Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File:                     rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier:          1ovKp+Ywlfy0OFMjV8W4T1JxD6bnTlasYBv7zpsqzCk=
Subject key identifier:   AB:E2:30:C3:44:81:91:4E:CC:9C:D2:57:5F:EB:38:0B:BF:AB:DC:66
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer:       /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number:          0115
Signing time:             Wed 25 Mar 2026 05:06:18 +0000
Manifest this update:     Wed 25 Mar 2026 05:06:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:06:18 +0000
Files and hashes:         1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: 30gNnK5Gcozqm433ddtaBSSnl9VA/K4TLMF6aF6ANrg=)
                          2: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: nnr6N7gsoMtV6N+GfW2wiOurQdubrWp+eixXKsMow9E=)
                          3: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: mkJn5HcxZSix0xQ2l2GY2Rnt28cmXJs8LaMjzdF8Bqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
                          rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
        Validity
            Not Before: Mar 25 05:06:18 2026 GMT
            Not After : Apr  1 05:06:18 2026 GMT
        Subject: CN=69c36d4a-f7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:57:66:82:e7:33:14:62:69:8b:eb:2c:e7:
                    a3:ed:5e:2c:15:ba:a7:5e:03:38:72:51:03:61:05:
                    3e:26:f0:d2:e0:41:74:f3:84:ca:65:b9:8a:64:95:
                    86:34:4c:aa:ac:96:a0:15:b8:5a:21:1b:30:b6:c4:
                    f7:c8:41:e7:2e:13:f4:07:32:b2:f0:3e:08:f1:bc:
                    3f:fa:e5:40:94:79:bc:63:6b:48:39:fb:71:98:ca:
                    f5:93:0d:b7:23:f9:54:c4:7b:64:d2:fd:3c:ea:ef:
                    e8:8a:cf:93:7e:6d:67:66:b7:39:ae:74:00:d9:07:
                    7d:07:8b:61:f2:5d:7d:26:24:00:1e:71:3b:53:54:
                    97:5f:58:20:45:a6:a3:6a:37:69:32:8f:34:70:f7:
                    b6:04:a9:64:59:17:32:93:7a:7a:ec:9c:e4:c0:a8:
                    aa:ad:87:b9:f1:a0:a2:7e:c1:d1:a5:81:72:22:ad:
                    9a:73:7e:d8:88:99:1e:6d:68:41:0b:82:24:cf:5c:
                    63:b9:02:69:98:4d:52:44:89:b8:fe:07:60:9a:56:
                    ec:b5:17:e1:3e:bb:26:b4:08:b3:8c:0e:f8:a4:42:
                    49:1e:51:7c:76:58:43:b3:45:52:f6:6a:2c:c4:24:
                    b7:02:eb:ec:fa:3a:b6:2c:5d:68:69:df:60:aa:23:
                    c7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E2:30:C3:44:81:91:4E:CC:9C:D2:57:5F:EB:38:0B:BF:AB:DC:66
            X509v3 Authority Key Identifier:
                keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:29:d8:4d:01:5d:70:2d:6a:38:3a:3c:c0:d1:a0:fb:88:
         fa:31:48:a8:45:62:9e:60:5d:ff:26:db:05:bd:de:43:1f:85:
         fb:5c:fc:76:56:25:61:9e:ef:b4:1d:19:58:11:c8:28:77:04:
         b6:6f:bc:dc:38:72:7e:6c:6b:e3:d5:69:43:ef:51:7d:c8:ee:
         3b:be:ac:15:59:57:33:81:79:43:d8:59:63:b0:26:30:6b:8d:
         79:f3:f5:0a:04:95:f1:2b:35:bc:d9:c7:0a:bd:55:95:cd:45:
         9d:3f:09:5a:26:eb:cb:74:cc:c6:d1:88:9a:27:58:2e:14:d0:
         b9:eb:6c:e3:4d:a0:a3:72:cd:f3:85:e1:c6:7b:23:7f:0f:08:
         d5:9e:b6:c0:d9:7c:25:db:2a:fd:7d:87:a9:37:40:79:10:b7:
         47:61:36:d3:23:f4:cf:eb:b8:c9:4b:85:d2:04:62:76:5f:6a:
         ff:3e:11:b5:3e:25:09:c3:82:c0:d7:bf:dc:9b:0a:53:c1:f5:
         b6:ba:31:70:eb:eb:9f:be:96:ba:46:cd:95:90:44:74:47:b6:
         a2:df:61:c0:9e:e1:a7:16:43:91:7c:1c:5f:87:58:2a:0b:08:
         e6:05:b5:71:77:ec:7c:1b:ed:b9:20:41:c7:d0:38:85:5a:26:
         af:01:d5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:09 2026 by rpki-client