Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File:                     TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier:          pTDFdgAiGzfxxuS3ff5KzS2aIN98S92iJWdUWSZwTEs=
Subject key identifier:   43:AE:71:11:0A:B1:DA:F5:08:86:1C:DD:F2:07:46:BF:60:BA:F1:94
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number:          0194
Signing time:             Wed 25 Mar 2026 04:11:29 +0000
Manifest this update:     Wed 25 Mar 2026 04:11:29 +0000
Manifest next update:     Wed 01 Apr 2026 04:11:29 +0000
Files and hashes:         1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: HYjOe3EVv/g0JeXN0MaXufRKjbCT+9NSXIPXoDd1Djc=)
                          2: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
                          3: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
                          4: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
                          5: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Mar 25 04:11:29 2026 GMT
            Not After : Apr  1 04:11:29 2026 GMT
        Subject: CN=69c36071-6c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:ca:f0:99:19:b6:5b:f4:31:b7:bf:e3:21:
                    d3:07:e4:24:09:b1:17:72:2c:cc:1a:fc:d9:12:8e:
                    1d:19:a1:ba:ca:38:b0:02:2f:d7:6c:39:c5:cd:87:
                    9e:8d:ba:3e:44:a6:03:3f:4f:ec:51:d3:ff:c5:d4:
                    15:50:21:3f:e6:c0:55:50:d3:2b:8a:4a:d1:86:82:
                    3d:ac:81:7f:0b:19:61:99:7a:80:dd:71:6a:41:3c:
                    09:f2:d9:19:56:45:97:e4:91:3e:fa:c4:fb:4b:a7:
                    47:bc:75:fd:48:7d:cd:1c:c5:f5:a8:58:ff:6e:fb:
                    78:05:d6:d0:a5:ee:92:bd:72:29:70:69:f1:19:1a:
                    20:2f:2c:4e:8f:9e:7e:7b:9b:68:06:16:df:e7:02:
                    e5:e4:fa:d4:32:70:01:b3:8c:76:66:b9:de:91:88:
                    d0:2c:e1:12:48:53:2c:46:7d:4b:a9:9f:03:6b:7c:
                    5b:09:ec:e8:25:79:9e:10:c5:f6:20:7c:c8:54:4f:
                    31:d1:f4:ab:bf:0d:74:fb:15:8a:bd:12:2c:4d:29:
                    8e:37:85:e7:57:10:30:c3:e0:0f:bc:6c:64:24:49:
                    52:a9:c9:00:c8:cf:fe:c6:09:7b:40:6a:17:e3:60:
                    17:b0:85:ee:49:86:23:57:7e:47:f0:78:c9:79:d1:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:71:11:0A:B1:DA:F5:08:86:1C:DD:F2:07:46:BF:60:BA:F1:94
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4b:83:5d:ea:05:f2:75:a9:f6:6d:ca:50:cf:5e:2e:f3:ec:
         b5:73:9e:23:df:a2:9b:e0:2e:61:6f:6f:95:ab:9b:56:5e:bb:
         82:d2:0a:fd:ec:69:de:de:fc:13:13:6c:05:b8:58:ee:88:30:
         af:9e:c8:f1:60:99:b0:c7:dd:85:df:e0:89:fa:96:df:d8:0e:
         6f:82:ea:ba:e0:fa:ef:28:1f:19:f4:03:49:3d:1e:d3:7e:6f:
         e7:89:92:49:10:21:5c:1f:5f:16:32:b7:4f:7d:64:66:bf:26:
         e5:8b:7f:da:4c:a8:ee:22:bc:da:cb:45:bd:2a:d1:b8:97:84:
         43:68:32:8f:46:4d:e0:5b:87:d1:5e:e4:ef:fa:0c:5e:9d:f3:
         61:4d:de:fe:6a:59:80:1a:a3:a1:e7:91:0d:dc:b7:a3:5f:11:
         0e:1d:2f:3b:34:3d:02:3e:67:1e:d1:33:a0:e1:3f:07:6e:41:
         d6:6c:19:1c:57:3b:3f:ee:95:44:2f:54:8f:2b:da:69:d6:74:
         6d:d0:64:b1:15:52:9e:3c:fb:75:10:d6:47:94:18:bc:90:6b:
         a2:50:a8:2a:96:31:5e:cc:ad:f8:2a:f9:99:4b:0b:07:0d:61:
         d6:42:8a:81:af:29:7c:3a:bb:ff:1c:0f:83:2f:5d:a8:59:64:
         3f:6c:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:37 2026 by rpki-client