Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File:                     TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier:          N1Ujt36N98A0dcHWrAFu2gLuW8aTGonZAn7qBMUMRfg=
Subject key identifier:   0A:20:86:73:FB:3D:90:01:A5:E4:7A:E8:17:3E:CD:B5:F6:DD:1D:5E
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer:       /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial:       036D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number:          0366
Signing time:             Fri 27 Mar 2026 00:39:26 +0000
Manifest this update:     Fri 27 Mar 2026 00:39:26 +0000
Manifest next update:     Fri 03 Apr 2026 00:39:26 +0000
Files and hashes:         1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: FLgwJP+b+qpRnAKxLChLIhkCJLf+N/W53q+1IS3mobs=)
                          2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
                          rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
        Validity
            Not Before: Mar 27 00:39:26 2026 GMT
            Not After : Apr  3 00:39:26 2026 GMT
        Subject: CN=69c5d1be-702e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:ca:59:93:94:3c:39:8c:dd:b3:a8:dc:54:
                    15:4c:7c:2d:8d:74:03:69:95:1e:a4:f2:95:d2:fb:
                    ad:ce:e8:2c:af:9f:75:94:9c:58:7f:be:4c:5c:5b:
                    d2:34:06:a1:f4:cf:c6:dd:d6:d0:ab:08:26:4b:65:
                    40:57:63:9e:00:73:74:87:88:e1:34:b0:47:4c:49:
                    e2:fe:69:30:58:ca:53:1f:31:6d:fc:87:26:a9:52:
                    15:b0:b2:a8:91:20:08:c9:ae:42:f8:4b:9b:47:46:
                    ac:ee:0e:46:d4:92:de:01:81:01:01:12:dc:29:5b:
                    d8:5c:06:47:0f:e9:97:b3:ea:e2:00:95:c6:f8:16:
                    b3:18:7f:a0:ff:6d:12:e0:9b:4e:39:88:f0:41:d1:
                    58:42:56:56:32:ea:4a:50:ef:ae:aa:0d:74:68:2a:
                    3e:2e:2b:89:09:59:b3:07:ab:14:c3:35:16:39:d9:
                    a3:ed:61:8d:f6:40:51:80:22:d5:0f:7c:25:ee:7a:
                    0f:ab:54:ae:38:ac:cc:c4:21:27:da:ab:09:9f:c9:
                    d8:25:e6:a1:b2:0c:4c:19:80:e7:69:c0:e4:a9:3d:
                    c3:a7:a3:85:57:cc:1a:fc:a7:65:2b:7a:38:b5:59:
                    95:d8:60:04:d0:4b:db:6f:0a:1a:ba:c7:cb:68:f7:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:20:86:73:FB:3D:90:01:A5:E4:7A:E8:17:3E:CD:B5:F6:DD:1D:5E
            X509v3 Authority Key Identifier:
                keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:34:c5:68:e8:ba:69:a7:e3:56:2b:ea:18:47:7a:b2:1f:
         1e:0a:c1:e0:bc:bc:3a:cf:5f:65:3c:cc:9d:b8:d8:ba:f8:ed:
         60:c6:fc:4b:f8:b3:bf:45:b0:6c:d4:2a:19:55:cb:5e:26:bc:
         43:f2:4c:a8:82:98:06:9b:d0:88:58:e3:60:87:d9:5a:52:bb:
         0d:f5:e2:60:3c:f8:93:6b:7f:b1:e6:d6:df:85:32:46:80:4d:
         26:be:07:66:98:d3:ee:20:44:8e:23:fb:23:68:5a:31:e8:81:
         7a:f1:72:ef:bf:5d:f0:b7:33:0f:c3:a5:1a:07:3b:c8:f6:3e:
         cb:a0:56:b9:3e:41:f5:8e:76:2a:46:f1:82:47:e3:2f:43:67:
         99:30:6e:59:7c:5a:f9:de:6b:28:cd:f3:88:02:7a:41:87:f9:
         b0:16:d1:4b:11:4f:31:cd:08:cc:e8:f6:a0:dd:5c:93:2c:97:
         92:25:fe:c3:f6:58:be:61:c5:86:80:eb:21:0f:f2:85:a9:2a:
         15:de:4a:0b:f6:c4:b8:bd:33:6e:4b:cc:93:6a:15:c0:56:01:
         64:1a:63:9d:d3:6f:51:a4:b1:83:14:76:8b:0e:82:a6:9a:4d:
         91:61:1a:79:73:16:a1:d9:d4:21:11:7a:42:09:f7:25:d7:21:
         3b:41:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 09:35:34 2026 by rpki-client