Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
File:                     l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json)
Hash identifier:          QLMM4eNHp3HXVBnhcMwLlftLV9JUQGwvbYOCSFTvD8A=
Subject key identifier:   94:D6:B0:00:EA:D1:2C:42:71:D0:B6:43:29:EE:5F:3A:0C:7B:E9:78
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Certificate issuer:       /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial:       0C42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
Manifest number:          0C2D
Signing time:             Sat 28 Feb 2026 18:58:21 +0000
Manifest this update:     Sat 28 Feb 2026 18:58:20 +0000
Manifest next update:     Sat 07 Mar 2026 18:58:20 +0000
Files and hashes:         1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: P23ks5QfvJrVGQP25/6rqUbI4gMPf5EgLUMiwdfX5nc=)
                          2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: N0WCtgkaNZeOTo3I3oEHp89wJvvLye1ENYthm+qu0UA=)
                          3: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: E8AriLCWZxuvCsqIouWQqeJv8TlOzugnbqYiiRVnwpQ=)
                          4: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 1JZC+YNgjMx+K+MDr445Xif/I5gERZj+9WpcW7BqlVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
                          rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3138 (0xc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
        Validity
            Not Before: Feb 28 18:58:20 2026 GMT
            Not After : Mar  7 18:58:20 2026 GMT
        Subject: CN=69a33acd-5b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:e6:32:f0:d8:45:03:58:06:aa:02:21:8c:
                    3d:41:97:1c:bc:71:f5:b0:7c:e1:2a:e2:6a:50:6c:
                    95:52:63:fe:d6:73:6f:0e:be:b9:ef:b9:9b:ec:6b:
                    1e:07:ea:a6:7e:f7:71:f2:0e:45:4c:cb:d2:de:1e:
                    8a:ea:d8:65:67:cc:a2:5d:3f:be:33:f5:24:b8:f6:
                    26:44:a2:71:2f:ec:7a:4b:45:6c:5c:fb:d4:95:0b:
                    a6:20:6a:ab:5d:3b:a6:cb:0b:ef:90:75:bb:90:8e:
                    c0:13:df:67:16:1f:08:8e:f1:3c:78:c8:dc:04:2a:
                    76:94:9c:60:65:83:95:01:65:59:3e:54:0f:d4:48:
                    91:e9:1e:47:89:18:ab:b0:37:35:84:6c:e0:c4:e3:
                    f2:b4:f7:02:97:78:0c:fd:0f:11:5c:eb:54:a6:c5:
                    e9:52:22:db:f2:af:88:17:74:4a:9a:de:a6:fc:d9:
                    0f:e7:0c:67:b9:8c:ad:c0:94:73:48:2a:1c:23:ce:
                    37:cf:48:39:8e:0b:bf:9b:b5:8a:bb:4e:44:b6:3f:
                    82:1f:92:44:a1:82:11:c0:34:c3:68:1f:88:32:f5:
                    15:1b:6d:ab:99:d8:3b:19:1b:89:20:ff:b0:5f:83:
                    e5:b9:6c:da:6a:d6:8a:9f:b4:01:50:6d:3b:ae:48:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D6:B0:00:EA:D1:2C:42:71:D0:B6:43:29:EE:5F:3A:0C:7B:E9:78
            X509v3 Authority Key Identifier:
                keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:f5:53:72:83:ca:9d:d6:72:66:d3:8a:32:9d:69:17:3b:
         1d:2f:6d:ef:9a:e1:25:2c:f7:fa:40:fb:96:a7:ad:b1:7a:0f:
         bd:5f:18:43:7d:ed:45:84:62:f7:f5:d5:4d:49:9e:6c:60:82:
         15:82:73:62:f2:8b:cb:71:b8:ff:90:b9:53:f1:4d:75:36:fd:
         38:f5:46:30:83:fa:e9:9e:91:b1:7a:9c:53:b1:77:28:7d:84:
         80:bf:85:25:eb:cc:8b:36:53:3c:65:59:3e:66:43:87:f8:44:
         6c:9e:ab:71:00:dd:1d:e9:87:98:17:66:bd:3d:51:a5:f1:17:
         32:1d:d0:01:a6:ee:a2:f1:65:fb:10:93:45:4b:b9:cf:4f:a2:
         c9:b3:63:67:34:ea:ba:18:23:fd:90:fb:1f:ae:e7:4f:14:1c:
         a0:11:94:79:ef:b8:28:45:3d:3b:19:fb:7e:af:d3:b2:68:63:
         7a:bb:44:77:d8:5a:25:4b:c5:10:50:ae:d3:4d:a7:be:35:02:
         42:5c:8f:ab:e3:6f:66:d8:5b:3d:91:6c:cb:a3:73:69:2c:d5:
         94:6a:49:00:49:9a:51:a1:0a:75:b7:a2:6e:63:fe:ab:c5:e1:
         5b:f8:e8:8b:cd:18:18:3b:57:71:d3:3d:d1:c7:b6:d7:26:e1:
         6f:85:57:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:51 2026 by rpki-client