Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File:                     TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier:          7OqopKK+olFz+JJpvkQi1Kky0hm8NC+SM5hJhICl5+o=
Subject key identifier:   40:EF:0E:C2:37:93:D5:D3:82:6D:B6:D9:F6:59:F1:76:52:DB:60:BF
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer:       /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial:       0BA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number:          0B8F
Signing time:             Sat 28 Feb 2026 19:21:21 +0000
Manifest this update:     Sat 28 Feb 2026 19:21:20 +0000
Manifest next update:     Sat 07 Mar 2026 19:21:20 +0000
Files and hashes:         1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: rcydvc3KuVeFJ/hgsUPru2bEnWFQPn4XsmFgnHIFCfk=)
                          2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: eH7lKxC1fSAwRwADOegzWnR0eN8xp2QzqcA2Q9e7qkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
                          rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980 (0xba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
        Validity
            Not Before: Feb 28 19:21:20 2026 GMT
            Not After : Mar  7 19:21:20 2026 GMT
        Subject: CN=69a34031-ea6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:03:a3:b7:5b:61:86:45:17:bc:ef:84:f4:
                    93:d7:0f:4d:af:41:81:0c:48:f3:7a:a3:29:15:d6:
                    85:b9:b4:28:04:ab:1d:5b:e9:84:57:5d:10:0c:df:
                    1d:0b:d3:c1:b8:f1:db:58:cf:58:dd:27:33:9d:6a:
                    e5:fc:66:15:9e:d5:87:30:1d:1e:66:d6:7a:64:c0:
                    43:27:a6:af:cd:75:60:29:cd:34:87:c5:6e:d0:e3:
                    33:9c:25:1f:6a:4d:69:27:c3:e2:03:0e:0a:05:22:
                    56:6b:7a:37:19:d3:da:c4:e4:0a:c1:6b:8e:72:e9:
                    66:95:49:ca:cd:79:8c:30:c6:38:ef:67:88:67:70:
                    7e:24:c3:bd:77:9b:77:8e:10:ab:0b:4d:6a:1c:da:
                    22:8e:b0:77:ff:e9:77:53:44:32:a7:8f:a3:2d:40:
                    cf:5c:dd:c4:76:3c:4f:55:22:32:84:1c:7a:90:39:
                    d9:27:91:86:db:c1:52:22:88:f0:bd:14:f4:ec:fa:
                    77:9c:28:c6:0c:c3:32:3e:ab:09:dd:df:d0:58:89:
                    4e:62:c8:2a:f8:13:a8:60:5b:c0:fd:42:65:83:19:
                    e8:af:d5:24:71:92:62:fc:fd:34:32:c3:fb:8d:bd:
                    fa:e7:3c:fd:16:06:f8:00:a9:4f:77:94:ca:18:3e:
                    16:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EF:0E:C2:37:93:D5:D3:82:6D:B6:D9:F6:59:F1:76:52:DB:60:BF
            X509v3 Authority Key Identifier:
                keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f6:bc:c3:1d:80:ae:49:9b:ad:87:02:8a:bc:02:e4:56:1e:
         ff:8d:4e:cf:02:ac:82:d5:9d:a0:2c:80:85:f4:f5:24:7b:d0:
         31:a9:67:b1:c5:4d:20:1e:d7:5f:47:11:99:ea:b0:06:7e:9e:
         af:82:51:6c:d8:e2:5f:5a:a0:57:3b:10:a9:1a:76:c7:f7:30:
         c5:3c:05:65:c8:c6:e8:52:26:c2:e6:b7:a1:91:87:26:2f:dd:
         c1:03:df:1e:52:7f:a0:ed:54:11:eb:88:bf:db:97:7d:21:94:
         13:0a:26:62:2f:7c:fa:5a:d8:dd:71:e4:a9:99:00:58:2b:bc:
         ba:09:66:b3:d8:59:c7:92:3d:f9:7a:21:7c:2b:c8:e1:72:3a:
         66:3e:04:21:fa:d0:18:d1:a3:cc:76:26:99:e8:1e:9d:7f:60:
         90:e4:35:8d:91:e7:e9:a1:c2:60:d3:c3:50:e2:7c:43:79:08:
         d5:82:6f:1c:7f:7f:31:a3:fb:da:60:81:90:c9:7c:bd:12:77:
         a9:ff:7b:7c:a0:0a:e0:b2:eb:bf:c8:58:83:ed:2b:b5:df:d8:
         c8:4b:62:30:a7:a0:3e:59:87:22:99:c0:da:7b:11:69:11:ec:
         bc:a1:dc:af:80:7e:e1:c9:1f:ec:87:f9:9a:5e:04:20:c0:78:
         77:eb:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:22 2026 by rpki-client