Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File:                     CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier:          tfTUuqvehNH1rqBolR9LzbK8NLjBLwSOW45X8tyAcJE=
Subject key identifier:   C4:E7:61:53:76:A9:2D:6D:09:E1:CD:65:10:54:BB:A0:4B:67:26:3A
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       09DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number:          09B8
Signing time:             Sat 28 Feb 2026 20:20:56 +0000
Manifest this update:     Sat 28 Feb 2026 20:20:55 +0000
Manifest next update:     Sat 07 Mar 2026 20:20:55 +0000
Files and hashes:         1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: IT1XSA/BPBxfu6wQycVEfgMQyr7FdOwnlLpQXHS+vO8=)
                          2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: eBK2/4HT3bedof3web/gU4L50RYkeH72g1OfOCRSmwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Feb 28 20:20:55 2026 GMT
            Not After : Mar  7 20:20:55 2026 GMT
        Subject: CN=69a34e28-154f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:e0:12:8a:35:88:f7:bc:c2:09:ef:f7:9e:
                    3a:dd:5f:73:75:4d:36:a8:3d:ef:cf:b4:00:5a:79:
                    80:67:a6:29:40:0d:57:95:ae:f5:ea:67:9a:c3:3b:
                    1c:54:bb:be:1b:d4:50:fb:86:76:6d:25:7e:0a:ad:
                    69:8e:db:bc:25:37:a8:9c:a9:0c:31:85:f8:a9:2d:
                    6e:b2:de:77:64:da:66:33:61:c9:2e:80:14:89:d0:
                    32:43:52:4e:ec:9e:4a:46:34:dc:92:da:c1:00:85:
                    f9:03:32:20:8b:2d:23:ac:42:47:2c:4a:df:a6:75:
                    96:ea:78:6a:f1:14:7f:28:66:46:26:18:21:b8:52:
                    a1:62:40:53:23:65:5a:fd:0e:fa:0c:56:fe:f8:84:
                    be:33:d5:75:f0:59:be:52:55:8c:87:7e:fc:02:d9:
                    c4:e9:9e:b9:6f:91:83:0d:58:f1:17:78:68:86:91:
                    3b:41:75:8f:10:5a:bf:ca:89:19:df:c4:a8:5a:c6:
                    66:2b:7c:95:6a:37:77:73:0b:2f:f1:2f:87:8f:1d:
                    06:45:f0:17:e0:bc:a8:5f:d8:be:35:4d:1e:b7:7a:
                    3c:0d:d1:dd:67:9b:34:a5:ca:4e:20:db:60:82:df:
                    27:53:5c:c6:78:e1:de:ef:11:7d:12:cb:4f:7b:ca:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E7:61:53:76:A9:2D:6D:09:E1:CD:65:10:54:BB:A0:4B:67:26:3A
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:c5:74:1d:3d:b3:98:39:51:40:fb:23:a6:32:dd:09:38:
         91:72:92:46:d3:5c:46:ee:63:3d:cc:94:66:45:cc:cb:70:9f:
         ff:3a:3b:3d:a4:c2:54:36:0b:79:ce:27:66:e2:cf:ff:a4:35:
         27:71:f3:60:cb:d6:3c:7c:72:4b:00:f7:74:67:f5:25:2e:9f:
         32:e2:ec:bc:9b:9a:7f:19:d6:cf:5e:24:87:6f:81:44:64:2a:
         c5:31:f2:3b:03:61:5e:20:bf:1f:cd:d8:10:9c:f9:0e:8b:f4:
         ad:ba:e3:22:29:44:0b:aa:8c:e4:13:e1:70:14:d5:2d:1c:a2:
         f1:4d:92:3a:3b:66:e7:0d:7a:3b:84:74:7c:5b:2a:fc:b2:8e:
         4c:d6:c6:1c:98:80:5f:c6:e1:69:9a:4d:11:8b:07:cd:a6:4f:
         b8:21:02:06:47:c3:65:8b:1f:27:1e:cf:4d:64:80:3b:e1:b8:
         d9:ca:fc:55:fd:40:01:6e:f8:42:61:24:30:ef:36:42:b6:7a:
         86:9a:29:f7:59:39:3a:a2:72:54:ff:1b:14:98:a6:85:68:e2:
         c0:a0:fc:c4:df:8b:26:b0:1d:c2:b6:3e:7c:f2:f4:56:93:bd:
         6d:54:2e:ae:33:94:57:80:14:c2:41:f9:8c:50:7b:d1:5a:22:
         9b:e9:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:27 2026 by rpki-client