Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File:                     TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier:          msoANbOzP9kodirFGFBZwCz+Qa9eP/W3jw3v8BUhTl4=
Subject key identifier:   27:05:D5:BB:7F:A8:0C:D5:24:41:15:31:6A:A9:88:12:1E:41:D2:C4
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer:       /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number:          CD
Signing time:             Wed 25 Mar 2026 06:02:19 +0000
Manifest this update:     Wed 25 Mar 2026 06:02:19 +0000
Manifest next update:     Wed 01 Apr 2026 06:02:19 +0000
Files and hashes:         1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: YHlfdqTkIpBYUnFhPKTR68y6Z4EW3bsmdjp57uieZo0=)
                          2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: udA5dkOMWcirosyp6BH8BJ5DzqeMRlRQ5QrNZXSNeyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
        Validity
            Not Before: Mar 25 06:02:19 2026 GMT
            Not After : Apr  1 06:02:19 2026 GMT
        Subject: CN=69c37a6b-a265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:f4:5a:11:ee:44:d1:ec:21:0f:64:2b:d6:
                    cf:03:56:6a:c9:87:cc:78:8f:7a:b3:05:f6:c9:5f:
                    91:92:86:c8:40:cc:56:05:70:e9:76:7b:0f:06:ae:
                    d7:12:05:47:a4:26:27:26:d3:b6:60:63:43:4d:ab:
                    89:f3:de:9c:3e:ef:6c:65:fb:de:7a:0c:f1:c5:6e:
                    78:99:4a:93:b1:68:c6:ff:ac:48:ea:7c:28:01:11:
                    84:31:55:f9:10:37:0f:c8:ba:b5:d2:71:51:93:22:
                    79:46:a7:95:cf:8c:e3:8e:cc:95:aa:00:dc:40:7d:
                    4f:36:1f:9e:87:c8:ef:1d:f2:4d:5f:91:a0:e4:13:
                    98:a8:3c:50:40:e3:fa:7e:a7:25:8d:a9:ad:23:4a:
                    fc:e5:36:fc:22:8c:82:e3:b3:be:d3:24:d9:77:b9:
                    b1:d6:cc:e6:e4:f8:e3:c7:ac:06:2b:34:5b:a4:00:
                    cb:e1:04:fd:60:89:c6:6f:aa:42:20:a4:d1:4a:a1:
                    83:8e:b5:af:67:0a:87:c9:9a:49:ac:a1:31:6f:29:
                    12:90:6f:98:2d:ee:97:70:55:13:6e:ba:a7:3e:f9:
                    64:3c:58:9f:f5:7e:bb:ea:20:15:d9:87:83:69:8b:
                    86:14:c1:8f:fd:15:d5:e2:ab:fd:2f:4e:f9:63:5a:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:D5:BB:7F:A8:0C:D5:24:41:15:31:6A:A9:88:12:1E:41:D2:C4
            X509v3 Authority Key Identifier:
                keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:20:a4:a4:63:30:f4:e9:55:98:e1:00:dd:dd:e3:14:56:
         46:22:a4:0e:b0:7b:8e:06:f8:a4:d2:6c:b4:54:04:10:e0:c8:
         0d:12:59:d2:34:5b:49:6b:e9:92:3a:58:d1:71:4c:63:5b:71:
         c0:88:24:e0:a1:f6:ca:9e:59:e6:c2:60:fa:fd:28:9b:b4:b3:
         a3:4e:20:96:54:63:ca:2d:76:00:fd:b1:71:bb:10:be:b0:2b:
         17:76:11:bd:9d:17:b6:d2:3d:a3:a6:d5:14:f9:86:46:48:cb:
         05:44:01:40:69:d1:da:dc:e1:ee:8a:0c:24:cd:53:44:81:18:
         7e:f6:35:e0:d8:07:7f:ed:58:cd:f9:72:65:24:92:37:49:8d:
         98:e7:e8:30:db:e7:33:66:65:5e:2d:12:43:f1:bc:1a:09:6f:
         50:48:cc:4f:56:a3:36:dc:a1:a0:2b:3a:db:b2:13:5c:50:0f:
         ad:f7:70:81:f8:9f:02:3f:8d:08:b6:b7:59:7c:a1:b0:5e:48:
         02:dd:7f:bb:4b:8c:0a:f2:a0:d0:e0:84:28:1c:ef:5f:56:15:
         8e:45:c4:38:7e:86:76:36:88:39:4a:d1:d6:62:c1:4f:78:e9:
         e2:a6:a6:99:11:b7:77:48:8b:55:e6:f6:e6:16:4d:df:73:ca:
         05:38:4b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:44 2026 by rpki-client