Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
File:                     TZCQh73foVBeK7oD8gYRLq7_sRs.mft (raw, json)
Hash identifier:          cKwHxV8tUOOzz2n3S02Qlr163KOMCrMQU05r3JGYy2A=
Subject key identifier:   C0:70:49:6D:49:C1:5B:32:78:41:5C:61:9A:8C:5B:ED:64:EB:4E:72
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Certificate issuer:       /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
Manifest number:          0214
Signing time:             Sun 05 Apr 2026 02:33:15 +0000
Manifest this update:     Sun 05 Apr 2026 02:33:14 +0000
Manifest next update:     Sun 12 Apr 2026 02:33:14 +0000
Files and hashes:         1: TZCQh73foVBeK7oD8gYRLq7_sRs.crl (hash: lD0534qBv+yOPE2seGg9kAhuWBFVNn+xX7JmR60jj78=)
                          2: D71B60EC2B5911EE81C7542FC4F9AE02.roa (hash: 3V/wO0hw5nLxr5BM3tMeW7iDmpM8Wwsuvidg1iCqM10=)
                          3: 039807B286B511EFAF868C6EC4F9AE02.roa (hash: /+fofri9mwh+zzZ7E9vRJqMf1SWPMmGTC1v5y6dFZQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
                          rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D200F, serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
        Validity
            Not Before: Apr  5 02:33:14 2026 GMT
            Not After : Apr 12 02:33:14 2026 GMT
        Subject: CN=69d1c9eb-f381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:2a:06:14:24:22:59:5e:cf:a0:70:52:db:
                    5a:2d:9d:4b:50:c1:39:75:6e:bd:a5:82:50:bf:6b:
                    50:b9:b4:d8:8a:30:1d:07:7a:eb:64:96:e7:ed:5a:
                    aa:db:d4:d8:63:19:97:25:35:44:2f:54:3c:e7:8f:
                    c6:69:47:3e:aa:1f:b6:f2:8c:16:c5:05:d1:c0:0b:
                    37:9c:48:6c:83:d7:a9:0b:7d:dc:d6:60:4e:44:64:
                    e5:2c:c6:f4:d5:5c:01:a4:2b:8e:a8:5a:0a:36:5b:
                    a6:e5:a1:af:7c:50:56:3f:cd:3e:25:8d:88:ce:9d:
                    58:3c:16:c9:b4:02:f3:12:ae:95:34:fe:2d:96:b5:
                    a4:75:6f:8e:63:aa:e1:6d:ce:af:cd:2a:1f:3b:0e:
                    dc:5f:37:7c:92:91:c9:28:79:65:e9:ea:9f:40:93:
                    4a:80:a7:c7:9c:ad:10:99:1b:1b:3b:77:10:4e:71:
                    8c:cc:07:97:1c:60:4d:67:7b:17:0a:34:d7:dd:18:
                    bd:8a:81:2e:31:75:99:a9:22:d3:bf:e7:1f:09:dd:
                    ab:54:0f:1b:5a:9c:fe:57:9e:3b:0d:2f:d4:92:4a:
                    d6:6d:3e:9c:6e:d6:5f:f0:94:61:cb:8d:b3:56:95:
                    64:58:cd:fb:d7:6c:5a:95:9a:84:b9:14:3a:5f:39:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:70:49:6D:49:C1:5B:32:78:41:5C:61:9A:8C:5B:ED:64:EB:4E:72
            X509v3 Authority Key Identifier:
                keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:87:71:4d:88:51:6c:c4:79:e0:3c:c7:72:28:54:3e:66:
         ea:c7:1f:b0:e5:e1:3e:4b:41:99:a3:3e:5b:92:d7:a5:55:ea:
         1f:5b:8f:c7:d3:69:83:60:2f:20:be:2e:c7:81:c9:69:8b:d5:
         0d:6b:be:a3:4a:3a:cb:eb:e0:eb:40:19:fe:b7:5b:ff:f8:f5:
         3f:77:ab:24:a0:9f:78:e4:41:43:8f:b8:e4:d7:44:0b:d6:2c:
         e2:c4:59:4a:2a:61:5a:72:66:30:96:4e:f0:4f:48:b5:90:b6:
         3b:a4:08:21:c6:5c:62:6b:c5:25:8d:50:06:7f:ba:7d:4a:0b:
         76:73:a2:8f:08:6d:e2:37:23:76:e1:03:96:78:05:57:b0:1c:
         9e:17:47:4f:96:b9:71:fe:9c:94:35:32:0c:e4:1f:27:8d:63:
         2a:c5:44:ad:a2:18:7b:62:00:97:ef:c4:97:64:8d:e2:0f:d4:
         dd:8a:3a:03:3d:28:49:cf:e1:f5:4e:31:fb:5f:47:45:1d:6f:
         63:35:c1:f7:e1:46:e4:35:58:5d:d1:0c:18:3b:06:f1:4a:8d:
         7a:47:ed:b8:63:0b:6e:18:38:24:b0:d8:3c:b2:e7:32:d5:15:
         8d:cf:ad:3b:a8:06:04:f2:c2:91:1e:1e:2f:49:66:8b:3f:f7:
         69:38:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:09 2026 by rpki-client