Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File:                     TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier:          /XMnnYU8mIFTvLveHVKc/YwbYDhYqc3FrNWJ24SnwxU=
Subject key identifier:   57:35:E2:B3:FD:FC:49:16:07:CF:EE:41:FC:C0:5B:FB:2B:D6:F6:CB
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number:          E4
Signing time:             Wed 25 Mar 2026 05:44:54 +0000
Manifest this update:     Wed 25 Mar 2026 05:44:53 +0000
Manifest next update:     Wed 01 Apr 2026 05:44:53 +0000
Files and hashes:         1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: YwMJzc5O+LOWkuGhs8Safn9uOHlKr14wo2gMnVgFdzI=)
                          2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: 9hD/dx6imL5ezzVNuHPKFA9H7c+V2kUBFF6Mm8rBJqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Mar 25 05:44:53 2026 GMT
            Not After : Apr  1 05:44:53 2026 GMT
        Subject: CN=69c37656-c38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:b2:e1:49:5e:1e:3c:3f:6e:bf:b2:a0:7c:
                    67:9f:19:23:86:6f:a1:5b:3c:0c:4a:49:db:1c:c3:
                    ed:38:10:68:0a:3c:d6:6b:71:fb:c8:80:40:26:71:
                    0d:f2:15:78:e5:f4:22:4c:e6:cd:f7:0f:41:d1:f6:
                    ca:58:1a:9d:8d:b4:20:ea:27:14:1d:64:ce:1c:4d:
                    6a:f3:ae:be:64:fc:07:09:f3:13:8f:ed:bb:7c:4f:
                    7f:f2:a0:94:b1:c6:76:d1:d2:de:d0:81:16:5c:96:
                    aa:14:66:29:e8:bd:70:93:c4:f4:a2:6f:91:3b:0b:
                    ac:7e:1e:55:4a:4d:71:4f:75:f1:de:2a:18:cf:a4:
                    0a:21:19:1f:b3:c1:d5:bf:ef:4a:15:80:16:18:1f:
                    63:52:b9:33:52:00:05:78:c1:de:8f:f8:14:c7:55:
                    e8:1c:84:06:38:4c:ad:9a:ea:b4:27:53:1c:48:a5:
                    08:cb:e8:dd:2f:ca:06:1b:2d:19:86:b5:9b:29:8f:
                    84:8f:d8:17:86:cd:a7:ab:63:91:2b:fe:84:c9:8b:
                    cb:b0:c1:c2:d0:70:38:c1:ad:bd:ec:43:6b:da:12:
                    e5:2a:9a:2e:18:1b:fe:8e:ed:9e:bf:99:49:25:b6:
                    5c:3b:68:7c:4e:fe:e7:d4:5d:80:77:0b:1c:ee:e6:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:35:E2:B3:FD:FC:49:16:07:CF:EE:41:FC:C0:5B:FB:2B:D6:F6:CB
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:c2:35:f4:c4:20:88:9e:c1:e7:1a:83:b9:81:d6:6d:88:
         47:cf:87:df:9c:3a:06:22:68:0e:5f:81:38:9a:7c:0f:8c:99:
         4b:0c:7d:83:f8:3c:43:36:d9:bb:c3:d5:0a:ba:11:47:96:45:
         0d:eb:92:10:ee:7a:92:28:3b:ed:bc:1c:a0:f5:98:81:4c:2a:
         57:d6:e9:91:e8:08:74:ee:63:87:d5:f4:76:5e:f8:9c:7a:92:
         2b:a6:38:92:4a:cc:b5:63:8a:1c:91:46:9a:1c:a8:55:9a:a1:
         24:c9:69:74:8f:80:99:33:70:92:44:07:cc:c4:62:b7:fd:86:
         a7:bf:00:1d:2d:0d:3e:73:03:7a:88:4b:81:4f:b3:42:18:73:
         95:ea:dd:38:48:5e:0c:d9:b2:5c:7b:3d:62:e5:99:b2:10:af:
         c8:b8:b3:ef:e4:1e:80:e4:56:c2:91:fd:2f:ad:8e:8e:39:67:
         96:9a:6f:b9:f0:47:62:28:9c:51:2e:04:e5:05:87:40:76:72:
         28:4e:22:0c:4e:b8:61:49:b4:37:fc:48:5c:62:5d:b0:2b:a8:
         69:48:1e:54:b6:b3:bb:83:a1:9f:f2:3d:f5:af:ab:9d:c2:2b:
         47:0a:46:ca:be:30:a7:76:a1:ce:a8:b8:00:c8:20:1b:95:fa:
         4e:41:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:14 2026 by rpki-client