Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
File:                     tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft (raw, json)
Hash identifier:          MYAIxSHOnBTUHNoXHCacjX1LSUZAMqbk9GwGxcFfRpw=
Subject key identifier:   86:B8:2D:87:4A:A9:12:1C:A7:B5:EE:1A:01:DA:23:60:0F:F5:FB:6C
Authority key identifier: B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C
Certificate issuer:       /CN=A91AACDB/serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
Manifest number:          01DA
Signing time:             Sun 05 Apr 2026 03:06:39 +0000
Manifest this update:     Sun 05 Apr 2026 03:06:39 +0000
Manifest next update:     Sun 12 Apr 2026 03:06:39 +0000
Files and hashes:         1: tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl (hash: Z2WmxS58Dyd2QI52IcGlEx1J9hl5mwW3S3u/6iQrzkw=)
                          2: FB160E5C81D511EEAE1FCF11C4F9AE02.roa (hash: n/eIvj6AcYg6nQUYQyCmjTvfv7V34JjfBWYzhPswdHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl
                          rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AACDB, serialNumber=B70FEAC31ED9D5801855FED3826F96379D6D120C
        Validity
            Not Before: Apr  5 03:06:39 2026 GMT
            Not After : Apr 12 03:06:39 2026 GMT
        Subject: CN=69d1d1bf-fd45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:73:17:5a:00:c2:ac:00:cf:a9:b6:3f:83:
                    19:98:39:cc:c0:27:4e:eb:af:76:02:90:89:dc:74:
                    57:ff:68:25:67:9b:31:aa:7f:4e:c2:41:9c:c9:bb:
                    e3:14:1e:cd:70:9e:fe:1d:84:34:63:4b:2a:0f:42:
                    52:04:de:fd:df:97:df:81:33:a6:fe:6a:8d:5c:36:
                    24:eb:c5:d5:fd:99:28:bd:7c:0f:88:9d:f8:f8:67:
                    25:2f:c6:9f:3a:9c:15:bd:66:43:0a:34:35:d5:32:
                    0b:8d:e6:f2:1a:8d:40:9e:f5:f0:30:71:23:12:79:
                    3f:33:4f:48:62:42:f7:c1:fd:92:29:f4:fb:cb:3c:
                    c9:d8:e9:1e:43:1a:11:bc:20:b9:bd:c5:ff:a2:51:
                    32:3d:97:1b:e7:0f:22:17:9d:15:fc:0c:8b:5c:4d:
                    d9:87:41:34:34:b7:61:78:93:48:fb:4b:4f:e7:29:
                    e8:9b:49:e3:71:73:f4:05:7b:ec:4e:ab:68:31:ea:
                    49:a1:6f:5a:a4:1e:f7:48:20:12:7d:55:0f:57:fc:
                    a3:b6:8c:fc:54:db:ef:e4:7b:4f:ab:15:fb:47:0c:
                    b0:81:e3:e8:3c:4d:d9:ad:26:a4:54:8c:1a:91:6f:
                    ca:3a:a2:fb:ab:38:2c:2e:4a:4c:46:f1:75:50:40:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:2D:87:4A:A9:12:1C:A7:B5:EE:1A:01:DA:23:60:0F:F5:FB:6C
            X509v3 Authority Key Identifier:
                keyid:B7:0F:EA:C3:1E:D9:D5:80:18:55:FE:D3:82:6F:96:37:9D:6D:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACDB/43EF3B3E679711EE89527B60C4F9AE02/tw_qwx7Z1YAYVf7Tgm-WN51tEgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:85:9b:b9:0c:dc:f9:6c:30:2d:2a:da:2c:4f:ea:bd:9b:66:
         9b:79:0f:fc:d2:13:f5:cf:2d:5a:f5:98:d2:ac:6d:45:fa:a0:
         61:21:ec:58:d9:50:2d:d0:02:9f:7e:b4:3f:9b:45:f8:96:cb:
         bf:62:20:5d:c8:e4:b9:26:57:e2:c8:4f:b0:2a:11:2f:5f:a9:
         9d:03:d3:b5:4c:69:51:c3:5b:8c:2d:04:8a:8d:74:8e:fc:cf:
         43:0c:d1:4a:b3:ef:24:56:3e:fd:fa:e4:30:22:6d:19:5e:37:
         ac:82:69:a0:5b:27:ab:cc:0b:a9:75:7e:81:34:89:7b:ad:84:
         7f:43:fd:78:de:07:09:67:83:8b:45:be:b7:2e:3b:43:6d:f7:
         e0:e2:1e:2a:9f:c8:6d:7d:5f:36:66:ee:cf:68:dc:9c:09:ba:
         78:94:d8:7f:45:3a:b8:8d:e7:e7:12:0e:17:3d:4e:08:df:47:
         1b:d6:90:6e:8e:5f:0c:21:1c:cb:f5:25:dc:1e:ba:cb:26:85:
         53:9d:c3:93:0d:b3:bb:89:4a:f7:82:94:06:ff:fc:82:e4:85:
         58:4c:77:15:55:aa:cb:46:14:a2:79:87:42:1d:8c:78:ff:d7:
         b9:83:af:de:e7:d6:47:3b:14:30:4e:93:a5:23:e5:30:c3:9b:
         60:21:e7:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFDREIxMTAvBgNVBAUTKEI3MEZFQUMzMUVEOUQ1ODAxODU1RkVEMzgyNkY5NjM3
OUQ2RDEyMEMwHhcNMjYwNDA1MDMwNjM5WhcNMjYwNDEyMDMwNjM5WjAYMRYwFAYD
VQQDEw02OWQxZDFiZi1mZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3h9zF1oAwqwAz6m2P4MZmDnMwCdO6692ApCJ3HRX/2glZ5sxqn9OwkGcybvj
FB7NcJ7+HYQ0Y0sqD0JSBN7935ffgTOm/mqNXDYk68XV/ZkovXwPiJ34+GclL8af
OpwVvWZDCjQ11TILjebyGo1AnvXwMHEjEnk/M09IYkL3wf2SKfT7yzzJ2OkeQxoR
vCC5vcX/olEyPZcb5w8iF50V/AyLXE3Zh0E0NLdheJNI+0tP5ynom0njcXP0BXvs
TqtoMepJoW9apB73SCASfVUPV/yjtoz8VNvv5HtPqxX7RwywgePoPE3ZrSakVIwa
kW/KOqL7qzgsLkpMRvF1UEBQgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIa4LYdK
qRIcp7XuGgHaI2AP9ftsMB8GA1UdIwQYMBaAFLcP6sMe2dWAGFX+04JvljedbRIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNEQi80M0VGM0IzRTY3
OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZQVlWZjdUZ20tV041MXRF
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3R3X3F3eDdaMVlBWVZmN1RnbS1XTjUxdEVndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUNEQi80M0VGM0IzRTY3OTcxMUVFODk1MjdCNjBDNEY5QUUwMi90d19xd3g3WjFZ
QVlWZjdUZ20tV041MXRFZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEYWbuQzc+WwwLSraLE/qvZtmm3kP/NIT9c8tWvWY0qxtRfqgYSHsWNlQLdAC
n360P5tF+JbLv2IgXcjkuSZX4shPsCoRL1+pnQPTtUxpUcNbjC0Eio10jvzPQwzR
SrPvJFY+/frkMCJtGV43rIJpoFsnq8wLqXV+gTSJe62Ef0P9eN4HCWeDi0W+ty47
Q2334OIeKp/IbX1fNmbuz2jcnAm6eJTYf0U6uI3n5xIOFz1OCN9HG9aQbo5fDCEc
y/Ul3B66yyaFU53Dkw2zu4lK94KUBv/8guSFWEx3FVWqy0YUonmHQh2MeP/XuYOv
3ufWRzsUME6TpSPlMMObYCHn+w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:07 2026 by rpki-client