Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
File:                     TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json)
Hash identifier:          DIhItRycgD75PG+l2ZIddRaOvuQnNvA+Y7MrYOnajCE=
Subject key identifier:   83:F7:49:83:14:11:9B:CD:87:B3:47:7A:43:62:D6:1F:EF:6A:79:4D
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Certificate issuer:       /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial:       060D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
Manifest number:          0605
Signing time:             Tue 24 Mar 2026 22:36:35 +0000
Manifest this update:     Tue 24 Mar 2026 22:36:35 +0000
Manifest next update:     Tue 31 Mar 2026 22:36:35 +0000
Files and hashes:         1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: x6voRiYtedFKZ7Ino324U7YSAKAsZUG6NfNq+pS3dyA=)
                          2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: FH7SMQY4WyVt9Ewh8gjU/J4biuTaLOVJJpWUTHyF1xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
        Validity
            Not Before: Mar 24 22:36:35 2026 GMT
            Not After : Mar 31 22:36:35 2026 GMT
        Subject: CN=69c311f3-96ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cf:98:cf:12:14:d4:30:56:ff:9f:33:ae:63:
                    bd:5b:88:50:d7:0d:12:50:eb:eb:1c:0f:0e:91:73:
                    22:60:45:93:d8:da:a2:d6:b9:46:0a:5a:bb:ee:44:
                    af:fa:55:06:8f:6e:3d:4c:d9:a7:05:8c:3b:57:a3:
                    0f:2c:07:f0:7d:52:1e:d0:b3:00:cd:94:79:3d:75:
                    ba:c1:91:9c:3d:37:93:52:e7:cf:95:0b:43:13:c0:
                    75:8d:93:4f:97:c5:84:7f:e4:94:1e:53:8e:f4:a2:
                    5e:e5:3d:2c:c6:37:87:06:bb:b2:55:98:33:09:de:
                    34:1c:d3:fb:ba:c7:dc:79:11:1e:4c:fe:55:86:7c:
                    2a:f9:12:11:7f:72:da:e8:8f:41:ab:2c:d5:61:2d:
                    99:99:6b:f6:98:8a:05:12:ce:d4:53:df:48:3e:fc:
                    22:02:80:a1:f7:ef:6a:b4:c8:5e:a9:33:47:67:1a:
                    3b:d2:ba:28:90:45:6e:72:4a:c3:d1:11:e6:23:dd:
                    21:e5:9f:b3:16:2a:2c:21:32:86:df:89:18:a6:80:
                    93:64:0b:31:40:d9:34:44:f5:2b:f9:ff:ac:b5:e3:
                    0a:fb:e0:2e:bb:36:73:db:ca:03:03:85:e2:bb:11:
                    15:b8:47:e0:a6:6d:d9:2b:ab:7a:e1:92:77:a5:01:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:49:83:14:11:9B:CD:87:B3:47:7A:43:62:D6:1F:EF:6A:79:4D
            X509v3 Authority Key Identifier:
                keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:8c:08:08:a7:e8:ee:f6:68:4e:88:89:6e:14:9c:0a:3a:
         2a:dd:37:1d:ae:26:bc:da:a0:69:36:88:58:8e:f0:a7:f3:f4:
         b5:d5:7a:af:fa:0f:74:25:f7:ca:e7:af:be:24:68:c0:da:68:
         02:6c:88:d6:7f:66:91:54:b9:a4:74:8b:b5:c8:6a:58:54:e2:
         19:7a:2a:a5:36:2d:6d:33:00:c0:74:2a:51:c1:12:54:41:50:
         02:e7:a5:a6:80:2f:c0:a6:f3:7e:e0:04:75:fc:0a:9a:d0:c5:
         76:f0:f7:62:60:dd:52:e3:80:7b:4a:72:57:7c:4a:aa:a6:0f:
         e4:4a:89:40:1d:65:64:69:8a:73:07:93:ff:38:a2:1a:26:58:
         3d:2a:9c:79:27:c9:95:7b:40:56:55:e9:9c:30:e9:d2:9b:c5:
         60:f1:42:86:fb:16:3a:86:15:14:d6:58:64:e5:75:20:65:3a:
         af:51:19:2b:82:8f:4f:82:e0:a1:f6:29:82:c3:15:e2:63:d3:
         6a:c0:e8:4e:ac:42:4a:72:5a:39:cc:fa:1a:83:9c:d3:63:b3:
         3a:b9:f8:b2:66:48:e0:6b:9c:9f:d8:74:09:68:c7:94:fa:4f:
         7e:0e:1a:a1:f6:0b:20:f4:bc:ff:6e:31:0d:30:97:50:13:41:
         80:f2:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:28 2026 by rpki-client