Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File:                     Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier:          ysImD3LJcU6GE4ox0ASvx59N5C6h0QM2Z8h1ju6BxmU=
Subject key identifier:   7B:1E:47:B7:E7:2F:17:16:0E:A5:1F:F1:77:1B:AE:EC:97:C5:CF:EB
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number:          012E
Signing time:             Sun 29 Mar 2026 05:18:31 +0000
Manifest this update:     Sun 29 Mar 2026 05:18:31 +0000
Manifest next update:     Sun 05 Apr 2026 05:18:31 +0000
Files and hashes:         1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: ZXtSiHwrV7fm460gA0s3sn8PNrt9eNoGxAuMYEEvaIk=)
                          2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=)
                          3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: o9Xs3io38RTaw4LTZVDWVNHdH5+V8NMTsg37SGZ03EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 05:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: Mar 29 05:18:31 2026 GMT
            Not After : Apr  5 05:18:31 2026 GMT
        Subject: CN=69c8b627-4935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:01:94:a5:c1:ae:e3:45:1b:c1:dd:4d:a2:
                    38:a1:5f:55:a2:07:4a:01:2a:0b:30:01:ae:3e:be:
                    92:10:3f:8c:be:72:01:dd:3b:db:82:8f:38:4d:f8:
                    5a:eb:ae:0d:3c:f5:90:b5:0e:ec:71:ba:c9:ce:3c:
                    aa:cd:fb:be:e0:b3:d0:1b:85:e4:48:26:92:c5:86:
                    d9:07:15:5e:85:35:3d:9a:0a:c0:4a:af:5a:4e:e6:
                    3e:7e:f4:c5:cf:92:54:b8:ba:38:b1:cb:38:e4:9b:
                    38:00:11:d5:fd:84:4f:37:0b:38:1b:c0:78:e9:22:
                    fc:04:6a:31:71:a3:0f:6c:1a:dd:ed:8a:48:74:9a:
                    d9:1d:36:3c:d7:45:ff:89:5b:39:d4:f6:0c:c1:1f:
                    b7:33:dd:cc:3d:84:37:97:c9:17:fa:bd:b6:ca:db:
                    32:10:22:fa:11:a1:42:91:d7:6d:a9:32:38:95:fd:
                    8c:c2:4c:30:c7:98:c6:dd:16:8b:f8:2c:40:24:38:
                    09:ba:c4:16:c7:32:a2:b3:56:73:8c:b8:9d:90:a4:
                    82:ca:7d:62:e1:5c:08:ee:25:6a:37:5a:45:73:59:
                    a9:35:db:32:f2:d2:72:95:4f:d8:e4:1a:07:1d:9b:
                    63:e6:7e:15:71:d1:5a:ff:91:da:1e:7b:e4:ad:78:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:47:B7:E7:2F:17:16:0E:A5:1F:F1:77:1B:AE:EC:97:C5:CF:EB
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:f1:e6:3a:03:99:8c:dc:23:b9:d6:7b:7d:5a:0e:ed:3c:
         d2:9b:c5:07:3f:f3:c1:b8:21:54:9a:17:9e:54:b5:90:6a:77:
         1b:52:f8:bb:4c:af:cf:e2:ef:af:48:f2:05:3d:aa:a2:d6:b5:
         40:d9:2a:59:19:9d:87:29:30:42:74:c9:03:c1:a8:85:51:38:
         ba:ad:a3:31:74:54:12:66:cb:cf:73:21:03:0d:54:79:b8:0d:
         19:2d:1f:85:a2:a6:cb:07:0b:7d:04:08:3a:39:5a:ba:a5:65:
         41:2f:97:1e:df:98:2c:09:4d:76:3e:84:d0:50:79:2f:b8:f8:
         5e:67:81:24:9d:22:a0:d9:3e:f9:62:59:56:b3:de:ec:34:fd:
         f4:70:1c:33:73:f6:76:0f:ea:d5:03:84:a8:5a:fe:bb:c6:f3:
         00:37:f1:ca:40:41:32:25:9f:e4:3c:56:9c:0a:e4:63:25:7d:
         b8:ff:d1:dc:b2:50:d0:4d:f2:05:e8:6f:63:0e:91:02:33:a2:
         9d:be:4e:16:00:cb:d0:89:c9:19:ef:b4:24:8b:e2:10:c3:1f:
         e0:ba:79:c2:54:4d:ad:07:64:8a:ef:17:9a:d5:0e:ec:72:8e:
         99:d9:21:02:e7:2b:1a:33:f6:77:c4:2c:2e:d8:93:b9:a1:c7:
         d7:8c:70:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3
MzM1RTRGNTkwHhcNMjYwMzI5MDUxODMxWhcNMjYwNDA1MDUxODMxWjAYMRYwFAYD
VQQDEw02OWM4YjYyNy00OTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJoBlKXBruNFG8HdTaI4oV9VogdKASoLMAGuPr6SED+MvnIB3Tvbgo84Tfha
664NPPWQtQ7scbrJzjyqzfu+4LPQG4XkSCaSxYbZBxVehTU9mgrASq9aTuY+fvTF
z5JUuLo4scs45Js4ABHV/YRPNws4G8B46SL8BGoxcaMPbBrd7YpIdJrZHTY810X/
iVs51PYMwR+3M93MPYQ3l8kX+r22ytsyECL6EaFCkddtqTI4lf2Mwkwwx5jG3RaL
+CxAJDgJusQWxzKis1ZzjLidkKSCyn1i4VwI7iVqN1pFc1mpNdsy8tJylU/Y5BoH
HZtj5n4VcdFa/5HaHnvkrXjjTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHseR7fn
LxcWDqUf8XcbruyXxc/rMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC
NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54
SHhsRWFPcUJWRTF6TmVUMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHvjx5joDmYzcI7nWe31aDu080pvFBz/zwbghVJoXnlS1kGp3G1L4u0yvz+Lv
r0jyBT2qota1QNkqWRmdhykwQnTJA8GohVE4uq2jMXRUEmbLz3MhAw1UebgNGS0f
haKmywcLfQQIOjlauqVlQS+XHt+YLAlNdj6E0FB5L7j4XmeBJJ0ioNk++WJZVrPe
7DT99HAcM3P2dg/q1QOEqFr+u8bzADfxykBBMiWf5DxWnArkYyV9uP/R3LJQ0E3y
BehvYw6RAjOinb5OFgDL0InJGe+0JIviEMMf4Lp5wlRNrQdkiu8XmtUO7HKOmdkh
AucrGjP2d8QsLtiTuaHH14xwrA==
-----END CERTIFICATE-----
Generated at Mon Mar 30 03:33:38 2026 by rpki-client