Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File:                     TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier:          bJ04xY2yD8g195VKuJ5KcZg2d68ZPwAmZ48WLVEXtqk=
Subject key identifier:   18:7B:F3:CE:C7:0A:89:F2:30:C2:1C:34:9C:F0:6C:07:FF:A1:76:2F
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number:          09D5
Signing time:             Thu 26 Mar 2026 22:17:01 +0000
Manifest this update:     Thu 26 Mar 2026 22:17:00 +0000
Manifest next update:     Thu 02 Apr 2026 22:17:00 +0000
Files and hashes:         1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: +rX7E9DNhTba4zx4khg3+CFW0tv+YZVf0JjxtDINNgw=)
                          2: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: 0Dvz1Xg7o404n7QtLdxopJyG/BpV+3aI+/Po4MvWU6E=)
                          3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 2KLLN/V4Kto/1e4KzMtLXqsg3Ie1tnlB7EuFRK/9Zdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Mar 26 22:17:00 2026 GMT
            Not After : Apr  2 22:17:00 2026 GMT
        Subject: CN=69c5b05c-b4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:83:66:de:7d:e2:f2:57:1d:e6:91:c8:cd:
                    9d:5e:72:bf:36:7b:27:8c:84:11:0a:f3:b0:b4:4e:
                    dd:e3:4a:29:7c:b2:39:ac:26:e2:27:f7:cb:41:71:
                    19:c1:10:13:e2:ee:6b:b0:ce:3f:ad:78:14:a7:a0:
                    53:fa:f2:51:af:20:ff:ca:29:10:2f:28:80:86:15:
                    eb:1e:e0:a7:68:d6:83:e3:f6:7a:36:88:42:ac:f3:
                    1b:f0:81:c0:f5:d0:a2:df:00:a8:f6:f2:28:c9:92:
                    98:86:42:1e:e7:42:8e:3d:32:c7:15:a6:7f:f6:88:
                    89:03:8e:ab:91:e8:50:d4:45:de:69:4c:dc:1c:c1:
                    fa:33:13:b3:7e:2e:7d:4c:8c:7a:c8:30:5c:38:03:
                    85:0a:3f:9b:26:5a:62:2b:ac:68:52:ca:bb:9f:7b:
                    d3:01:b9:6b:a6:59:ba:2f:8a:96:9a:fa:26:00:4a:
                    d1:44:7b:1b:05:45:7c:48:7b:22:6a:cb:79:83:70:
                    c2:5e:fd:4a:42:4d:e9:a6:c5:79:93:a4:05:aa:1b:
                    76:e2:5c:8f:4d:d5:6d:6a:1a:bc:b6:53:fb:db:af:
                    b8:ed:7e:fb:21:50:4d:df:34:6b:e8:23:6e:9f:28:
                    a5:58:bb:11:b8:e2:74:68:45:ea:94:40:4e:53:dc:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7B:F3:CE:C7:0A:89:F2:30:C2:1C:34:9C:F0:6C:07:FF:A1:76:2F
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:51:18:2d:97:22:b8:49:d9:d7:f8:82:c6:c3:d7:14:76:8e:
         c7:34:77:a9:1e:2e:7f:71:76:78:72:32:36:74:2f:26:a8:72:
         9a:7e:45:6f:35:12:76:85:d9:9e:6b:de:54:75:03:fa:55:7d:
         04:44:44:d4:e9:05:37:00:5e:8a:f3:f7:bc:f3:37:bc:4b:01:
         6e:41:8b:10:cc:68:5b:96:d9:41:1b:37:87:5c:2f:ce:91:4d:
         77:4e:76:bf:e5:d8:c5:0f:aa:fc:c5:49:b1:ab:14:8d:bc:ed:
         a1:8b:a2:e9:27:99:40:ff:46:ae:0d:b7:53:84:1d:72:5e:76:
         02:37:34:b6:c3:1f:89:a9:b9:4d:d9:d8:33:d0:c5:03:b0:a8:
         38:ef:ce:4d:1d:b3:e1:04:eb:6c:39:05:fe:8c:03:39:70:7e:
         c9:d8:b7:07:8b:85:bf:79:96:44:91:62:78:84:9c:69:47:2e:
         75:b3:94:6a:09:e4:2e:8e:6e:9f:0f:d3:41:19:77:a9:bb:1d:
         fb:14:dc:c8:01:d9:2c:95:a6:d9:d2:b5:7f:eb:9e:46:30:e7:
         4a:7a:94:d1:8a:66:6f:11:59:e4:0b:64:c2:d3:63:7b:2c:1f:
         16:b7:f3:ed:c4:9f:85:73:bf:7c:cf:7f:d0:a2:dd:c2:50:96:
         ba:ba:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:50 2026 by rpki-client