Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
File:                     tnJ-39N9HiwXXBCBGh04qirGyJw.mft (raw, json)
Hash identifier:          igM4C4AHQ0Xi+fRDwLmESnPZxVpc89L7206JG9qWQUE=
Subject key identifier:   FD:EB:78:4E:09:F2:19:D0:17:70:42:B9:37:B6:FC:99:2D:B0:BB:7D
Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C
Certificate issuer:       /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
Manifest number:          01FC
Signing time:             Wed 25 Mar 2026 02:34:14 +0000
Manifest this update:     Wed 25 Mar 2026 02:34:13 +0000
Manifest next update:     Wed 01 Apr 2026 02:34:13 +0000
Files and hashes:         1: tnJ-39N9HiwXXBCBGh04qirGyJw.crl (hash: YzbGTnkl5sC/VHPS7+FhRwXThgOOyXVOf7I34M+cNW4=)
                          2: 862D5B3A2C8611EEB04B7B66C4F9AE02.roa (hash: pWAjmQn5SbEE6PdoMznAj34dV0v6ZXCFUuJiYeyqVgg=)
                          3: 207C8A52AC7611EEB465AF75C4F9AE02.roa (hash: zYQ2BctNXY7magajQqIBQAnaVIQn28KFCi8jua34WGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl
                          rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C
        Validity
            Not Before: Mar 25 02:34:13 2026 GMT
            Not After : Apr  1 02:34:13 2026 GMT
        Subject: CN=69c349a6-6067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:51:49:de:0a:26:95:17:07:ec:10:aa:bd:33:
                    b8:20:a6:b3:61:e9:8a:e9:2c:48:c1:93:b4:ca:f4:
                    0b:44:35:0c:03:80:66:cb:33:5e:91:11:17:14:c7:
                    bd:cb:f2:12:78:ef:7e:bd:ca:3a:3a:6f:1f:f0:57:
                    8c:d0:96:85:b0:10:16:61:d9:f2:b4:fa:3c:02:90:
                    cf:e6:41:14:d3:8d:f4:1a:34:d9:67:83:66:28:99:
                    2d:82:11:aa:3a:0d:18:0c:64:7a:61:46:1a:da:ef:
                    ab:96:0d:ab:62:68:77:ea:99:a9:be:24:c2:bf:77:
                    5c:00:0a:02:1f:23:1e:08:52:51:ed:72:4c:18:22:
                    5c:01:c4:ae:3c:14:ad:a5:a8:41:d1:7e:2b:f9:16:
                    91:fd:c6:56:84:e1:ad:ec:e4:35:fe:b1:7a:f4:d7:
                    00:f7:ca:09:b9:6f:50:ba:f9:5e:d0:27:55:98:a7:
                    bb:6c:26:33:f2:89:4b:00:76:f3:c1:a9:fc:26:9c:
                    c0:77:d4:1a:33:ed:04:bf:0a:38:c6:b8:34:0a:a6:
                    07:24:68:56:76:58:c7:fa:7f:e9:30:89:65:5a:19:
                    30:12:9a:c1:c1:59:b2:78:68:c5:29:54:44:4f:71:
                    69:f6:9a:05:8f:d2:e7:f7:a4:8d:25:c9:4e:9d:ae:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:78:4E:09:F2:19:D0:17:70:42:B9:37:B6:FC:99:2D:B0:BB:7D
            X509v3 Authority Key Identifier:
                keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d9:f8:19:3b:65:cd:41:a2:68:1a:96:7f:16:c7:76:48:c2:
         e3:ab:be:50:6e:97:45:fc:c4:7b:a4:e4:33:58:15:78:0a:ea:
         a8:8e:53:17:7d:a0:03:66:06:df:5b:6e:db:b8:25:86:07:9a:
         b7:bc:55:23:96:56:f6:28:83:56:5c:ce:2e:74:5e:98:74:4e:
         6d:5c:2e:ae:04:70:3b:82:41:7f:89:f4:b1:20:af:2b:8f:4a:
         1d:0c:2a:ba:41:22:87:9d:9e:ea:2d:c8:68:2c:10:4a:24:93:
         91:9a:80:98:80:5b:c5:a0:4f:53:e0:e2:3d:56:34:c7:87:57:
         70:e1:b0:a8:22:4b:85:ac:61:27:1d:97:cf:b0:45:60:fb:8c:
         ec:af:54:c0:eb:93:e1:65:8d:d3:ac:17:67:37:6c:54:d9:a1:
         3d:fa:a5:7c:59:77:fa:7b:63:f5:8b:c7:5b:14:52:c9:8f:d9:
         6d:73:b4:95:59:bc:5b:8d:7a:68:ef:8a:1f:fb:de:a6:19:8f:
         67:67:c0:83:84:55:00:36:00:37:87:53:c3:b1:c0:e2:08:a6:
         83:10:e1:05:62:29:f2:9d:73:1b:e8:f2:08:2f:2b:8b:9e:62:
         e3:4c:05:97:2a:7c:3d:d3:87:c3:4a:26:19:e5:a3:3f:2d:1a:
         dd:d8:1e:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB
MkFDNkM4OUMwHhcNMjYwMzI1MDIzNDEzWhcNMjYwNDAxMDIzNDEzWjAYMRYwFAYD
VQQDEw02OWMzNDlhNi02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3lFJ3gomlRcH7BCqvTO4IKazYemK6SxIwZO0yvQLRDUMA4BmyzNekREXFMe9
y/ISeO9+vco6Om8f8FeM0JaFsBAWYdnytPo8ApDP5kEU0430GjTZZ4NmKJktghGq
Og0YDGR6YUYa2u+rlg2rYmh36pmpviTCv3dcAAoCHyMeCFJR7XJMGCJcAcSuPBSt
pahB0X4r+RaR/cZWhOGt7OQ1/rF69NcA98oJuW9Quvle0CdVmKe7bCYz8olLAHbz
wan8JpzAd9QaM+0Evwo4xrg0CqYHJGhWdljH+n/pMIllWhkwEprBwVmyeGjFKVRE
T3Fp9poFj9Ln96SNJclOna6/gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP3reE4J
8hnQF3BCuTe2/JktsLt9MB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD
ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDNEMi80MkMxRDhGODJDODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhp
d1hYQkNCR2gwNHFpckd5SncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOtn4GTtlzUGiaBqWfxbHdkjC46u+UG6XRfzEe6TkM1gVeArqqI5TF32gA2YG
31tu27glhgeat7xVI5ZW9iiDVlzOLnRemHRObVwurgRwO4JBf4n0sSCvK49KHQwq
ukEih52e6i3IaCwQSiSTkZqAmIBbxaBPU+DiPVY0x4dXcOGwqCJLhaxhJx2Xz7BF
YPuM7K9UwOuT4WWN06wXZzdsVNmhPfqlfFl3+ntj9YvHWxRSyY/ZbXO0lVm8W416
aO+KH/vephmPZ2fAg4RVADYAN4dTw7HA4gimgxDhBWIp8p1zG+jyCC8ri55i40wF
lyp8PdOHw0omGeWjPy0a3dgelw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:03 2026 by rpki-client