Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
File:                     tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json)
Hash identifier:          11o+fgrZzRtYBy6+4dxFpqdDb3dvgoPJue1c8OgC9aA=
Subject key identifier:   1D:6F:84:6F:82:8F:47:4A:70:D9:D9:21:B7:FD:60:A6:CF:1E:FF:11
Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72
Certificate issuer:       /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
Manifest number:          06FC
Signing time:             Mon 02 Mar 2026 00:28:45 +0000
Manifest this update:     Mon 02 Mar 2026 00:28:42 +0000
Manifest next update:     Mon 09 Mar 2026 00:28:42 +0000
Files and hashes:         1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: nyAu4zKQc0HqUOLCLik83tLVKQxsHuzOs+IIWp1qrtU=)
                          2: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=)
                          3: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=)
                          4: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72
        Validity
            Not Before: Mar  2 00:28:42 2026 GMT
            Not After : Mar  9 00:28:42 2026 GMT
        Subject: CN=69a4d9bd-a521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:7b:1a:0e:3f:dc:68:08:3a:51:46:f1:1a:
                    87:43:d2:8c:cc:59:8c:81:f0:42:81:eb:5a:e5:f1:
                    f5:76:4b:04:93:da:61:a6:a8:15:b8:99:8b:e8:4d:
                    f4:60:43:8d:18:c5:ef:d6:5a:62:9b:29:0b:09:4a:
                    16:a6:f4:83:b1:64:b6:b5:81:84:86:79:d9:84:f8:
                    6a:4d:60:48:08:39:87:34:f8:77:5b:59:8f:6c:9d:
                    fc:3c:2e:16:ca:83:57:11:b1:f3:5b:25:0d:f2:0f:
                    91:6c:a7:b1:05:0e:89:eb:14:f2:3a:49:6a:e4:30:
                    1e:07:8c:da:58:a4:19:4e:74:f1:74:2e:70:7b:ca:
                    f2:47:0d:84:ff:a0:ea:f9:10:63:99:04:83:49:b3:
                    69:2f:57:8b:32:5e:a6:36:b7:a6:c9:89:84:e1:41:
                    68:6d:55:48:be:5e:04:73:ad:48:c4:81:95:08:66:
                    cf:f0:c4:24:42:37:61:0a:aa:4d:de:4f:65:ba:47:
                    c9:19:c2:1d:3a:ed:89:df:09:af:2a:48:16:51:41:
                    d4:d4:cb:cd:04:ea:ce:5d:9f:48:6e:44:75:cb:81:
                    d0:a9:72:3c:70:40:ad:8a:31:59:1c:37:dd:02:2a:
                    d9:59:66:ec:a5:df:c6:ea:80:32:b0:ae:05:84:25:
                    7c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6F:84:6F:82:8F:47:4A:70:D9:D9:21:B7:FD:60:A6:CF:1E:FF:11
            X509v3 Authority Key Identifier:
                keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:9a:9b:ed:3f:3d:6d:6a:10:3a:a2:b1:34:5d:d6:e9:61:
         60:e0:0d:3c:e2:18:0c:2e:de:c3:65:4a:e3:4a:e6:dc:45:69:
         8b:d3:5f:69:4d:5f:65:e4:53:32:f5:90:82:20:81:6c:44:1a:
         a7:a4:7c:14:af:84:f8:4e:61:d6:fe:06:74:37:d8:07:f1:ab:
         db:10:83:9a:34:2b:df:90:15:b9:3e:61:b6:b3:82:3b:3e:15:
         fe:35:cb:f8:fe:ef:59:c4:a6:d5:fd:21:a2:b5:96:9d:f6:8b:
         c9:50:6d:38:1d:03:9f:87:94:9c:ce:f8:e4:66:c1:47:48:3e:
         bc:a6:74:d8:b5:3e:be:7a:b4:fd:5e:ce:23:20:4a:7a:8a:8d:
         4e:12:a6:28:8f:21:90:87:e1:b3:d1:3a:ae:f5:8f:5a:31:4e:
         8e:34:78:03:07:96:ec:5a:21:08:d9:ff:fe:cb:95:06:1e:a0:
         7b:02:94:79:8e:da:cd:33:b2:22:b8:cf:43:7f:33:77:ad:78:
         64:45:48:7a:c3:70:47:35:98:0b:07:b6:fc:3f:da:c9:ab:b6:
         52:26:10:77:91:60:5b:64:6b:43:fc:cc:89:a0:93:51:cc:d3:
         05:a3:9e:b9:22:3f:91:7f:6e:f9:ff:2c:89:92:b8:6b:a8:14:
         72:3c:09:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:07 2026 by rpki-client