Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          XO5BXTRi/lvCKed8iLE2eV8oLZ6lKyqJkMrrrsuD8KI=
Subject key identifier:   F2:27:CE:CE:61:D2:E9:AC:25:85:3C:E8:E0:15:24:1E:19:C6:C8:32
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       042C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          0424
Signing time:             Fri 27 Mar 2026 00:09:36 +0000
Manifest this update:     Fri 27 Mar 2026 00:09:35 +0000
Manifest next update:     Fri 03 Apr 2026 00:09:35 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: W2IpwWTKNt00rcR11nSHZSs4fRkprxLlJaiVVjmbG48=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: fOVVIFjJvtGXdWvi8prpmgPz6YpqGlf3motP4AlsEzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068 (0x42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Mar 27 00:09:35 2026 GMT
            Not After : Apr  3 00:09:35 2026 GMT
        Subject: CN=69c5cac0-e005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:65:69:f8:3a:ec:e2:00:5a:0d:6a:7d:d7:
                    61:05:e1:68:70:29:67:9c:21:13:6e:55:cc:a2:2f:
                    23:5f:07:bc:95:bf:de:9b:94:67:30:39:a0:b6:28:
                    41:c5:90:9b:aa:81:d3:2c:8c:68:38:26:df:5c:21:
                    a5:ea:3d:7c:63:17:9c:af:18:bb:ab:7c:ec:62:f3:
                    48:73:6a:13:ea:61:a3:04:d7:6d:ea:36:fc:77:4d:
                    68:24:d8:27:41:7f:60:6e:d5:08:61:e9:02:f9:5f:
                    d1:c5:bc:9c:f6:04:a8:b4:b0:1a:d8:8a:b9:74:b7:
                    17:e7:a3:7e:dd:b2:b6:43:d3:14:8c:40:46:96:fb:
                    47:bb:f7:82:97:a5:c2:62:09:23:24:c8:09:4b:6a:
                    02:9e:5a:a6:28:82:ba:32:25:ee:78:9b:94:ac:43:
                    bc:98:4f:c4:a7:74:06:3e:01:84:dc:30:e9:b5:7f:
                    17:a1:3b:e0:56:ac:2d:69:d9:1e:00:cb:96:a7:34:
                    55:e7:84:c3:fc:2b:45:35:7e:dd:ca:3c:45:70:71:
                    1b:2a:85:2c:3e:5c:f5:3a:b1:eb:dc:cb:db:e7:ba:
                    5d:41:d6:16:2b:e1:94:6e:c3:03:57:f7:20:43:ba:
                    21:ea:57:6c:81:18:2b:f1:b1:c7:1c:93:87:9f:76:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:27:CE:CE:61:D2:E9:AC:25:85:3C:E8:E0:15:24:1E:19:C6:C8:32
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:66:49:2e:98:1f:12:9c:f1:99:52:8f:14:e4:47:ad:76:40:
         b6:34:9c:4d:ed:f2:db:81:52:f1:fd:3d:8f:2d:15:76:97:46:
         0b:41:73:67:11:69:e6:a8:5e:75:f9:94:d6:23:8d:9c:9d:df:
         ea:af:e7:41:d4:52:9d:80:3f:29:2d:a6:af:f3:e1:95:76:04:
         35:4c:f9:e3:68:fa:2e:80:62:3a:e1:1f:9d:55:15:1c:88:fb:
         40:39:7e:b7:ff:9e:21:dc:c9:b1:6e:ae:20:5a:99:73:6f:30:
         fc:0e:d8:8d:69:b1:0a:31:d8:af:e2:63:34:b0:1c:7f:ad:5c:
         c0:bb:56:8a:c0:8d:a7:9d:7f:e7:31:e9:4d:3b:a9:dc:84:1f:
         e1:40:39:1b:ad:f8:94:db:ca:bc:9c:ab:ef:af:d8:65:2c:d7:
         59:88:12:f3:e0:aa:15:7f:75:0f:53:1a:67:f9:d4:05:50:9a:
         7a:ae:e8:9f:cd:ff:66:42:3c:16:cb:71:fd:6a:c1:00:7a:8e:
         ec:00:7f:b6:07:08:2f:f5:5d:72:ba:80:1d:12:a5:31:f6:2a:
         7b:bd:72:d0:b0:6f:95:2a:47:17:a5:bf:6f:3c:10:df:f4:55:
         51:6d:15:39:df:1d:24:6e:0c:03:50:14:eb:4d:b6:a5:92:66:
         43:50:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:25:07 2026 by rpki-client