Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
File:                     tnwkXksr7q0jwfBd0w_5B32HuOY.mft (raw, json)
Hash identifier:          19TTChIwqDIAC1DT2kiI6hRxV5ZdiJ2+/lKm4gVzkOI=
Subject key identifier:   0B:B0:06:DA:2E:21:99:C1:94:34:62:D5:04:D6:2B:BC:3B:4D:64:B1
Authority key identifier: B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6
Certificate issuer:       /CN=A91116C7/serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
Certificate serial:       133A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
Manifest number:          1330
Signing time:             Thu 26 Mar 2026 16:58:04 +0000
Manifest this update:     Thu 26 Mar 2026 16:58:04 +0000
Manifest next update:     Thu 02 Apr 2026 16:58:04 +0000
Files and hashes:         1: tnwkXksr7q0jwfBd0w_5B32HuOY.crl (hash: LpE6LL3qAtjypsBZbGW8YRJ6+qbFWkWC8L7NYadg4DA=)
                          2: 0CAF01A6C6C811E8AECD6165C4F9AE02.roa (hash: p96Pk01HnxFF2EIL/xWnzPT9gE4H/ULfnQINm3EmY2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl
                          rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4922 (0x133a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116C7, serialNumber=B67C245E4B2BEEAD23C1F05DD30FF9077D87B8E6
        Validity
            Not Before: Mar 26 16:58:04 2026 GMT
            Not After : Apr  2 16:58:04 2026 GMT
        Subject: CN=69c5659c-52d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:ff:4c:fe:d8:7a:78:31:a5:ed:ba:fc:5d:
                    8d:b9:b9:f0:c1:ea:c4:cb:fc:50:6d:95:b8:4a:c2:
                    05:79:40:46:1c:34:62:bc:49:fa:e3:a6:f4:c2:3d:
                    03:ae:f6:98:8e:e0:54:c9:e9:cb:9e:aa:0f:0c:d6:
                    c7:c7:5f:de:fa:bb:d9:e4:e7:1e:bf:35:cb:df:13:
                    45:79:0d:71:21:17:57:2d:9a:03:72:66:47:e1:e0:
                    d4:2d:97:35:20:d4:98:3a:b1:00:4f:71:24:09:61:
                    8b:ba:2d:59:6e:89:f4:c4:70:53:07:71:9f:ea:99:
                    d2:d1:2a:84:da:64:9c:f9:86:e1:1c:bf:fe:c2:68:
                    7f:22:a1:4f:f5:0f:4b:e4:4e:21:b9:07:dd:ad:49:
                    b8:22:d9:0a:8c:f0:0e:19:7b:b0:6a:38:6c:80:cb:
                    de:19:d9:ad:18:7d:7c:74:0c:8b:94:56:79:c0:75:
                    72:fe:50:26:9a:9e:20:4c:e7:44:41:c7:b6:23:cb:
                    f3:77:5d:3c:d3:1e:08:5a:09:10:99:be:42:e0:fa:
                    92:b7:9a:5a:83:85:75:65:ba:51:ca:17:f3:9f:0d:
                    54:a0:b2:ea:b8:38:20:91:32:54:d5:ad:0c:09:48:
                    86:51:7d:fc:e9:58:d8:34:7e:cd:d5:d2:0b:54:54:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B0:06:DA:2E:21:99:C1:94:34:62:D5:04:D6:2B:BC:3B:4D:64:B1
            X509v3 Authority Key Identifier:
                keyid:B6:7C:24:5E:4B:2B:EE:AD:23:C1:F0:5D:D3:0F:F9:07:7D:87:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnwkXksr7q0jwfBd0w_5B32HuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116C7/C856D6C4C6C611E882A41260C4F9AE02/tnwkXksr7q0jwfBd0w_5B32HuOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:1d:95:8a:75:e3:d8:b5:b2:dc:c9:6e:e3:f1:be:5c:45:
         a3:7f:b8:6d:5e:41:ff:19:91:80:8e:f5:c6:3c:86:23:cf:d7:
         63:26:e5:f9:ec:b8:ad:91:bb:f1:c1:da:a8:08:95:e7:aa:24:
         4f:ea:9b:98:a1:c8:82:26:15:d7:06:61:0a:89:ff:61:c6:c8:
         09:cc:32:6a:22:c3:b8:78:0b:e4:bf:bd:3b:a0:a9:0c:24:63:
         52:b4:41:cf:76:90:a6:67:e8:5f:1f:7a:e8:02:1b:4a:05:3d:
         e0:59:a1:c2:92:7b:57:e1:52:be:2a:71:1d:27:a5:1b:95:d1:
         57:0e:80:f1:a7:92:4a:68:31:b3:63:40:35:a4:f7:70:e1:32:
         d1:b1:f2:0d:2a:5a:c9:05:33:37:71:7e:86:c4:45:6e:8a:eb:
         53:f0:61:73:5c:12:ec:6f:44:a6:93:d0:c5:37:95:39:6b:36:
         ff:3e:b6:2b:e3:2b:c4:23:9e:2b:bd:d3:27:1b:9a:3a:f1:a8:
         95:19:70:dc:6e:5c:90:04:0c:62:df:b2:ed:e0:a6:02:cf:42:
         80:28:32:4d:f1:67:ed:d9:43:3e:af:06:48:9e:3d:39:04:fe:
         e7:9f:3e:23:9a:fe:a2:1b:85:94:d4:5f:87:65:c3:16:01:da:
         77:ae:db:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE2QzcxMTAvBgNVBAUTKEI2N0MyNDVFNEIyQkVFQUQyM0MxRjA1REQzMEZGOTA3
N0Q4N0I4RTYwHhcNMjYwMzI2MTY1ODA0WhcNMjYwNDAyMTY1ODA0WjAYMRYwFAYD
VQQDEw02OWM1NjU5Yy01MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4L/TP7Yengxpe26/F2NubnwwerEy/xQbZW4SsIFeUBGHDRivEn646b0wj0D
rvaYjuBUyenLnqoPDNbHx1/e+rvZ5OcevzXL3xNFeQ1xIRdXLZoDcmZH4eDULZc1
INSYOrEAT3EkCWGLui1Zbon0xHBTB3Gf6pnS0SqE2mSc+YbhHL/+wmh/IqFP9Q9L
5E4huQfdrUm4ItkKjPAOGXuwajhsgMveGdmtGH18dAyLlFZ5wHVy/lAmmp4gTOdE
Qce2I8vzd1080x4IWgkQmb5C4PqSt5pag4V1ZbpRyhfznw1UoLLquDggkTJU1a0M
CUiGUX386VjYNH7N1dILVFRk/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAuwBtou
IZnBlDRi1QTWK7w7TWSxMB8GA1UdIwQYMBaAFLZ8JF5LK+6tI8HwXdMP+Qd9h7jm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZDNy9DODU2RDZDNEM2
QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdxMGp3ZkJkMHdfNUIzMkh1
T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rud2tYa3NyN3EwandmQmQwd181QjMySHVPWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTZDNy9DODU2RDZDNEM2QzYxMUU4ODJBNDEyNjBDNEY5QUUwMi90bndrWGtzcjdx
MGp3ZkJkMHdfNUIzMkh1T1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbzAdlYp149i1stzJbuPxvlxFo3+4bV5B/xmRgI71xjyGI8/XYybl+ey4rZG7
8cHaqAiV56okT+qbmKHIgiYV1wZhCon/YcbICcwyaiLDuHgL5L+9O6CpDCRjUrRB
z3aQpmfoXx966AIbSgU94FmhwpJ7V+FSvipxHSelG5XRVw6A8aeSSmgxs2NANaT3
cOEy0bHyDSpayQUzN3F+hsRFborrU/Bhc1wS7G9EppPQxTeVOWs2/z62K+MrxCOe
K73TJxuaOvGolRlw3G5ckAQMYt+y7eCmAs9CgCgyTfFn7dlDPq8GSJ49OQT+558+
I5r+ohuFlNRfh2XDFgHad67b0A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:11:49 2026 by rpki-client