Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
File:                     TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json)
Hash identifier:          vsZI6qF+LvTlOnZaaGeWS37TX6dHpJHXN0DMmrRGzqQ=
Subject key identifier:   03:97:7E:D0:D8:57:91:97:6D:95:56:9C:4D:9C:4A:C0:F3:C6:E5:4F
Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
Certificate issuer:       /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
Manifest number:          01CF
Signing time:             Sun 01 Mar 2026 04:23:01 +0000
Manifest this update:     Sun 01 Mar 2026 04:23:00 +0000
Manifest next update:     Sun 08 Mar 2026 04:23:00 +0000
Files and hashes:         1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: 7uNFFaUFg82hZ4GZ4CeOYg1Wikiak7NzQMKwUXag5cs=)
                          2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: qatvyS4SyJTNURVM2FsClClDPfP+4FEBMIeJZ8wIqMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
                          rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
        Validity
            Not Before: Mar  1 04:23:00 2026 GMT
            Not After : Mar  8 04:23:00 2026 GMT
        Subject: CN=69a3bf25-6ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:ed:04:74:44:b9:e3:96:b0:75:4b:c9:31:
                    f0:69:a7:be:4e:04:86:ba:86:92:cc:3c:51:db:1d:
                    a7:21:45:dd:26:a6:f5:8b:14:3a:b5:5f:12:d6:c4:
                    dc:62:17:02:a5:8f:6d:6c:fb:df:0a:b3:b7:8b:25:
                    d1:1a:f9:a9:2c:9b:27:a5:ba:f2:40:f1:58:df:6a:
                    bf:ac:cd:4d:eb:5f:c0:fe:44:9e:3c:a3:db:da:25:
                    00:cc:b6:9b:4d:b6:b4:bf:e9:59:69:5c:08:4f:c9:
                    cb:cf:81:2c:63:b5:2e:60:42:9b:22:54:04:45:59:
                    c7:84:cc:78:94:40:4a:ea:2a:66:82:ae:0e:45:aa:
                    9d:0e:81:a1:52:5e:a5:c2:47:14:f5:66:14:65:d9:
                    2e:d1:03:e0:d6:1c:de:fb:7b:6c:04:2e:83:a9:9e:
                    74:98:d9:ff:f1:66:31:8d:1c:a9:d3:ed:ba:ac:da:
                    0d:ff:47:af:dd:51:0a:ca:ab:9f:f6:2c:9e:16:99:
                    ce:7d:a6:90:fd:23:2a:7a:82:4c:c8:0d:fd:19:43:
                    72:a3:f3:11:2d:14:fc:36:70:4c:32:00:76:18:48:
                    da:ea:c3:63:47:53:e5:82:87:5c:28:ed:15:c9:ed:
                    b4:9f:39:31:89:49:69:7c:be:33:5a:75:de:da:97:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:7E:D0:D8:57:91:97:6D:95:56:9C:4D:9C:4A:C0:F3:C6:E5:4F
            X509v3 Authority Key Identifier:
                keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:73:10:e1:2d:6b:99:b4:9f:ed:33:86:d1:2c:85:b9:66:4d:
         a4:b0:f4:5d:3c:fc:47:b5:4c:29:aa:ca:6e:cd:fe:1a:50:50:
         1d:00:23:91:e5:6c:0a:67:c9:a4:8c:21:f5:db:38:54:bc:32:
         cb:d2:4a:78:a5:11:86:b3:ba:c8:08:9b:da:f2:b3:1c:4e:67:
         16:a7:5a:5e:f6:e2:50:ef:57:81:c5:ca:f4:14:2f:82:cd:ff:
         51:6e:15:32:75:ea:f7:ea:44:64:62:86:ec:c7:d7:15:04:08:
         6e:f0:e7:00:0b:10:7f:3b:cd:fa:be:a3:d8:fb:bc:11:60:5c:
         04:74:dc:e6:25:a4:37:01:7a:57:b4:05:4d:39:0a:98:5c:46:
         cd:b0:5b:55:cb:49:ca:14:40:7c:9c:e8:1c:cc:69:83:cd:a6:
         3c:49:2a:a6:f2:78:69:67:32:d3:9e:2e:5e:18:e6:5d:38:a2:
         ec:82:b6:2c:08:18:af:c9:a9:38:c3:64:9f:a9:ba:db:3c:37:
         5b:d6:59:13:c0:11:62:e5:e7:3d:eb:b2:c2:25:49:98:d1:a8:
         fc:f0:b1:a5:c3:15:8f:89:0e:58:86:25:d1:70:50:6b:cd:f8:
         1f:87:2e:1a:09:ce:11:01:bf:d7:e7:06:9d:6f:90:e3:9b:c4:
         53:d7:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:05 2026 by rpki-client