Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File:                     TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier:          arnoVyOGUmBPdIyJSIFGd3Xd1pkodhdmymulKlCOci0=
Subject key identifier:   E1:4C:AD:C8:23:04:26:A6:85:32:2D:A2:42:A2:3A:A5:F3:B0:81:9F
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number:          C0
Signing time:             Wed 25 Mar 2026 06:16:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:16:42 +0000
Manifest next update:     Wed 01 Apr 2026 06:16:42 +0000
Files and hashes:         1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: hT6MlNYILC653wG7RB1MXxQ7RGmainkihC7H4qvmib4=)
                          2: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: mmdoH+5fMH1SUT2ncOmpXZx/2twUEHAZ4APCf5ovSWY=)
                          3: 5905CBAEDFE111F083058845556F56BC.roa (hash: 4DuTgqQScmTd+yOhRtQdVkw1Ggj97Z9py9s2ziQdubQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: Mar 25 06:16:42 2026 GMT
            Not After : Apr  1 06:16:42 2026 GMT
        Subject: CN=69c37dca-2eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:df:4f:70:51:d9:73:64:c6:a7:25:aa:52:
                    c9:eb:68:43:69:d0:b1:db:c7:8e:db:3b:85:bd:99:
                    d0:4a:bf:2f:04:43:6b:7b:d5:01:7f:37:97:03:c5:
                    4f:46:50:03:56:04:9c:c5:46:47:21:01:7a:d2:80:
                    74:a7:8a:ec:68:54:ef:c9:8f:36:08:f4:c6:34:99:
                    b4:73:e6:a5:3b:2a:91:bd:09:ea:52:65:5c:a7:4b:
                    b3:f0:e8:4a:68:c2:a8:fe:9a:b2:26:2b:36:6f:fa:
                    b8:cf:d5:36:b4:7c:50:4d:c6:b5:bc:41:8a:c1:ec:
                    63:60:5c:b7:e3:0a:9f:41:7a:26:a3:b0:8d:2a:ce:
                    0d:61:fb:a3:62:03:33:d5:fa:84:3b:35:ff:c9:96:
                    89:0f:73:10:61:df:b2:40:49:af:c5:bc:96:15:ca:
                    13:77:62:f2:c3:14:7f:2b:42:f1:99:1b:ef:12:26:
                    34:cd:17:81:6b:73:ee:eb:c7:b5:e4:f0:2d:33:5a:
                    2a:7a:af:d7:2f:c7:f6:1c:e1:92:c4:c8:fc:25:5a:
                    b9:6d:f3:17:ae:78:39:c4:73:67:90:4b:5b:7b:2e:
                    ce:46:35:d2:5d:2b:0d:39:79:1c:55:00:56:61:94:
                    20:0a:5e:a5:01:c2:9e:c1:90:fa:e0:5a:0a:04:07:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:AD:C8:23:04:26:A6:85:32:2D:A2:42:A2:3A:A5:F3:B0:81:9F
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:32:d2:f7:5f:00:ff:ed:83:a7:47:b5:2c:0f:66:4c:70:
         b4:34:73:85:3f:e5:c6:83:62:6e:19:c4:15:54:c0:81:ec:92:
         00:87:01:93:bb:70:75:a6:31:21:a1:d9:9e:ef:6d:53:00:d6:
         e9:33:b4:72:2c:e6:b2:3f:2d:cc:af:3f:b7:7a:16:ca:bd:a1:
         6c:7d:11:d2:29:ed:2b:95:3a:3d:26:97:af:21:3a:af:50:67:
         b0:f4:3b:54:9d:f7:a8:b7:47:be:32:49:cb:50:df:6c:c4:83:
         73:62:4f:e1:4b:6c:03:64:67:16:c0:0e:b7:6b:0f:81:2f:aa:
         bc:02:13:ba:cf:d5:a6:19:cb:34:4e:10:6a:ca:c8:ba:5e:dc:
         f3:64:91:39:3c:46:8a:0c:8b:ce:f8:a4:12:5e:d2:b9:1f:f7:
         e9:20:01:4e:3d:4a:1e:b0:a9:3b:39:05:d7:66:09:62:8a:43:
         0b:5f:12:e5:dc:ed:dc:88:76:c6:67:e8:f3:6d:a8:53:15:50:
         9e:e9:c7:46:7e:10:d1:87:62:ae:84:a1:95:b3:d6:2f:8a:1a:
         8a:ec:22:c7:96:92:28:0e:bf:c5:33:dd:11:7d:78:8d:fb:7f:
         1d:48:9d:c6:61:0f:e0:61:c9:79:bf:b7:16:16:5f:c1:2a:5a:
         bd:a1:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:52 2026 by rpki-client