Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File:                     TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier:          QPUFGmYMmmlvw3D1j+6Z9QLKeMkCxMzcy3Pjojrfrjc=
Subject key identifier:   60:89:91:EE:E0:7A:02:B8:5C:54:45:97:A8:DA:C2:EC:D9:A6:BA:6C
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer:       /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial:       0422
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number:          041A
Signing time:             Sat 07 Mar 2026 00:06:32 +0000
Manifest this update:     Sat 07 Mar 2026 00:06:32 +0000
Manifest next update:     Sat 14 Mar 2026 00:06:32 +0000
Files and hashes:         1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: cNdP3hBPaMle+Uz1z1w+j+hPIW+CJVoxr7GllK7mrko=)
                          2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: fOVVIFjJvtGXdWvi8prpmgPz6YpqGlf3motP4AlsEzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
                          rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 00:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
        Validity
            Not Before: Mar  7 00:06:32 2026 GMT
            Not After : Mar 14 00:06:32 2026 GMT
        Subject: CN=69ab6c08-756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:db:96:9d:c7:a3:bf:55:2f:e8:74:d2:dc:
                    73:73:09:fd:da:5a:a0:92:4c:99:7e:75:e7:14:b8:
                    0f:49:30:a6:82:f4:49:08:ae:99:b6:6c:1d:a9:70:
                    96:51:21:6a:39:39:78:04:7e:67:1f:81:ed:4a:26:
                    76:e7:9a:9a:a1:64:59:5f:df:bf:2d:ae:72:b1:54:
                    4e:7f:e5:29:ce:d4:34:1b:68:ba:3f:a8:81:90:d1:
                    aa:6e:f1:83:ec:aa:fd:17:0a:72:53:d0:6b:77:44:
                    50:f0:74:4c:6e:98:56:9a:8e:c1:4f:c0:82:9f:04:
                    91:b2:43:20:a3:29:40:73:9c:3c:70:e0:a1:a3:df:
                    f8:bc:99:f1:df:ad:f6:ae:41:4a:39:b0:f5:b1:51:
                    b1:a5:0a:4b:61:44:fc:08:7f:b4:45:20:81:b2:1c:
                    cd:c5:fd:2b:23:39:bb:3b:ae:98:f6:78:7e:d7:82:
                    15:49:8c:45:74:af:18:12:a9:12:e4:ed:b7:ef:48:
                    64:39:f6:04:cf:26:ce:41:bb:81:34:0a:c1:f5:ca:
                    18:b7:40:1f:31:06:56:5e:29:ec:bb:a1:0e:b3:5b:
                    c6:63:81:cd:b3:f4:69:22:db:b6:6a:d6:cd:3d:a6:
                    6b:72:b2:67:be:62:dc:f6:7b:a1:5b:2c:40:50:1d:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:89:91:EE:E0:7A:02:B8:5C:54:45:97:A8:DA:C2:EC:D9:A6:BA:6C
            X509v3 Authority Key Identifier:
                keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:ed:69:08:d5:8d:66:46:86:40:28:c4:bc:c7:d8:5f:51:
         6b:79:e1:ec:ab:fc:22:48:58:15:0f:f0:f0:29:6f:74:45:82:
         b1:2f:90:2b:44:15:29:49:8c:56:ae:a9:c1:41:9c:d9:12:60:
         b0:90:cd:1f:88:c0:7a:29:85:eb:10:eb:48:5e:c3:e8:ea:dd:
         02:89:5b:46:49:16:6b:38:33:b4:a6:fa:41:e1:73:09:d8:e5:
         5f:ef:00:df:08:b1:af:a3:7e:17:0e:9e:17:87:7d:c4:47:71:
         11:df:ff:f2:e7:8d:63:45:1a:ce:33:9d:23:0b:5e:a5:c5:fe:
         0e:3f:8d:6d:3f:4c:32:42:63:8c:21:83:06:7e:c4:07:b5:62:
         0c:8d:54:81:42:78:dd:41:fe:98:5e:e6:d1:d9:9f:ff:6c:bb:
         de:76:2e:0c:be:45:92:16:10:01:a6:41:fe:0d:99:42:3a:a4:
         82:56:ff:6d:70:1b:26:ba:1c:e9:c4:8b:81:44:84:86:4c:8e:
         85:bd:9d:24:5c:f4:03:bf:ba:6d:3d:d9:5b:3e:c0:43:79:f8:
         b9:cf:87:d0:7a:1d:55:e9:15:d2:00:37:e2:85:15:7b:ae:18:
         16:28:8b:e7:b4:ee:ea:fb:92:6e:a7:f2:32:a3:c3:9f:65:f5:
         a9:6a:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:34:14 2026 by rpki-client