Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File:                     TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier:          b0kAVDghRJyPrRhtXui6hE62Tq2UPl+Mr643D3im+Zw=
Subject key identifier:   7D:A8:78:2D:A7:3D:66:FC:A5:9B:6F:F3:A2:00:AA:DF:74:83:73:A8
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer:       /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number:          0147
Signing time:             Sun 01 Mar 2026 06:12:50 +0000
Manifest this update:     Sun 01 Mar 2026 06:12:50 +0000
Manifest next update:     Sun 08 Mar 2026 06:12:50 +0000
Files and hashes:         1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: e8hUMdkKXcozoxZ2A40t7tqvUJQyi6K2YI8tsCtIaTE=)
                          2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
        Validity
            Not Before: Mar  1 06:12:50 2026 GMT
            Not After : Mar  8 06:12:50 2026 GMT
        Subject: CN=69a3d8e2-e0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:eb:c2:5a:c7:42:f1:e9:8c:9f:72:d1:ac:
                    c0:4b:8a:59:01:14:a0:55:09:3d:e9:dc:cb:e2:a5:
                    47:28:2b:08:7b:7b:3a:0c:fc:14:bf:2a:50:9b:a0:
                    0f:39:bc:cc:63:d4:de:4d:8a:78:89:27:8f:09:37:
                    84:65:80:25:1e:c7:f0:41:83:3a:e0:d9:45:31:0e:
                    11:19:49:a9:03:1c:33:68:a5:96:47:e8:f1:71:eb:
                    a0:c9:32:04:70:8f:72:bb:a5:80:4e:c1:d6:2b:23:
                    90:82:af:e2:f4:4e:9a:c5:41:aa:f0:6d:f6:d1:dd:
                    95:cb:8b:6c:6d:a1:fd:c9:26:87:1f:25:d7:1b:a9:
                    c6:ca:87:bb:df:56:68:43:b5:72:74:54:63:a1:72:
                    d2:42:b1:6f:e7:65:74:3e:cc:85:55:38:38:ee:a5:
                    75:a0:46:f2:d1:88:4b:b7:d0:06:88:8c:0f:05:1d:
                    96:30:4f:5a:ca:67:99:e2:2c:e8:ae:18:0e:3d:32:
                    c9:e3:88:fb:b2:89:85:34:c0:5f:37:ae:e5:6a:fc:
                    a0:88:ae:3a:59:bf:e6:62:89:b5:1e:d3:e9:d5:af:
                    8d:5e:60:6a:d1:ec:05:40:fe:9b:f1:ee:4e:05:7b:
                    43:cc:c5:62:e8:47:df:ce:b4:2f:96:00:a0:ce:1a:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A8:78:2D:A7:3D:66:FC:A5:9B:6F:F3:A2:00:AA:DF:74:83:73:A8
            X509v3 Authority Key Identifier:
                keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b1:de:45:d8:d8:37:cc:5c:97:1a:ef:ad:bc:4e:a5:60:8e:
         71:be:0e:c8:1a:34:ca:a5:ba:18:a0:a4:4e:df:17:de:e3:5c:
         cb:6b:66:7d:25:b7:cc:3d:f3:c6:dd:3f:bd:0a:6a:b0:fa:3b:
         61:64:b7:cf:33:da:9a:03:c7:f7:eb:74:71:2a:25:93:7f:bd:
         3a:5e:44:82:f1:d2:0d:13:1e:e1:95:f5:bd:06:51:3a:f0:fd:
         53:b5:de:0c:b4:5d:18:1e:27:35:38:2b:d4:6a:ac:eb:9a:3b:
         e7:24:10:c8:d4:01:d2:ce:24:e8:1d:da:d7:ff:42:97:1e:97:
         d3:16:d9:93:03:18:53:9d:9e:f8:20:65:6e:1f:89:17:f6:ce:
         4a:0d:51:42:3b:54:f8:13:8d:ec:28:45:81:7e:01:f7:50:91:
         de:c5:2f:98:c6:dc:c0:d2:56:c4:61:d1:bf:db:9e:96:62:a1:
         d8:81:9e:d0:f7:ec:4d:a5:bd:09:7e:f1:70:f1:0e:0f:e5:24:
         2b:8f:08:89:44:e1:54:5e:41:5b:d6:c4:a5:24:44:f1:eb:94:
         45:da:39:fa:5c:15:c0:b1:61:96:67:f6:78:05:3a:bc:70:74:
         7d:64:ac:3f:2b:ec:cd:83:51:3e:7c:c8:d6:2f:08:fd:36:c8:
         c8:49:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:20 2026 by rpki-client