Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
File:                     TKAuwRGHSuDn0FVaJf8zAvkS64w.mft (raw, json)
Hash identifier:          QgrP3dXWp8s57bqRgOhxuHvx0AgpW+CW8CF8klC1I0Y=
Subject key identifier:   6B:B8:DA:DF:2B:44:1C:EB:EF:7A:9A:27:0E:FC:7A:D5:67:8A:FC:FE
Authority key identifier: 4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C
Certificate issuer:       /CN=A915825D/serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
Manifest number:          0108
Signing time:             Wed 25 Mar 2026 05:22:39 +0000
Manifest this update:     Wed 25 Mar 2026 05:22:39 +0000
Manifest next update:     Wed 01 Apr 2026 05:22:39 +0000
Files and hashes:         1: TKAuwRGHSuDn0FVaJf8zAvkS64w.crl (hash: VLquDRWexxwFxUw6Dg4uTHl3EV+RhokyrwSxmxEBx3I=)
                          2: 109B1A6AC14F11EFAE8F4B0BC4F9AE02.roa (hash: UklKWqjJk/WpHXMdJyVcNE7U3J0tkGmO5t0fZzlkKZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=4CA02EC111874AE0E7D0555A25FF3302F912EB8C
        Validity
            Not Before: Mar 25 05:22:39 2026 GMT
            Not After : Apr  1 05:22:39 2026 GMT
        Subject: CN=69c3711f-890f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:c5:36:29:fe:6a:fa:8c:15:f2:07:77:be:
                    5c:d2:3a:9d:fc:d8:d1:d6:cd:80:cc:fb:f8:47:a6:
                    d6:e1:5c:ea:7a:1e:f4:6d:29:09:a2:ee:0b:dc:95:
                    64:f4:84:0d:b4:78:8a:51:ba:39:ce:87:79:0a:ed:
                    9f:9e:54:28:41:8d:74:7b:90:65:54:92:3a:1d:5e:
                    86:64:26:a8:c6:b9:7f:22:79:01:83:ca:a3:84:9c:
                    3d:b5:2c:0d:c7:c4:77:28:d3:f4:f1:03:5f:e1:3a:
                    50:67:c3:bb:0e:30:58:f4:af:1f:60:5b:7a:2e:dd:
                    bf:00:db:5b:44:80:88:d6:06:4a:28:b5:56:05:0c:
                    df:c7:0b:d8:75:bb:d7:f4:1e:b2:d2:a0:1d:e3:4a:
                    5a:e9:1e:4f:61:33:d1:51:e6:42:0e:7c:9e:e9:66:
                    10:72:c6:31:b7:1c:55:33:7a:d6:6d:6f:8c:99:cf:
                    ed:a5:3d:da:a0:60:72:56:78:01:7d:e4:d5:35:d5:
                    57:f0:fa:d4:49:e2:01:97:27:59:ca:34:6d:6c:a9:
                    29:73:7e:a9:6e:db:ec:98:ea:db:7f:68:5c:04:37:
                    fb:ff:1f:7a:da:73:58:91:38:bd:7d:ff:3a:fd:b7:
                    d8:15:e7:3d:cc:e7:48:f2:5c:a1:cf:66:2f:b5:9e:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:DA:DF:2B:44:1C:EB:EF:7A:9A:27:0E:FC:7A:D5:67:8A:FC:FE
            X509v3 Authority Key Identifier:
                keyid:4C:A0:2E:C1:11:87:4A:E0:E7:D0:55:5A:25:FF:33:02:F9:12:EB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TKAuwRGHSuDn0FVaJf8zAvkS64w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/DD71D568A44611EF8D58A624C4F9AE02/TKAuwRGHSuDn0FVaJf8zAvkS64w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b1:51:8b:88:fd:15:53:ac:cf:88:7b:5a:79:4f:20:cd:c6:
         aa:6f:d1:12:ba:3a:e9:57:87:cd:c1:4e:71:cc:33:e5:84:be:
         c7:e7:73:89:d4:fe:d1:e4:d9:4b:1e:7c:7d:e7:59:4c:9b:f3:
         0c:54:c3:09:84:f6:99:f8:48:01:74:7e:9e:ba:a9:e2:22:9b:
         92:13:a2:29:3d:b7:98:aa:52:36:2d:51:b4:c5:fc:1f:43:a1:
         51:fa:c7:e5:8c:a6:d4:3d:ec:98:6c:ae:e8:a9:71:a4:cc:b0:
         d3:bd:74:64:c1:78:fa:72:b5:eb:c2:42:ba:05:52:2f:99:0f:
         92:b8:33:0f:98:da:c6:8c:0a:91:c1:3e:92:f6:34:3d:c4:2b:
         a0:b2:42:1c:76:e3:b7:9f:5c:a5:b7:8b:d4:43:bd:f1:2c:96:
         e7:9d:44:74:a5:83:f2:a9:8f:21:2e:26:52:2f:e8:de:6e:0d:
         c4:c4:58:80:71:f1:fc:01:54:41:7b:05:88:71:2c:78:1d:28:
         d7:7d:95:77:3e:55:d5:5b:75:e7:75:f1:cb:4e:05:8b:cc:77:
         a0:d4:37:00:53:8f:46:48:c9:5d:47:1e:22:b5:66:0e:26:f6:
         d2:e3:0b:5b:6f:e5:42:16:a8:4d:aa:a3:b4:27:90:d6:5a:5f:
         22:92:71:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgyNUQxMTAvBgNVBAUTKDRDQTAyRUMxMTE4NzRBRTBFN0QwNTU1QTI1RkYzMzAy
RjkxMkVCOEMwHhcNMjYwMzI1MDUyMjM5WhcNMjYwNDAxMDUyMjM5WjAYMRYwFAYD
VQQDEw02OWMzNzExZi04OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+XFNin+avqMFfIHd75c0jqd/NjR1s2AzPv4R6bW4Vzqeh70bSkJou4L3JVk
9IQNtHiKUbo5zod5Cu2fnlQoQY10e5BlVJI6HV6GZCaoxrl/InkBg8qjhJw9tSwN
x8R3KNP08QNf4TpQZ8O7DjBY9K8fYFt6Lt2/ANtbRICI1gZKKLVWBQzfxwvYdbvX
9B6y0qAd40pa6R5PYTPRUeZCDnye6WYQcsYxtxxVM3rWbW+Mmc/tpT3aoGByVngB
feTVNdVX8PrUSeIBlydZyjRtbKkpc36pbtvsmOrbf2hcBDf7/x962nNYkTi9ff86
/bfYFec9zOdI8lyhz2YvtZ6MtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGu42t8r
RBzr73qaJw78etVnivz+MB8GA1UdIwQYMBaAFEygLsERh0rg59BVWiX/MwL5EuuM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODI1RC9ERDcxRDU2OEE0
NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9US0F1d1JHSFN1RG4wRlZhSmY4ekF2a1M2
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RLQXV3UkdIU3VEbjBGVmFKZjh6QXZrUzY0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODI1RC9ERDcxRDU2OEE0NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi9US0F1d1JHSFN1
RG4wRlZhSmY4ekF2a1M2NHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK7FRi4j9FVOsz4h7WnlPIM3Gqm/REro66VeHzcFOccwz5YS+x+dzidT+0eTZ
Sx58fedZTJvzDFTDCYT2mfhIAXR+nrqp4iKbkhOiKT23mKpSNi1RtMX8H0OhUfrH
5Yym1D3smGyu6KlxpMyw0710ZMF4+nK168JCugVSL5kPkrgzD5jaxowKkcE+kvY0
PcQroLJCHHbjt59cpbeL1EO98SyW551EdKWD8qmPIS4mUi/o3m4NxMRYgHHx/AFU
QXsFiHEseB0o132Vdz5V1Vt153Xxy04Fi8x3oNQ3AFOPRkjJXUceIrVmDib20uML
W2/lQhaoTaqjtCeQ1lpfIpJxTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:36 2026 by rpki-client