Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
File:                     TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json)
Hash identifier:          9wCkhsR5R9BKq9d5wfOczgdgBnLZh1gqJauSwS8eKzc=
Subject key identifier:   86:6C:DB:A0:81:9E:A0:0E:21:E8:C8:36:3A:74:BE:20:0A:64:4C:43
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Certificate issuer:       /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
Manifest number:          036B
Signing time:             Sun 05 Apr 2026 00:38:40 +0000
Manifest this update:     Sun 05 Apr 2026 00:38:40 +0000
Manifest next update:     Sun 12 Apr 2026 00:38:40 +0000
Files and hashes:         1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: AS/9X07FxymlLCyzFqZXXxhODZzPAigOHRXs2o32W2E=)
                          2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
                          rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
        Validity
            Not Before: Apr  5 00:38:40 2026 GMT
            Not After : Apr 12 00:38:40 2026 GMT
        Subject: CN=69d1af10-a3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:e3:5f:53:47:02:87:a2:67:d7:03:6f:2f:
                    c6:74:2f:33:a0:83:24:b9:87:fb:3f:71:ae:74:a6:
                    57:54:ce:8b:ee:c9:5e:05:e5:bf:2b:6e:1d:f9:14:
                    cf:dc:ad:a0:83:51:38:53:05:5c:d0:25:72:77:bf:
                    66:90:79:9b:fc:d7:97:d5:b7:12:ef:9d:d3:e9:08:
                    a9:1d:5e:fb:99:db:f4:8a:f0:bd:43:c9:4b:7d:d0:
                    20:7b:34:4f:18:8e:3c:ef:b6:91:05:36:9d:30:50:
                    76:ef:d4:09:76:af:63:9f:26:e7:68:f6:ab:da:ba:
                    6b:b1:6f:09:4c:ec:78:9b:b9:8d:e0:ed:8f:14:be:
                    70:ab:92:cb:75:c9:00:94:ef:2f:b6:49:be:9d:9d:
                    6c:77:28:b1:45:41:89:f2:02:d0:32:8e:b4:0d:86:
                    37:30:ad:f0:c8:1b:5e:99:73:6e:02:16:27:17:62:
                    35:8d:4c:aa:6d:a8:31:3d:cf:a8:1b:fe:24:dc:af:
                    02:60:9a:66:74:83:03:93:54:90:a6:82:a4:f7:78:
                    33:ff:02:c7:aa:46:b4:a0:61:75:9a:60:d4:22:9c:
                    24:c8:34:d0:b4:ba:4a:4c:e4:b4:8d:15:74:6b:15:
                    1f:d1:56:ce:82:9c:00:78:46:b4:45:38:0a:cf:18:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:DB:A0:81:9E:A0:0E:21:E8:C8:36:3A:74:BE:20:0A:64:4C:43
            X509v3 Authority Key Identifier:
                keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:8f:61:b3:3e:67:00:4a:41:b5:83:c7:22:cb:81:52:e2:cc:
         47:c0:2a:b5:cf:7c:b4:66:71:b6:70:1a:57:01:10:cb:42:c1:
         bc:39:a3:d5:29:54:a6:8e:6d:12:65:03:5a:d0:ee:ec:cb:c0:
         fa:d3:01:73:63:a6:80:9f:15:d3:37:ef:c4:3b:df:f0:6f:6b:
         1c:f1:f3:28:c3:75:74:4c:3c:45:4e:5c:13:34:ae:92:14:95:
         c3:0d:f1:95:5d:dc:16:d6:a7:9a:d8:7c:1c:4a:52:04:d2:ca:
         2a:03:38:79:1f:17:be:6b:97:13:97:60:b8:f3:13:88:8d:34:
         2f:19:ff:82:56:0d:53:47:04:ac:da:4e:a3:a1:b3:cd:8e:7f:
         07:6b:9d:21:01:f4:de:78:f1:86:50:e6:3d:d2:c2:20:ba:8d:
         28:46:1a:e1:8e:5a:30:f3:5e:05:24:5d:6e:3f:af:d4:ec:f3:
         3c:d6:02:7a:2d:fa:c7:e1:2b:e0:b5:d4:ae:7e:9d:fc:de:d6:
         ba:28:09:8b:ac:05:c7:7a:8d:92:69:12:f5:3c:51:31:4a:09:
         1b:30:7c:42:59:47:dc:5b:1e:ed:2b:4e:3b:4d:36:3f:4e:5a:
         6c:94:99:a2:68:28:55:a7:6b:c6:c1:33:2e:9d:f1:c9:8a:5b:
         4a:36:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:02 2026 by rpki-client