Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
File:                     TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft (raw, json)
Hash identifier:          1oAZI5BTkR4wIKmxi8vNmZLq9+JbU/HGMPfCx5oBr20=
Subject key identifier:   93:B4:14:CE:17:32:FB:51:9E:B1:9D:D7:B0:47:A2:DC:71:DC:3C:67
Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46
Certificate issuer:       /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
Manifest number:          0154
Signing time:             Wed 25 Mar 2026 04:18:46 +0000
Manifest this update:     Wed 25 Mar 2026 04:18:45 +0000
Manifest next update:     Wed 01 Apr 2026 04:18:45 +0000
Files and hashes:         1: TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl (hash: rMCt3xe1uF3VW5VvTrGwRjYYsa0/Z8bSJoihKhMOqRk=)
                          2: FFE6CB36228111EFA702E016C4F9AE02.roa (hash: U5nVSPD3T1HoVwbttFEp4zUILDT+u5lIs2AzBZe0/U4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl
                          rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546
        Validity
            Not Before: Mar 25 04:18:45 2026 GMT
            Not After : Apr  1 04:18:45 2026 GMT
        Subject: CN=69c36225-edda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:0c:c1:7e:ed:81:e9:61:db:66:13:62:e1:
                    1d:d5:eb:d4:57:da:c2:25:be:92:37:aa:bc:94:59:
                    66:e1:e1:3f:2b:8c:ce:9e:96:94:ac:4a:9c:95:c6:
                    b1:40:a4:e5:51:cc:fb:32:85:0c:53:aa:9c:e4:05:
                    ec:82:cf:8e:a0:4d:df:11:b7:f9:3a:79:96:c8:08:
                    10:19:28:13:17:a3:27:3e:95:b4:a1:75:1b:e1:3d:
                    ed:70:61:5a:f0:66:67:ba:23:b8:86:2e:9f:5f:c3:
                    51:9c:54:e6:d9:5d:87:80:fe:f8:be:79:74:21:6c:
                    80:bf:6b:cc:65:44:a8:7f:c9:18:4f:82:3e:8a:2d:
                    52:f0:27:ce:a1:4a:84:0e:fd:60:a2:b3:8f:30:9b:
                    10:ec:c1:59:69:f9:de:6e:71:88:1c:8b:c0:76:85:
                    f7:f5:5a:f8:b9:dc:20:cf:fc:48:ef:20:5a:5a:50:
                    6a:f7:53:c7:f7:ea:0d:81:d9:21:96:43:57:16:89:
                    f2:c1:ca:32:57:59:a8:16:9a:06:b8:3d:9d:a9:9f:
                    14:de:a9:fe:d5:f3:a0:b3:8e:de:cc:6f:88:65:77:
                    df:bc:86:b9:b4:8a:25:20:a5:86:02:65:93:a1:38:
                    33:9d:32:70:0f:55:61:01:cb:ca:40:e6:13:e5:fe:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B4:14:CE:17:32:FB:51:9E:B1:9D:D7:B0:47:A2:DC:71:DC:3C:67
            X509v3 Authority Key Identifier:
                keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:b3:d3:ea:6a:5a:62:49:32:2b:c7:87:df:e9:83:4e:75:
         8d:a3:e7:0d:0a:fc:01:d1:a2:8c:30:3d:fc:a1:31:e9:3c:88:
         5b:d7:4c:c0:c4:39:2e:a5:26:c3:5e:b3:24:35:80:4a:7d:a3:
         b8:3a:4f:5b:5e:43:64:82:fd:32:b6:89:00:b6:61:e2:32:09:
         59:60:38:61:47:06:3d:ac:8d:26:5e:cf:55:18:85:b0:b3:d4:
         0f:a9:3a:6a:ae:c9:ca:44:da:70:4f:07:8d:04:8e:a1:24:fc:
         52:de:7d:7c:1c:8a:2c:5e:da:e5:5b:de:0b:1c:ed:8a:cb:f6:
         da:b0:20:9a:ee:d7:5e:99:63:da:d9:b1:ba:00:53:b3:22:37:
         fc:52:7f:bd:c8:d2:88:ac:61:40:41:8e:6a:3a:78:74:71:a6:
         42:5e:7e:ab:d8:7f:6b:6a:64:8a:86:f5:f3:16:32:14:e1:a9:
         ed:af:e6:cc:25:dc:de:dd:e0:a2:60:4c:3f:13:51:1d:37:b8:
         e5:42:c1:66:22:7a:38:8b:b0:bc:0a:e6:86:88:8a:69:76:3a:
         38:39:7d:5a:23:ba:eb:f4:d1:ad:48:05:71:15:51:6b:95:af:
         ba:25:8d:f4:f3:ab:40:41:9c:30:e7:e1:0e:07:76:55:18:bc:
         9a:b6:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:45 2026 by rpki-client