Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File:                     TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier:          DypXu4M0ayW4mEhKVnmm2/nMs0DJZvNyPrbAddKM4pI=
Subject key identifier:   D6:11:7C:8C:C7:AB:DF:E0:C4:E4:E5:BC:06:08:F5:F4:64:10:59:72
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer:       /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number:          3538
Signing time:             Mon 02 Mar 2026 00:52:40 +0000
Manifest this update:     Mon 02 Mar 2026 00:52:39 +0000
Manifest next update:     Mon 09 Mar 2026 00:52:39 +0000
Files and hashes:         1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: +eUHAn78V+rtPld9GCaFKvM7CejXv2u8k8KAyUHDTpM=)
                          2: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=)
                          3: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
                          rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
        Validity
            Not Before: Mar  2 00:52:39 2026 GMT
            Not After : Mar  9 00:52:39 2026 GMT
        Subject: CN=69a4df58-bd25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:52:7a:5c:eb:20:72:5a:ba:9c:5c:34:24:db:
                    26:c4:e3:f8:2f:d0:ff:82:20:27:9f:35:89:44:e7:
                    83:af:0d:73:e7:0e:ec:b8:35:a9:ed:72:71:d4:a5:
                    5e:95:98:11:f5:8f:8f:b0:cb:62:77:84:eb:1f:94:
                    7a:94:a0:d4:47:de:e4:dd:59:98:57:a2:a3:3b:bb:
                    b8:0f:9d:65:0a:9f:74:f4:67:07:04:32:6d:4c:06:
                    ad:92:92:c8:f7:15:dd:18:f4:47:9d:f9:9d:ca:c2:
                    53:cf:c7:f0:a8:5d:56:29:9c:cb:7f:0c:12:10:0e:
                    cc:dd:fa:ef:23:1c:fb:56:9b:02:bc:1f:c7:83:5d:
                    8f:a1:67:95:03:7d:3c:88:a3:75:90:2f:4d:9d:e0:
                    86:a6:a6:40:1e:d1:b9:9d:f3:22:73:9d:3a:49:0e:
                    12:10:fd:ea:e5:0f:79:b9:f6:f8:d7:6b:58:54:a0:
                    b4:4c:40:36:9c:c6:07:ad:f4:85:a7:d0:4b:23:ac:
                    83:f2:4f:75:51:f7:02:99:f7:c0:59:e0:50:38:9d:
                    9d:67:e0:15:b0:2d:27:93:72:b3:52:a4:78:f6:49:
                    2f:02:fe:a6:57:81:fc:1b:56:05:b2:1d:f7:df:8a:
                    16:f2:0b:63:b5:87:2f:cb:28:34:43:ec:85:8b:f6:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:11:7C:8C:C7:AB:DF:E0:C4:E4:E5:BC:06:08:F5:F4:64:10:59:72
            X509v3 Authority Key Identifier:
                keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:94:df:05:07:fa:ef:b9:2b:30:18:69:9b:cc:1a:b0:59:
         f4:1e:bd:31:d5:53:68:c8:ca:0f:93:f4:44:7e:4b:af:8b:d9:
         c0:5a:03:3e:1c:93:c5:91:50:3f:2b:71:72:a7:d6:8e:e2:85:
         38:19:cd:1e:e9:ee:d2:bb:43:25:73:70:32:96:96:dc:17:b2:
         10:5f:60:0e:bf:a6:b2:58:86:7c:5f:51:d6:01:63:3e:5e:14:
         63:6c:bd:d3:d8:1e:2b:e6:f6:1d:09:be:33:62:a0:42:36:7f:
         d6:42:3c:72:6a:7c:50:0b:63:ad:b3:21:ec:09:aa:fe:bf:5b:
         f9:3e:c6:0f:f2:b3:b2:c3:ca:d3:20:d9:c7:ed:c7:a9:9f:27:
         21:bb:a7:af:aa:0a:4d:f5:a8:27:b2:73:d3:64:1b:21:0f:ff:
         2c:82:5f:dc:de:3c:f5:5c:97:5f:12:3a:fe:70:6b:ff:34:cd:
         2a:ec:ef:1e:a4:df:c1:34:76:bb:31:13:59:d7:52:74:79:a2:
         e7:29:d4:31:d9:76:e6:96:5c:8c:90:83:1a:0e:9f:db:61:12:
         58:d9:98:7b:a1:23:06:77:8a:6d:e4:ec:50:47:b5:47:a6:06:
         d4:01:5a:df:fa:b0:f0:1f:a4:1a:47:21:0d:d2:07:13:e7:1e:
         3d:14:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:54 2026 by rpki-client