Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
File:                     TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft (raw, json)
Hash identifier:          +lxZFSYGupunl+7ptleyFtr5GSmxkphiCDR2raxn++Q=
Subject key identifier:   D9:F7:CA:3B:B3:AE:7B:C1:BF:F7:26:75:01:36:5C:DF:CF:D0:81:59
Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4
Certificate issuer:       /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
Manifest number:          086F
Signing time:             Tue 24 Mar 2026 20:28:12 +0000
Manifest this update:     Tue 24 Mar 2026 20:28:11 +0000
Manifest next update:     Tue 31 Mar 2026 20:28:11 +0000
Files and hashes:         1: TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl (hash: fWZ/gh5SJCDA0VPNU7IMzf7btf0Q6gcDTghj9bt/f30=)
                          2: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (hash: iPjKL2ZgrtC9Tvx6I57sdrTIecoMgsexB7eAngqUnWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4
        Validity
            Not Before: Mar 24 20:28:11 2026 GMT
            Not After : Mar 31 20:28:11 2026 GMT
        Subject: CN=69c2f3dc-68db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:48:b5:66:ef:f2:84:b4:b1:30:8e:00:83:
                    ef:4f:95:43:64:2b:b9:44:6e:bb:3b:6b:4c:cc:84:
                    3b:9b:7f:24:4e:8c:ad:0c:32:2f:f3:64:59:f4:ae:
                    da:c9:1a:7d:65:df:a9:5f:49:b1:8d:01:34:11:dc:
                    32:9e:90:10:67:d0:70:b5:10:1e:c4:bd:ca:d3:e7:
                    0c:17:4a:9c:91:31:3f:b8:32:20:4c:ae:f0:40:32:
                    07:19:2d:99:16:b8:6e:e1:2a:fa:e1:80:47:e4:76:
                    c7:55:1e:bc:12:71:eb:3b:3e:78:17:8d:86:10:0e:
                    2e:fa:07:1c:dc:b7:a1:fb:47:fb:6d:20:e4:0a:21:
                    27:a5:2e:75:57:39:f3:af:0f:6f:1f:9a:91:85:47:
                    a3:1d:b8:35:e5:b9:49:ec:0b:e1:2b:5c:a8:69:5f:
                    b6:a8:9f:b6:21:85:21:c6:0e:d1:f4:35:0e:c1:3c:
                    61:81:6d:aa:ca:56:de:2b:93:ac:b8:6d:66:9e:4b:
                    3f:41:74:60:f5:d2:f0:46:71:9b:b0:62:1a:42:a6:
                    0f:2c:98:35:97:95:a5:61:b3:ff:42:14:15:e7:3b:
                    52:e6:9a:9a:9e:f4:b9:8c:25:10:d7:5d:25:38:32:
                    ed:83:ae:cc:61:96:27:f4:bb:51:13:99:b2:28:d2:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F7:CA:3B:B3:AE:7B:C1:BF:F7:26:75:01:36:5C:DF:CF:D0:81:59
            X509v3 Authority Key Identifier:
                keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:35:9b:9b:78:f8:0d:2f:71:47:90:d4:33:4a:e3:bb:e9:2b:
         3a:05:58:c0:5f:c9:60:f5:04:da:50:37:d5:84:6f:6e:3f:93:
         e0:5a:76:5a:67:15:f7:a1:99:09:d9:0f:9a:96:76:44:ee:ee:
         1d:87:ff:ae:09:f8:cf:e1:f2:26:fa:31:00:c1:cd:9c:0d:f7:
         8f:21:c6:26:14:ab:d1:27:56:ec:fb:c7:e9:01:f9:33:fc:7e:
         44:c7:3f:5a:50:06:23:05:69:98:5a:93:71:89:64:97:c4:ab:
         dc:1e:fd:38:ed:6e:9f:00:0d:7e:88:93:d8:2a:2a:e2:83:4c:
         3f:da:f8:2f:3d:19:17:ac:5b:13:d1:73:df:b1:d1:0b:26:18:
         38:8d:5d:67:12:ef:4a:07:bd:40:43:6d:50:ed:29:f2:fe:1a:
         59:b9:57:61:bf:08:1a:33:d5:0e:bd:da:d1:d1:b0:68:26:ad:
         fd:63:89:22:99:0b:d3:09:33:fe:53:11:74:f2:9d:bd:d1:75:
         a3:c8:54:43:12:d8:a4:d3:0e:5a:9f:62:ac:cb:4d:f3:3c:6e:
         82:7d:f7:8a:07:05:b4:65:da:bc:a7:2a:a3:74:fa:d8:bb:30:
         79:90:41:9c:c5:37:22:ae:a0:90:0d:bc:d4:b2:fd:6d:58:e3:
         d8:c5:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:13:14 2026 by rpki-client