Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
File:                     TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json)
Hash identifier:          eJeiAjf9IuPy+r3HM2QTervof0dFiS5Sx73cHbG6TvU=
Subject key identifier:   30:59:18:F2:4F:23:0C:E2:E9:49:E8:A9:B0:64:3B:E5:40:24:7E:ED
Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C
Certificate issuer:       /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
Manifest number:          01D2
Signing time:             Mon 05 Oct 2026 04:02:04 +0000
Manifest this update:     Mon 05 Oct 2026 04:02:04 +0000
Manifest next update:     Mon 12 Oct 2026 04:02:04 +0000
Files and hashes:         1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: sg2ge5JA9D5V4GKXBqm2GyB/khX8XSCG4iw5r6YvCjM=)
                          2: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: vRDIf77w/vwwUL2l4a8WmFRXwmkB8Vnq8KlUcLbLPWQ=)
                          3: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: oed0MUDWTHmxeEdQE6CwlXbkxj//N3cr5MkUaXaVUjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl
                          rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C
        Validity
            Not Before: Oct  5 04:02:04 2026 GMT
            Not After : Oct 12 04:02:04 2026 GMT
        Subject: CN=6ac3213c-b06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4c:ee:c1:f6:a7:cd:97:bd:69:f4:8a:3b:a1:
                    e8:0c:83:57:4a:da:52:71:ea:60:a4:15:1e:6f:13:
                    c3:52:9d:77:4a:b4:75:1f:dd:94:47:21:44:ae:cc:
                    79:c9:f4:4c:49:0e:42:07:68:0a:a3:08:78:9e:b8:
                    16:7d:8c:75:1b:06:48:32:b8:c0:ed:9c:86:be:3f:
                    ad:7b:6b:2c:e0:be:12:c3:d7:6d:93:b3:b6:ab:27:
                    56:d6:35:a6:e7:b1:de:ab:6d:7a:35:bb:4c:ca:e8:
                    72:e8:2e:bd:3d:52:37:b2:65:c8:d1:9e:d1:a2:79:
                    b3:de:81:a9:cd:a2:b4:ed:9c:43:99:76:39:b9:7e:
                    21:e8:d2:db:bd:f4:a4:a0:ff:9e:99:7f:5b:8f:a2:
                    ff:2f:d3:e0:e8:f7:e1:d7:82:67:f5:23:b8:78:ee:
                    49:56:e9:3a:ac:80:21:c8:ce:30:2b:93:5a:d4:25:
                    06:e1:17:87:93:c2:c0:4a:c5:60:9d:ca:37:4f:a4:
                    7c:1e:57:83:a9:01:92:cc:f5:97:0c:95:28:df:96:
                    f2:05:ed:27:62:29:b4:b5:4a:aa:2c:59:9a:bd:f7:
                    aa:c8:f0:4d:65:53:bb:da:b0:95:76:0e:e8:02:10:
                    94:9a:f2:23:b7:95:38:b4:24:c1:8e:76:06:c9:a2:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:59:18:F2:4F:23:0C:E2:E9:49:E8:A9:B0:64:3B:E5:40:24:7E:ED
            X509v3 Authority Key Identifier:
                keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0b:a3:fe:9e:b0:12:08:3d:a0:a1:57:b1:be:8b:25:2d:dd:
         05:b7:df:ae:ac:4e:18:02:bb:78:8a:ec:80:17:a5:0d:6c:d8:
         29:ef:de:0c:d1:9e:ac:55:79:79:43:5f:c4:cd:44:6c:de:77:
         06:40:23:1f:e5:76:9c:60:7d:00:4d:2f:e3:ca:6c:f0:c1:64:
         2a:40:e1:f6:33:ae:e1:05:7a:26:f1:ee:8f:00:af:ba:23:6d:
         1e:10:b9:bc:f1:a1:82:cf:bb:3d:5f:83:4f:c0:1f:b0:d6:3d:
         ac:72:09:90:24:b0:5d:12:78:47:e9:29:8d:94:99:09:7c:30:
         04:21:ee:57:c5:4f:95:89:b0:e7:a0:3a:3a:b5:54:a1:d7:42:
         1b:e9:65:7f:3e:6f:72:62:93:02:4c:12:6e:c3:ce:4f:da:29:
         60:c9:44:8b:5c:1a:c1:d9:81:fa:a8:ed:14:d5:fb:e0:cb:ad:
         0c:f9:93:a1:56:de:67:a2:ea:af:e2:4d:ac:29:ad:2a:61:61:
         8e:f8:f8:3f:41:54:5c:d8:f4:68:a0:c4:cb:42:cb:80:a6:37:
         44:da:87:f0:5c:15:7d:5d:52:99:97:01:d3:fb:e5:6a:9d:23:
         24:e8:06:3e:16:2c:b8:ad:6f:68:28:29:3f:bd:04:50:c2:69:
         ab:2a:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:36:01 2026 by rpki-client