Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
File:                     Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft (raw, json)
Hash identifier:          FdYIN5PP/oz6EbP6aDYdR82i9yKkNMNkzPPjGjRfgUQ=
Subject key identifier:   CE:1F:D2:BD:38:D3:02:2F:E0:34:0D:C1:C3:5E:21:4E:B0:9E:9D:12
Authority key identifier: 4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9
Certificate issuer:       /CN=A911155C/serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
Certificate serial:       08A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
Manifest number:          0896
Signing time:             Sat 04 Apr 2026 20:20:46 +0000
Manifest this update:     Sat 04 Apr 2026 20:20:46 +0000
Manifest next update:     Sat 11 Apr 2026 20:20:46 +0000
Files and hashes:         1: Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl (hash: VmSBEFTAKDjedXk9KYCCTT05zY+VEqWbzUvLHJWijAA=)
                          2: 8AE9FE88E63111EAAC43244EC4F9AE02.roa (hash: updD38wtAdj5dijUmVbc8ur6Q26JQGPvJNSN6xjVgUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl
                          rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208 (0x8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911155C, serialNumber=4DBAE8DA40F93DAED5BA7DCCBD6FD58DB6184CC9
        Validity
            Not Before: Apr  4 20:20:46 2026 GMT
            Not After : Apr 11 20:20:46 2026 GMT
        Subject: CN=69d1729e-ffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:4b:08:df:2f:03:65:b4:7d:d1:1f:a6:53:
                    04:0a:7a:12:2d:64:cc:a7:a4:8d:84:cd:de:23:00:
                    27:f1:4a:c3:0b:84:01:ef:57:31:99:de:67:15:7e:
                    64:3b:5d:e7:61:05:ce:e4:c6:44:fa:06:65:a2:0f:
                    c3:76:f1:e2:66:13:d8:15:a7:6a:87:a3:8a:7e:34:
                    83:7d:2d:d7:5d:89:27:a0:42:5a:30:96:fd:a5:b8:
                    e6:71:9a:ac:a1:da:0f:42:c3:99:3f:87:0d:d4:8a:
                    cd:e0:a4:b2:9e:c5:0b:3d:1c:34:01:62:89:b5:17:
                    b6:7d:3d:db:ef:2f:4f:82:ab:db:11:87:17:f0:be:
                    47:ce:c9:42:01:e9:a6:85:e0:1d:2e:ee:2b:d6:b3:
                    4e:55:6e:8c:42:d7:a7:c4:d2:fe:51:29:73:78:62:
                    ae:0c:98:86:44:dd:16:9b:ba:ba:d2:22:eb:d8:30:
                    5e:24:2a:4c:04:df:ac:7c:59:48:ff:cb:0c:7e:d3:
                    72:74:0b:12:b1:df:af:79:97:9c:3c:a8:69:57:0c:
                    7f:fb:39:6c:e0:1e:b8:57:db:0a:c0:ec:e6:1b:11:
                    99:76:61:5c:de:00:cf:e2:bd:e2:ce:cf:2b:24:e2:
                    b9:53:70:02:14:8a:f1:ea:34:9a:bc:1c:c2:0f:aa:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1F:D2:BD:38:D3:02:2F:E0:34:0D:C1:C3:5E:21:4E:B0:9E:9D:12
            X509v3 Authority Key Identifier:
                keyid:4D:BA:E8:DA:40:F9:3D:AE:D5:BA:7D:CC:BD:6F:D5:8D:B6:18:4C:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911155C/A958E30EE62F11EA8E4A324BC4F9AE02/Tbro2kD5Pa7Vun3MvW_VjbYYTMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6b:c0:0e:33:2b:42:96:46:8c:e4:f4:c4:01:05:57:76:e7:
         83:49:ed:04:82:d1:99:d0:53:9f:75:7c:78:6c:16:f2:8b:e7:
         c7:18:7d:93:07:f0:14:56:13:16:9b:33:c9:c9:1d:6e:0b:15:
         44:31:bc:b2:8d:a6:d6:5d:6c:ec:b1:60:7d:11:23:8f:40:5d:
         46:8e:55:8f:c1:b7:51:7f:47:f7:52:f1:99:2a:3f:94:e7:df:
         48:59:14:49:d7:85:50:05:ac:1b:db:ed:6d:5b:f6:29:42:39:
         74:a4:8a:db:a7:28:ea:1a:8e:ae:d0:d9:6a:e8:8c:4a:46:88:
         87:7b:d7:97:96:e3:9f:ff:72:61:fa:5d:9f:00:39:df:20:48:
         be:47:18:b7:34:e2:8f:71:a2:d6:fa:15:7c:78:56:25:5b:79:
         e1:c4:18:e3:7a:d2:78:56:19:11:f3:2c:83:ef:e9:77:1a:d0:
         37:30:28:22:a1:f4:eb:25:a6:a5:87:a4:b7:6b:1f:47:a4:e7:
         bd:92:10:46:28:f4:72:29:45:81:4e:d2:97:a8:4b:7a:4b:11:
         ce:44:9b:93:f3:60:09:11:6e:64:5d:20:8d:16:7b:a0:8a:d2:
         7b:18:ac:4d:fd:6a:3c:0e:aa:1c:38:98:73:13:14:b4:e6:09:
         c3:f2:3c:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1NUMxMTAvBgNVBAUTKDREQkFFOERBNDBGOTNEQUVENUJBN0RDQ0JENkZENThE
QjYxODRDQzkwHhcNMjYwNDA0MjAyMDQ2WhcNMjYwNDExMjAyMDQ2WjAYMRYwFAYD
VQQDEw02OWQxNzI5ZS1mZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGxLCN8vA2W0fdEfplMECnoSLWTMp6SNhM3eIwAn8UrDC4QB71cxmd5nFX5k
O13nYQXO5MZE+gZlog/DdvHiZhPYFadqh6OKfjSDfS3XXYknoEJaMJb9pbjmcZqs
odoPQsOZP4cN1IrN4KSynsULPRw0AWKJtRe2fT3b7y9PgqvbEYcX8L5HzslCAemm
heAdLu4r1rNOVW6MQtenxNL+USlzeGKuDJiGRN0Wm7q60iLr2DBeJCpMBN+sfFlI
/8sMftNydAsSsd+veZecPKhpVwx/+zls4B64V9sKwOzmGxGZdmFc3gDP4r3izs8r
JOK5U3ACFIrx6jSavBzCD6r5TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4f0r04
0wIv4DQNwcNeIU6wnp0SMB8GA1UdIwQYMBaAFE266NpA+T2u1bp9zL1v1Y22GEzJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTU1Qy9BOTU4RTMwRUU2
MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBhN1Z1bjNNdldfVmpiWVlU
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Ricm8ya0Q1UGE3VnVuM012V19WamJZWVRNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTU1Qy9BOTU4RTMwRUU2MkYxMUVBOEU0QTMyNEJDNEY5QUUwMi9UYnJvMmtENVBh
N1Z1bjNNdldfVmpiWVlUTWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcGvADjMrQpZGjOT0xAEFV3bng0ntBILRmdBTn3V8eGwW8ovnxxh9kwfwFFYT
FpszyckdbgsVRDG8so2m1l1s7LFgfREjj0BdRo5Vj8G3UX9H91LxmSo/lOffSFkU
SdeFUAWsG9vtbVv2KUI5dKSK26co6hqOrtDZauiMSkaIh3vXl5bjn/9yYfpdnwA5
3yBIvkcYtzTij3Gi1voVfHhWJVt54cQY43rSeFYZEfMsg+/pdxrQNzAoIqH06yWm
pYekt2sfR6TnvZIQRij0cilFgU7Sl6hLeksRzkSbk/NgCRFuZF0gjRZ7oIrSexis
Tf1qPA6qHDiYcxMUtOYJw/I8tQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:42 2026 by rpki-client