Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
File:                     TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json)
Hash identifier:          lUDiHBtUHm0m5c3L79Itlj4xMsPKwEclP9LDZYagb/k=
Subject key identifier:   02:88:03:CF:78:7F:33:22:7C:91:5C:DC:8C:26:16:6F:84:3C:49:D3
Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44
Certificate issuer:       /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
Certificate serial:       07F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
Manifest number:          07F2
Signing time:             Thu 26 Mar 2026 21:04:12 +0000
Manifest this update:     Thu 26 Mar 2026 21:04:11 +0000
Manifest next update:     Thu 02 Apr 2026 21:04:11 +0000
Files and hashes:         1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: HuqsXJYLSDUCCzHlQ7kG9WzXJHOqgRl381Nk0Jx/Ujw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44
        Validity
            Not Before: Mar 26 21:04:11 2026 GMT
            Not After : Apr  2 21:04:11 2026 GMT
        Subject: CN=69c59f4c-5e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:ba:56:90:16:d9:7d:76:68:91:79:ae:4d:
                    03:e3:80:29:62:0e:12:b8:eb:7e:33:68:4c:93:e3:
                    eb:6b:de:51:6d:30:7d:e2:70:2f:af:af:d6:84:f4:
                    95:c4:36:6c:9e:3b:77:7e:11:30:a2:6d:7f:c1:9f:
                    40:f2:bb:b3:86:e8:df:e9:22:61:81:cd:d4:e7:a1:
                    b8:18:bf:b8:40:dd:cd:ca:d2:de:d6:41:0b:f9:e6:
                    5b:ae:01:84:9e:32:c7:46:d2:7c:3a:5f:31:20:75:
                    8d:84:27:c1:c7:0d:26:62:e2:ae:07:ff:2b:e8:20:
                    3c:97:e5:5c:98:3c:e3:46:12:c7:a9:d9:99:54:72:
                    dc:ce:66:64:ec:ce:d4:62:5e:f4:a5:6b:c0:c0:d9:
                    60:ac:ce:f3:f7:b1:de:fb:d4:bb:4e:4c:21:59:4c:
                    f3:1a:89:65:bb:83:65:df:35:9b:6c:6f:d6:bb:2e:
                    b4:d5:55:ef:fe:64:76:f2:47:67:7e:b7:4d:a9:f3:
                    7a:1a:54:8f:2d:0d:f7:a1:fa:41:f6:f4:10:42:f5:
                    ac:e8:ae:99:6c:20:6a:a4:b2:3b:82:af:c7:03:1b:
                    60:f7:bd:c1:07:a5:9e:56:de:36:8d:aa:c3:36:29:
                    db:ca:85:c3:c8:57:92:ed:1b:37:f6:eb:5c:10:70:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:03:CF:78:7F:33:22:7C:91:5C:DC:8C:26:16:6F:84:3C:49:D3
            X509v3 Authority Key Identifier:
                keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1a:76:eb:13:4b:c7:02:0e:f7:8c:bd:16:ba:63:c2:ab:cc:
         ae:98:72:1e:d5:22:d9:20:ca:0b:6e:00:73:94:65:f9:da:30:
         ed:31:e1:e3:55:ef:aa:bf:32:47:58:77:b4:be:95:5b:de:93:
         80:fe:8b:3c:cd:69:bf:63:8b:6f:a8:cb:e6:bc:57:99:f7:9f:
         1b:95:a5:76:ca:c4:56:a7:d2:3c:70:98:18:16:a8:72:dc:68:
         d0:b3:90:43:40:b0:c9:d1:2e:38:3f:66:93:4d:ef:31:46:31:
         c3:4d:50:27:ed:39:91:ec:7e:8b:46:d3:94:70:98:3d:e0:95:
         30:0a:d4:e6:04:be:7f:d2:07:a4:82:58:23:29:b6:1c:bd:5a:
         c3:30:4c:59:54:f9:19:bd:00:0c:09:0b:c9:c3:12:10:d4:f7:
         46:48:c3:81:7e:ee:08:79:55:89:63:31:66:0b:17:96:41:b8:
         43:f4:1d:11:1e:ca:8e:60:d0:5d:6c:9e:13:1d:94:a1:0e:8b:
         dd:63:20:68:e8:8c:c6:08:41:d3:37:c4:1d:6c:5a:7e:32:d0:
         db:cf:c3:d7:d5:d3:fe:e6:7f:80:ae:f0:2e:19:03:69:29:23:
         94:52:a1:d4:09:4e:57:36:f3:52:71:4b:f5:3c:5b:2e:4e:f0:
         ed:4d:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:35 2026 by rpki-client