Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File:                     TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier:          ZHDBD+6+KmeWn7mjbsoBqgveKuUSHm2yAnveAXD+iOE=
Subject key identifier:   4F:11:13:B4:A0:41:D8:81:67:5C:7C:C5:83:53:62:12:CD:28:47:AF
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer:       /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial:       07C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number:          07B3
Signing time:             Mon 02 Mar 2026 02:44:16 +0000
Manifest this update:     Mon 02 Mar 2026 02:44:14 +0000
Manifest next update:     Mon 09 Mar 2026 02:44:14 +0000
Files and hashes:         1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: lPRmJg9j6krAdQlDo1fYipIRbQOF3MW7DEiyjX4ptEI=)
                          2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: rkgRpPSntDWQ2i3VpXZyC4ruluhTZVPYdcmhYGZ+wkU=)
                          3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: dHWgiPZABmcNXGx9o3LJNG6tvTY4miZBB7QZi5QjuNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
                          rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987 (0x7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
        Validity
            Not Before: Mar  2 02:44:14 2026 GMT
            Not After : Mar  9 02:44:14 2026 GMT
        Subject: CN=69a4f97f-4b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:a2:02:57:17:c8:f2:65:25:c5:94:d6:1b:
                    cf:0b:48:0a:0b:a7:59:70:02:16:51:88:aa:01:8c:
                    73:5f:d3:8c:3e:f2:b5:2c:85:52:36:46:33:fa:36:
                    e8:52:e9:ce:00:6d:c0:62:c0:e6:24:f3:ce:4f:e1:
                    45:cf:9d:ec:9a:ee:d5:8a:54:e1:a0:88:30:38:f4:
                    39:2b:47:46:cd:25:85:f1:e8:de:0c:63:e9:cd:8c:
                    2f:1d:9d:bd:bc:87:9c:8c:c6:fe:a8:7d:1f:d6:a7:
                    be:5b:2c:91:25:04:f0:c4:e3:93:e7:cd:70:fd:52:
                    07:b9:c8:ea:b4:cc:0c:ab:2d:0a:53:51:7c:1f:f0:
                    72:76:d1:ac:24:ac:f4:c4:2f:5d:9a:9e:f6:f3:72:
                    0b:b4:47:32:3a:f7:61:a1:17:35:54:1d:28:96:31:
                    e0:ff:86:24:43:0b:71:4c:ed:2a:d5:8b:c5:d1:93:
                    70:b6:b5:07:64:8c:96:8f:2b:fe:72:55:e8:22:ea:
                    65:63:dd:70:ad:b0:ee:0b:9f:c4:cf:f7:27:84:31:
                    58:e7:73:ab:d3:12:5f:21:db:91:a0:9c:62:d5:d2:
                    b3:b1:6d:a0:41:e2:45:51:b1:b8:2c:82:0c:fd:5b:
                    2f:d3:95:dd:34:e2:b7:ce:5e:a5:53:2f:97:d5:98:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:13:B4:A0:41:D8:81:67:5C:7C:C5:83:53:62:12:CD:28:47:AF
            X509v3 Authority Key Identifier:
                keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:08:67:b0:41:b3:3d:ed:fb:51:d0:23:fd:37:0a:72:77:a5:
         d6:66:cc:2d:98:98:ab:46:3e:17:d5:dd:38:fb:49:04:15:f1:
         41:bd:d9:b8:47:78:4d:eb:eb:b3:3e:70:5e:45:75:6d:fc:e8:
         35:04:57:67:1e:96:ed:bc:99:11:f0:a6:81:a1:80:f4:2b:62:
         11:a6:bd:14:b9:c6:a3:55:c1:5f:f5:fb:7f:71:7a:4f:f1:04:
         ce:6f:1c:d1:5b:01:5f:2e:d5:4e:eb:72:79:7f:79:b0:4e:9f:
         30:78:84:d4:6a:85:50:9e:ae:68:47:5d:c0:e6:de:4c:da:4b:
         ab:9e:af:2f:05:43:6b:01:0d:2a:6b:fe:61:75:98:15:17:2b:
         1d:d6:59:b2:5d:4c:18:2f:38:2d:de:51:4c:e8:75:25:31:11:
         80:24:41:1d:6c:37:86:c9:3a:69:3d:f4:98:7b:96:92:23:5f:
         76:28:8a:ba:a7:8f:2b:92:01:ae:30:1c:55:b8:60:2c:52:51:
         39:9e:5a:fc:8d:fc:83:98:7b:4a:a7:da:58:c2:36:47:07:30:
         39:83:4a:d2:44:83:b6:cd:1f:c8:70:7e:d6:ce:e8:5f:f2:fc:
         a1:1b:79:e7:2a:8e:4d:d7:10:50:17:06:ea:66:19:1e:a5:34:
         72:1c:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:40 2026 by rpki-client