Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
File:                     TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json)
Hash identifier:          e8tazKzTStxK5jFMjeU9cMJ69XcsUOTVi40mJsGYGhg=
Subject key identifier:   FF:95:63:A3:82:55:83:84:AA:10:60:7E:B3:8A:91:D7:3E:5D:4F:44
Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04
Certificate issuer:       /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
Certificate serial:       0AC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
Manifest number:          0AA7
Signing time:             Thu 12 Mar 2026 19:14:30 +0000
Manifest this update:     Thu 12 Mar 2026 19:14:30 +0000
Manifest next update:     Thu 19 Mar 2026 19:14:30 +0000
Files and hashes:         1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: kM7fF7eE8xBfoNHUm0RCZEf19rz5DcDXArCL8kNE2ZU=)
                          2: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: UKzO6fJ8O7kuibwIUH1aGZnI4vviF9UxI9CQHk+Pqrc=)
                          3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: EbOmNI7pCvPrjoYlxuO9Tzo0OfRycsU5uM6JLnWzUkE=)
                          4: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: OHHlg82SYMCj0nhG6pczg1mnIfcmqYmPHe/Fcr0oG4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804
        Validity
            Not Before: Mar 12 19:14:30 2026 GMT
            Not After : Mar 19 19:14:30 2026 GMT
        Subject: CN=69b31096-0aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:ca:41:e2:9b:10:fa:8d:81:e0:12:13:aa:
                    54:86:78:74:11:d4:b8:7e:69:36:ba:7e:4b:da:f6:
                    c3:75:04:b7:3b:98:bb:c8:14:86:5f:2b:c1:de:f4:
                    6c:90:21:2e:f1:f3:17:b3:73:36:c6:28:63:a6:91:
                    4d:99:63:eb:81:ca:e9:bf:48:88:c2:85:1d:e3:90:
                    86:78:82:cc:12:99:89:ce:af:26:24:47:b5:64:4b:
                    3b:0e:73:7c:20:e5:84:ba:7d:ae:ac:e2:8f:54:37:
                    97:ff:b1:97:1d:88:e1:44:f2:95:10:6b:bb:7c:ba:
                    28:03:42:b8:36:70:fc:af:13:5f:d8:7d:1d:39:29:
                    42:b9:98:48:0f:61:d3:0a:73:fa:46:41:64:72:64:
                    a2:8c:32:82:cb:00:49:35:d5:e8:32:af:14:79:89:
                    ef:84:ec:e3:30:a8:37:21:58:12:41:61:0e:20:71:
                    07:35:28:cd:4a:b7:d3:04:dc:d9:31:94:1a:7e:07:
                    4c:8d:eb:cc:af:2e:0d:1d:25:48:38:11:af:2d:7c:
                    21:4d:9c:4b:44:55:1c:b6:5c:0b:69:da:56:5c:14:
                    75:4d:06:b9:d7:d0:68:d6:56:9d:fb:92:8f:d9:21:
                    0f:7e:13:7d:2f:89:8c:75:e0:24:50:43:c8:66:e1:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:63:A3:82:55:83:84:AA:10:60:7E:B3:8A:91:D7:3E:5D:4F:44
            X509v3 Authority Key Identifier:
                keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:87:f4:01:db:f7:27:5a:af:b0:7f:ea:af:25:ec:29:47:17:
         cf:24:65:6a:63:09:ae:3b:8f:c1:43:de:31:d5:4f:7f:3c:8a:
         43:05:eb:a6:35:39:30:21:96:56:af:f9:58:1e:8a:d0:d2:14:
         c2:6c:23:c9:4e:6d:4d:d4:ad:51:a3:96:8e:fe:b6:d3:3b:78:
         ea:2b:01:b0:64:64:e9:7a:6d:a0:0f:da:a6:78:d1:0e:11:64:
         4a:92:8e:0c:0b:1a:96:94:e8:2a:51:25:8e:65:c4:34:cc:6e:
         46:c4:ec:d9:c1:44:e5:f3:c8:90:bb:fe:f3:37:49:dd:cf:a0:
         3c:77:4f:76:28:bf:9e:4d:00:0e:cc:6d:05:99:03:a8:7d:b0:
         a3:5c:04:17:22:36:83:ba:e5:bb:3a:f1:ff:1c:fa:a5:2d:28:
         c4:ed:d1:ec:97:ba:57:05:29:ea:f7:5b:40:49:42:65:ac:6f:
         1d:bd:95:39:9d:99:35:26:e4:23:bf:c1:79:14:97:9a:bc:2f:
         98:6d:9f:f1:7e:ee:67:9b:9d:97:fa:3e:6a:88:68:2a:2e:67:
         e7:fc:d9:7d:4f:15:c8:d1:d9:24:63:b1:3c:bb:e1:00:7e:37:
         a4:54:03:02:4e:c7:d5:6b:8a:06:05:26:42:fc:30:01:de:6d:
         d1:41:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:29:23 2026 by rpki-client