Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File:                     tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier:          qsTE4udZ6t7OlPg8eeHkabqPdRtrbnbctjxEPMjpjqc=
Subject key identifier:   51:C5:89:D8:4C:B1:DD:CA:C6:1A:67:DC:46:12:2F:7E:F1:68:8A:78
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer:       /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial:       0364
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number:          035C
Signing time:             Mon 02 Mar 2026 03:12:10 +0000
Manifest this update:     Mon 02 Mar 2026 03:12:08 +0000
Manifest next update:     Mon 09 Mar 2026 03:12:08 +0000
Files and hashes:         1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: Q+kYuF6dIDHfI5EPm19Ab3WUTi3+9lIg+B0i4HA8UcQ=)
                          2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
                          rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
        Validity
            Not Before: Mar  2 03:12:08 2026 GMT
            Not After : Mar  9 03:12:08 2026 GMT
        Subject: CN=69a5000a-e880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:2d:01:46:c3:09:3b:41:7d:f3:5c:a5:6d:
                    94:6f:79:5e:5c:78:72:62:94:1d:80:bf:fe:7e:b4:
                    8c:6d:87:3d:50:59:9b:53:cd:dc:c5:4d:3a:86:c1:
                    1c:54:3b:90:1b:41:2e:d8:22:69:f6:bf:26:17:0c:
                    16:e1:7a:3e:74:9d:55:27:9b:53:a7:cb:75:06:b4:
                    82:8b:ff:b8:5b:a8:a8:74:f9:30:31:a3:bf:94:49:
                    43:90:95:de:1c:06:6e:29:10:c0:1e:5b:7b:10:71:
                    94:a9:06:49:c5:f8:62:4e:09:d6:a3:5a:55:71:60:
                    59:55:36:2f:62:c2:2b:4d:fe:89:70:ca:ac:f0:ee:
                    48:eb:be:67:af:6d:55:3b:7c:86:f6:6b:38:33:71:
                    bd:27:71:5d:ae:8a:79:83:be:6b:2b:80:ce:44:91:
                    80:12:51:20:27:06:59:99:3f:b1:72:37:56:c8:36:
                    1a:2f:20:02:05:cf:8f:8d:ad:3a:d4:6a:18:56:38:
                    55:20:da:e0:47:38:6a:38:3d:25:b4:73:e1:ac:cf:
                    74:ad:e5:95:93:48:b6:a5:b8:5f:3d:02:dd:91:2a:
                    83:45:d0:0f:23:ac:cb:4f:c0:48:6f:71:02:f1:8f:
                    28:ce:9d:4d:b4:47:48:d3:0d:f3:2f:33:f3:6e:d7:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C5:89:D8:4C:B1:DD:CA:C6:1A:67:DC:46:12:2F:7E:F1:68:8A:78
            X509v3 Authority Key Identifier:
                keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:16:21:20:18:37:0b:a7:cc:47:07:d5:4e:08:7d:63:40:1a:
         db:3e:2a:67:70:3c:fb:6f:8d:8b:cf:8e:43:3f:14:4a:ce:4b:
         57:8d:69:a4:21:fb:cf:84:ea:d9:41:98:8c:a4:d8:d4:12:c6:
         c2:d2:ba:9a:94:8f:1c:95:be:a7:70:cc:ab:f3:53:f5:da:8c:
         dc:db:6f:04:95:6b:f8:6e:85:a1:c7:ac:93:e8:8a:ac:81:fa:
         ba:9d:f6:88:77:fa:3c:17:02:65:86:92:7b:8c:c0:5b:52:84:
         b9:a4:aa:51:f0:24:1f:37:6d:83:1e:2f:2d:59:7a:25:e4:37:
         1a:c2:04:ca:7e:36:de:e9:89:48:d1:59:c7:1f:1a:08:73:f1:
         56:63:93:7b:fa:fc:85:63:82:d5:f1:f4:95:70:0b:19:08:e0:
         e4:16:91:48:47:12:5c:78:6e:0e:ba:cb:29:62:d6:60:ee:3c:
         9f:57:e2:92:b9:d4:6f:43:44:7d:30:94:37:a6:83:6b:e3:f4:
         8d:13:ea:bf:39:ae:5e:d2:36:a3:9a:0e:c8:d3:e1:64:a3:a8:
         73:6e:d6:1c:36:d3:9f:a2:61:6d:fd:4b:20:eb:e5:86:c4:18:
         31:1f:10:6a:78:42:bc:6b:cd:61:f8:71:d9:94:d3:e5:33:5f:
         cd:62:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:49 2026 by rpki-client