Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
File:                     Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft (raw, json)
Hash identifier:          IGhBDfdQuuNa19ghzJCQSOb/O5YNW3r7uMw4yEt6gKI=
Subject key identifier:   91:B7:40:8F:F5:DD:D8:6E:0A:03:4E:D4:34:7E:94:6C:ED:F2:43:A7
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       02FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
Manifest number:          02E2
Signing time:             Wed 11 Mar 2026 00:48:56 +0000
Manifest this update:     Wed 11 Mar 2026 00:48:56 +0000
Manifest next update:     Wed 18 Mar 2026 00:48:56 +0000
Files and hashes:         1: Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl (hash: fE9d6XkzNV0gXze42JB3UvtU97tAAJwrdlxgmUKDTPo=)
                          2: 6A7B1D3AA66111F0BF55D666C4F9AE02.roa (hash: 5kfmdI+J8ZLTBbwi+uPE2fjs8Eif0tU5cmSDRBoW2qA=)
                          3: 951A6E226D2E11F09539AE2BC4F9AE02.roa (hash: s7tXiYi5ptQxn0vdm+4nmLlWJa9YOADDTGYzCkSoTLc=)
                          4: 69DD27F6A66111F0BF55D666C4F9AE02.roa (hash: YcKOcplSd86LXVVjUokqFyaziv3wglCFpEtfgHfLdYY=)
                          5: 8696B3CA729111F0B120CD72C4F9AE02.roa (hash: bRhHwOGR+nC6Z6a3Gtjjm9JejuDK/Fy85sqNn6DJQCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Mar 11 00:48:56 2026 GMT
            Not After : Mar 18 00:48:56 2026 GMT
        Subject: CN=69b0bbf8-2c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:4b:05:81:5c:94:64:a4:62:47:4d:20:73:
                    d3:ce:12:4c:e3:1f:13:07:9b:c3:48:15:22:06:7a:
                    9d:e4:d4:f4:03:b0:03:bf:82:ac:c7:7b:dc:af:fc:
                    93:a6:51:cb:19:1c:0f:79:9d:c0:ec:54:86:7d:b9:
                    24:43:05:5c:f3:e7:54:2f:d6:b2:cf:86:d6:03:0f:
                    74:6d:6b:b4:ca:fc:98:07:02:64:11:6c:8b:56:b9:
                    84:7a:0d:be:df:d0:4f:1c:37:bf:c0:d2:c7:36:9c:
                    27:f1:96:30:1b:d2:4c:8f:ba:b7:c7:bd:c5:d5:53:
                    f9:4b:2e:62:7c:0c:e0:68:95:fb:64:48:f8:ae:41:
                    26:84:71:e9:d8:bf:d3:30:31:a5:82:e3:3c:54:ec:
                    e5:d7:a1:b4:fa:1a:86:e0:a7:3c:3b:21:39:89:b1:
                    74:1f:71:90:7b:a9:a6:94:0a:fd:65:5e:3f:4d:9f:
                    ad:71:7a:f4:dd:af:0d:37:a3:df:2c:6c:5e:e8:8c:
                    bd:20:55:53:32:53:88:ff:d3:43:41:e3:b8:88:05:
                    bc:33:5f:f0:61:21:35:a9:33:a3:c4:74:fa:46:06:
                    42:a5:fa:e8:57:c0:40:67:e9:dc:c3:45:04:c0:cc:
                    a3:55:e3:8d:c1:e5:81:11:19:11:1f:b9:dd:78:dc:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B7:40:8F:F5:DD:D8:6E:0A:03:4E:D4:34:7E:94:6C:ED:F2:43:A7
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7e:19:6a:83:25:2a:6e:ad:b6:cf:f7:20:15:de:58:c3:6d:
         fb:73:aa:83:04:cd:04:cd:4f:9b:ed:d4:78:e1:22:41:a6:e6:
         72:41:7c:52:3b:ed:75:4b:47:f5:95:45:ee:f1:cc:16:8f:f0:
         c6:8d:f4:43:6f:4d:fb:a4:0e:f4:b8:7e:d4:b5:6b:ee:64:04:
         67:4b:5b:9a:f3:70:39:ab:c4:65:f9:30:1d:5c:3d:c9:0e:05:
         9a:1b:5e:f3:ee:93:dc:fb:01:85:d0:55:64:c7:55:ae:8b:5a:
         c4:c9:ee:96:4f:ef:71:57:27:42:7b:bb:c9:87:0f:3d:f8:88:
         bc:1e:1e:55:c9:21:ae:7f:19:d1:52:cc:c2:04:5f:ef:63:c9:
         03:ea:e8:00:88:00:3b:de:ab:ac:2c:eb:23:d7:86:35:1c:ab:
         dc:e9:1a:ca:8f:89:50:77:f7:13:2b:68:0a:6e:4a:64:22:0d:
         3a:e2:08:f5:ae:77:51:fd:68:79:ac:20:8a:67:f6:48:44:39:
         7d:a3:f0:8b:8c:f7:f4:93:bf:72:ea:10:be:42:fe:e4:f3:55:
         2e:ed:03:d0:23:22:e2:74:1c:b8:29:fd:a0:49:d8:e3:3e:8d:
         d1:90:2a:27:25:3d:d3:b8:31:cb:96:2c:82:d4:20:9f:60:78:
         27:85:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:50:12 2026 by rpki-client