Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
File:                     1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json)
Hash identifier:          FGPG3cpDjDYfdwpjPHIAVebsyfxjCxQSMi5JqbXxwIc=
Subject key identifier:   00:44:73:6B:2A:6B:44:BF:E5:8B:0B:7F:D7:71:B7:68:E3:FE:92:BA
Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59
Certificate issuer:       /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
Manifest number:          07B9
Signing time:             Sat 28 Feb 2026 23:54:21 +0000
Manifest this update:     Sat 28 Feb 2026 23:54:21 +0000
Manifest next update:     Sat 07 Mar 2026 23:54:21 +0000
Files and hashes:         1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: L+vylNAcEZE8Ygv9clLOxZrMN6x8RXqTPjli6Pi6atA=)
                          2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: o2FmDJmIhF0oyjFFLSyKzWs4i2UgC9gZtaokgU+Glvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl
                          rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759
        Validity
            Not Before: Feb 28 23:54:21 2026 GMT
            Not After : Mar  7 23:54:21 2026 GMT
        Subject: CN=69a3802d-58c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:1c:ad:fc:65:7f:64:19:07:d2:2d:fe:8f:
                    b7:49:31:c7:d5:8a:c0:35:d2:59:74:37:7e:b5:c0:
                    4d:55:e1:2c:5f:8a:0a:cc:1c:bb:4b:f4:26:7f:a7:
                    4f:b9:38:51:1c:e9:73:88:72:02:09:de:6b:76:33:
                    54:f6:ac:89:f5:9a:97:c5:d3:e9:fb:a2:5e:d6:a2:
                    11:8c:3d:4e:c0:8f:41:7a:81:e9:32:b0:b7:7f:e2:
                    b4:12:26:63:3c:09:91:69:a4:7a:6e:96:48:38:e0:
                    60:9c:d5:11:97:0b:b1:64:6e:c8:9c:92:8e:54:d9:
                    93:1a:28:d0:fc:f9:06:da:ea:38:16:ca:90:8b:0b:
                    3c:8f:fa:df:fd:34:b2:e0:83:7f:66:b2:89:28:81:
                    0f:55:fe:e2:08:ef:e9:ff:21:d8:00:33:45:3f:35:
                    32:e0:7c:aa:6c:d8:1d:7d:a7:a2:2c:8f:9c:2d:78:
                    02:1f:0e:18:32:9a:f1:36:75:51:ca:14:e0:c2:95:
                    ec:af:df:43:9e:fd:a4:8e:ef:91:2a:75:3f:46:9e:
                    85:c4:b8:e8:b8:8d:e5:d6:ea:4b:81:1e:e1:cc:78:
                    54:66:69:39:71:18:7b:5a:68:b6:8e:90:97:e8:f3:
                    61:c2:8a:d6:77:e3:b0:49:0e:fb:21:41:dc:9d:85:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:44:73:6B:2A:6B:44:BF:E5:8B:0B:7F:D7:71:B7:68:E3:FE:92:BA
            X509v3 Authority Key Identifier:
                keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:15:5c:1b:66:0b:d2:75:21:8a:75:39:de:10:5b:ba:f8:67:
         68:28:98:e8:2f:61:e1:b4:33:77:2c:0e:83:3f:02:0d:0c:d1:
         e8:ba:2c:cf:ba:31:40:9d:a0:e2:fc:07:56:9e:0f:20:02:f3:
         8a:e4:b8:76:cb:19:c4:23:ed:0a:83:57:e4:96:d0:04:ab:2d:
         a5:30:58:33:c6:14:5d:b6:6f:cd:b7:51:ac:91:2c:69:e5:94:
         84:a4:42:8d:d8:cd:f3:82:df:12:2a:96:50:8d:c2:a9:52:f2:
         ff:a5:11:4a:bd:84:75:85:ba:be:51:7c:f3:89:16:13:65:2c:
         88:c5:f5:31:d2:f9:3d:c6:fb:c8:6e:31:f9:6c:71:4f:00:d4:
         c0:ff:94:ec:21:31:e9:38:57:05:e3:66:02:0c:61:ae:50:d9:
         be:98:1f:84:cc:a8:50:87:bd:e9:76:26:2e:19:67:a2:ae:b7:
         e2:64:dd:b5:cf:64:2a:8f:75:06:d7:ec:8d:c2:46:40:68:a9:
         12:f0:77:ff:45:32:af:0c:de:c9:3e:e4:59:ff:b9:65:c5:8d:
         6b:bd:23:2f:d3:0e:65:40:8c:02:f8:41:59:ea:e6:d3:d1:0a:
         95:c2:88:e2:15:f5:cb:14:ec:be:a6:37:7d:e1:b7:0a:67:e8:
         bb:8b:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:26 2026 by rpki-client