Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File:                     TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier:          UzjJS/cb0OcjRa6T45gMOKgNMHWW55tA8tIa+TbzKgE=
Subject key identifier:   A3:24:00:75:5C:98:08:9C:50:55:BE:A2:92:34:D1:CF:16:1E:04:75
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer:       /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number:          A1
Signing time:             Wed 25 Mar 2026 06:32:24 +0000
Manifest this update:     Wed 25 Mar 2026 06:32:24 +0000
Manifest next update:     Wed 01 Apr 2026 06:32:24 +0000
Files and hashes:         1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: GKXBAEuVnO3eDo7TQ93Wh8qiUwiQzJoT+hVpPIOe024=)
                          2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: stzvaQb1q0aBe4Ji0bjzDRZOM/zXcEzYJI+enj1Jq5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
        Validity
            Not Before: Mar 25 06:32:24 2026 GMT
            Not After : Apr  1 06:32:24 2026 GMT
        Subject: CN=69c38178-bbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:b3:39:30:d3:31:bc:6c:e7:b7:1c:15:d5:
                    10:95:4a:30:ae:2a:fd:f8:c0:21:27:88:d7:e3:3b:
                    a2:69:6f:09:06:9d:85:ad:cd:69:8e:8b:6e:20:78:
                    76:9f:ef:a3:79:fc:43:70:77:11:fb:40:75:29:1b:
                    4d:c7:b0:e7:9e:24:94:9c:fa:0a:05:a4:38:7c:2d:
                    9b:b0:db:b1:42:af:05:e1:1b:63:6a:d6:94:b5:55:
                    6f:b6:8e:28:a1:60:06:c0:53:55:f2:a4:c2:95:b8:
                    46:5a:fc:08:4d:31:9f:03:8f:0d:d0:36:1c:36:cf:
                    d2:86:be:d4:66:22:9a:95:9f:fe:06:3f:e7:fe:a0:
                    6d:b9:0f:02:39:d2:17:94:a5:82:f1:e4:c9:6a:99:
                    7f:4a:c0:1b:8e:32:17:6a:79:ac:c3:bb:d7:2e:47:
                    87:98:85:76:7f:9e:b7:d9:20:0c:73:c1:fb:e4:fb:
                    3f:74:0b:61:aa:91:28:96:64:62:cf:95:40:ac:fe:
                    5b:9c:9a:fe:2b:cd:5b:5e:4d:b6:f0:27:f9:a9:2e:
                    4f:fe:e4:e6:ce:c3:76:9d:62:2e:b5:d3:dd:44:64:
                    2d:21:98:14:5b:83:c3:39:d6:b4:9f:4f:a2:a9:05:
                    18:91:a9:f9:e8:c5:e3:82:a4:09:65:7a:67:d8:f7:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:24:00:75:5C:98:08:9C:50:55:BE:A2:92:34:D1:CF:16:1E:04:75
            X509v3 Authority Key Identifier:
                keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:2c:7f:bf:93:82:fc:21:55:b1:90:16:96:10:81:17:52:
         cc:a2:a7:63:ff:a1:f6:24:fb:30:9a:4a:2b:9d:0e:ae:a5:a4:
         99:18:b7:b1:b6:20:d5:a1:90:20:a2:30:77:32:c9:2a:10:07:
         80:79:f8:f2:c9:01:27:6c:94:db:67:f3:b0:80:00:47:12:95:
         84:ed:ad:62:ad:38:3d:5c:cc:b4:2d:68:7b:e7:9c:39:4c:b2:
         92:36:02:fe:8c:a4:6f:84:95:71:16:e3:a8:58:82:52:aa:c8:
         d6:53:cf:cf:70:96:f8:58:29:93:f1:fe:98:a4:69:30:f5:8f:
         be:df:40:a3:c3:9c:9a:77:a2:e6:90:ed:c5:5b:4c:6d:e4:bd:
         de:1e:de:ca:6e:1a:e3:61:4e:1c:8d:17:36:ca:4b:ea:1b:85:
         0d:bb:e0:40:ef:2f:e5:0e:73:d8:88:b2:6c:b7:75:be:36:25:
         fe:9f:e3:fb:40:d1:8e:48:13:33:51:21:28:a3:04:16:73:be:
         94:78:44:00:60:df:17:d5:ce:c7:3f:e8:b5:44:90:08:cd:74:
         e1:f3:09:25:ab:db:bc:8e:ed:72:26:61:2c:21:08:18:cc:dc:
         c6:26:13:fa:2e:a0:42:6b:1e:11:ae:4f:8c:a2:19:41:fd:0e:
         06:a5:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:26 2026 by rpki-client