4C:A0:12:F5:B4:E8:04:67:EF:0E:EC:4F:8C:02:44:A2:3D:56:99:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKAS9bToBGfvDuxPjAJEoj1WmbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6B38B81645B611EF8AB30A31C4F9AE02/TKAS9bToBGfvDuxPjAJEoj1WmbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:9f:b5:ca:f1:26:16:70:6e:5f:21:e2:63:06:37:02:a8:
         24:4f:7d:2c:c5:73:7b:c1:15:82:0d:fd:a7:2b:8d:f7:97:03:
         cf:3c:e7:8a:5b:6d:54:b6:8d:47:f7:5b:fe:55:1c:00:90:e0:
         64:12:5b:0b:54:25:30:1c:ba:d7:2e:df:7a:dc:ed:85:a2:db:
         0f:28:80:d7:e6:2f:80:05:9c:80:0b:72:00:f3:39:04:5f:71:
         a4:c8:84:05:a4:6f:d2:f7:37:29:ed:87:7d:88:c1:e5:d5:2d:
         a2:74:dd:43:c3:47:df:a3:de:36:06:a4:58:41:fe:a6:e9:44:
         d2:b3:09:e3:9a:31:18:25:af:3c:eb:15:b4:f6:a2:d0:cd:76:
         d2:15:ca:ca:25:72:2d:ec:44:40:b8:52:6a:3a:95:9a:e9:8e:
         dc:ae:a7:16:61:aa:35:3f:5f:06:49:f6:98:1e:a9:c0:5b:46:
         a8:8a:a3:5c:09:1b:fa:34:2a:71:6a:a5:47:27:fb:fb:d1:45:
         e8:19:db:b5:4c:f4:0b:eb:7f:01:d9:a4:e9:10:a8:b3:91:77:
         bb:c6:3a:08:9d:59:c9:1d:57:99:5f:2d:ef:39:72:0a:f9:71:
         92:f2:9f:57:c6:67:2a:55:be:cd:b0:f1:df:8d:ee:4a:00:10:
         50:08:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:52 2026 by rpki-client