Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
File:                     Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft (raw, json)
Hash identifier:          Fpn+R2QucoF8Eclx/g0hkREH+EidcVt6kMzd0fA/If4=
Subject key identifier:   96:66:1E:44:E3:38:37:8F:CD:B7:77:CE:58:C6:BF:70:2C:B3:A5:CB
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
Manifest number:          085D
Signing time:             Sat 28 Feb 2026 21:00:19 +0000
Manifest this update:     Sat 28 Feb 2026 21:00:18 +0000
Manifest next update:     Sat 07 Mar 2026 21:00:18 +0000
Files and hashes:         1: Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl (hash: 2aGsz7i+wnJuIohnuP7/MTF1iYeMHh/cNFryVAco5/Y=)
                          2: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (hash: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk=)
                          3: 2E6008624A5711F0BD4BC13AC4F9AE02.roa (hash: CJo3Y0RDZ6WOA9pdaOgsipKbuYOBA79WFUuGjeqh4aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Feb 28 21:00:18 2026 GMT
            Not After : Mar  7 21:00:18 2026 GMT
        Subject: CN=69a35763-5f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:14:b7:4b:75:f8:94:5c:55:54:32:d9:fc:
                    51:cc:3d:b6:87:a2:bd:a5:2e:86:f6:0d:eb:e6:69:
                    0e:98:f2:16:dc:00:9f:6e:92:21:77:1b:31:aa:67:
                    0e:55:a6:d4:cb:8d:df:49:45:d1:60:24:22:ca:5c:
                    65:c2:7a:37:7a:a7:52:42:e3:ae:96:12:97:83:9f:
                    d0:bb:33:01:98:dd:2b:19:b2:79:0e:d5:63:59:4b:
                    9a:80:6d:49:a6:e8:71:f0:4f:5a:ee:20:88:59:38:
                    02:86:f1:f2:b2:05:1c:7a:46:63:9a:a1:2a:56:d3:
                    1b:ce:d0:e0:b6:50:e3:e1:28:76:de:5f:d2:a7:97:
                    c1:ac:7b:ed:78:24:e8:2d:dc:25:30:5a:90:74:34:
                    f5:4f:a7:ac:1b:5b:f3:f9:54:d2:bd:68:22:b7:10:
                    5e:5a:72:31:b1:ab:18:cf:01:b2:58:5e:1f:7f:b2:
                    9b:78:85:c1:dd:32:98:b1:df:d4:10:43:d7:70:69:
                    c8:ac:6f:3a:8e:3d:08:ae:d5:27:a4:74:25:de:96:
                    b8:61:10:5a:55:b4:27:4f:51:4f:28:d6:3f:a6:55:
                    d4:a0:6f:a8:07:68:3f:e9:07:4e:4d:f3:36:44:53:
                    81:b3:a0:95:de:5c:db:fe:c8:8a:42:8a:b2:df:0c:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:1E:44:E3:38:37:8F:CD:B7:77:CE:58:C6:BF:70:2C:B3:A5:CB
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:56:c1:7d:2f:05:61:11:1a:10:46:d7:6a:0e:8b:d0:f7:8a:
         49:fe:3d:62:ed:13:62:19:8f:ea:ae:b2:ec:e4:2b:96:da:41:
         50:a7:0d:6d:a3:65:bf:5e:b2:3e:cb:80:96:98:1b:b1:57:8d:
         ca:5d:6a:d9:7d:5f:29:54:84:d3:99:2e:70:4d:a8:2c:f8:26:
         72:aa:e8:2d:c3:c6:78:5a:fb:0b:82:96:11:f6:44:6e:b1:22:
         8b:17:e7:6a:c8:22:f9:44:4e:56:df:6b:5a:ef:26:6d:6a:23:
         79:ec:09:a1:e2:e6:e2:8b:ef:8e:99:7e:4b:f1:50:45:ac:33:
         6a:a3:da:a2:0e:2d:c2:e1:78:bb:b6:a9:66:d4:7d:0e:00:c5:
         ed:fa:0f:ac:3b:a5:fa:48:11:8b:b7:cc:43:41:2a:bb:49:0f:
         34:df:d3:a6:5b:e0:9b:34:67:c9:69:f9:d1:3d:2e:1b:ee:ff:
         6e:55:56:45:7f:72:e7:4f:9a:3f:f0:50:73:a3:ec:84:67:97:
         9d:50:26:6f:66:ae:a9:d3:35:7a:23:31:2c:63:02:f8:5d:84:
         0b:fc:a7:ee:17:e9:5e:50:71:0f:13:e7:79:d9:7b:59:fc:f0:
         7c:fb:0c:a5:7c:fc:20:e0:de:f6:ad:89:81:d9:12:10:04:50:
         fd:b3:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:14 2026 by rpki-client