Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File:                     9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier:          JI9aq6ukaihhkU655V2b22EXZ3c+P2Vb0dW6D6U/gKM=
Subject key identifier:   C5:9E:6B:B7:CC:B8:F1:6E:17:C4:A1:B7:61:D3:49:A7:13:FC:70:C4
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer:       /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial:       3530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number:          3521
Signing time:             Mon 02 Mar 2026 01:40:10 +0000
Manifest this update:     Mon 02 Mar 2026 01:40:08 +0000
Manifest next update:     Mon 09 Mar 2026 01:40:08 +0000
Files and hashes:         1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: SPEGep2SE1svwHiKonFUFs99hfymlcRnWPFUQgxBceE=)
                          2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: 3TvgIIQrzHdKEkfomFpL2w7xqxyJsgbpjgTdJxGfg7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
                          rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13616 (0x3530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
        Validity
            Not Before: Mar  2 01:40:08 2026 GMT
            Not After : Mar  9 01:40:08 2026 GMT
        Subject: CN=69a4ea7a-034a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:00:26:4b:22:7c:bf:d1:9f:25:0a:2c:cd:
                    ce:60:bb:d8:c0:99:fc:b3:63:52:f9:d6:c3:bc:76:
                    91:7d:e7:d1:d7:ef:b2:3a:00:d9:60:2b:6c:46:96:
                    d8:04:ad:09:88:72:40:67:0d:3a:89:49:2a:64:17:
                    c8:93:0a:20:a8:e2:af:98:d8:80:62:5f:d9:a3:f8:
                    09:e7:4b:23:38:9f:3f:fe:24:39:fd:73:87:03:11:
                    78:9e:e2:63:bc:1b:8b:0d:b0:62:df:2b:f3:a9:4a:
                    92:b1:37:c8:12:cf:f9:44:b2:63:47:65:27:9e:1e:
                    d8:39:fe:99:35:9d:ee:0e:c0:b4:23:34:c0:1b:a3:
                    62:dc:20:af:86:33:49:13:d2:de:59:91:4a:61:d2:
                    2c:d7:dd:3f:68:c8:70:76:0e:2c:09:18:9a:86:8c:
                    d7:af:ed:59:01:d1:10:93:ac:a4:01:4d:72:a9:c8:
                    af:45:4e:9b:81:ba:ba:fa:6d:49:a6:ec:93:0d:1b:
                    3e:25:9a:5f:c0:e5:8d:f5:a9:76:ad:40:15:25:ca:
                    e6:60:45:54:8f:64:12:53:30:b4:d5:c9:6e:46:0a:
                    73:50:cc:2c:fe:19:0c:83:7f:eb:e1:46:ac:cf:3f:
                    ca:52:a5:7f:a3:68:a1:ba:ec:69:9b:73:24:a2:a3:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9E:6B:B7:CC:B8:F1:6E:17:C4:A1:B7:61:D3:49:A7:13:FC:70:C4
            X509v3 Authority Key Identifier:
                keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:71:3c:c2:af:7e:50:02:f6:3c:04:86:d7:af:0e:13:2f:
         78:6b:4c:11:bf:6f:5c:b7:98:3e:41:88:21:90:46:0e:9d:e7:
         76:c6:dd:73:2e:06:12:f1:66:52:87:f5:ab:41:b9:ed:b2:05:
         4c:45:33:19:f2:82:6c:1d:37:71:97:f6:59:78:ac:f0:94:88:
         08:7e:91:3f:e7:94:04:93:85:09:72:13:23:ce:f7:0a:88:79:
         f4:30:46:5b:e0:ea:2a:ae:b9:41:4e:31:69:13:92:88:7d:19:
         9a:ce:40:f5:7b:19:b9:fa:6e:8f:61:31:7a:2a:b8:b7:04:ba:
         58:4d:8a:ef:f3:65:90:04:68:67:43:f9:7e:45:31:2a:46:7c:
         af:e2:21:63:0b:c0:58:c8:42:a2:ac:65:a5:75:66:0d:d9:18:
         50:c5:56:39:52:ca:95:80:83:99:5d:38:d4:b3:6c:96:49:27:
         e2:71:98:3e:3d:64:84:bc:ea:08:48:80:ed:fb:6b:be:e2:94:
         3b:80:58:3e:b6:c7:fc:0b:0d:18:8f:63:46:4a:be:b3:d8:52:
         55:46:58:c8:f7:90:3a:a8:21:11:fc:23:fe:78:3e:ad:c2:b0:
         15:b0:59:3c:1e:9a:58:9d:f5:81:08:36:c1:81:e2:6d:d8:3a:
         af:16:1d:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ3OTkxMTAvBgNVBAUTKEY2NzJEM0I2MjQ0Q0E0QzhEM0ZFMjAwODI2QThBNDlG
QUIyQzc2MTIwHhcNMjYwMzAyMDE0MDA4WhcNMjYwMzA5MDE0MDA4WjAYMRYwFAYD
VQQDEw02OWE0ZWE3YS0wMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxD4AJksifL/RnyUKLM3OYLvYwJn8s2NS+dbDvHaRfefR1++yOgDZYCtsRpbY
BK0JiHJAZw06iUkqZBfIkwogqOKvmNiAYl/Zo/gJ50sjOJ8//iQ5/XOHAxF4nuJj
vBuLDbBi3yvzqUqSsTfIEs/5RLJjR2Unnh7YOf6ZNZ3uDsC0IzTAG6Ni3CCvhjNJ
E9LeWZFKYdIs190/aMhwdg4sCRiahozXr+1ZAdEQk6ykAU1yqcivRU6bgbq6+m1J
puyTDRs+JZpfwOWN9al2rUAVJcrmYEVUj2QSUzC01cluRgpzUMws/hkMg3/r4Uas
zz/KUqV/o2ihuuxpm3MkoqOCEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWea7fM
uPFuF8Sht2HTSacT/HDEMB8GA1UdIwQYMBaAFPZy07YkTKTI0/4gCCaopJ+rLHYS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xNTEzNDk5ODFE
OTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBNalRfaUFJSnFpa242c3Nk
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzluTFR0aVJNcE1qVF9pQUlKcWlrbjZzc2RoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDc5OS8xNTEzNDk5ODFEOTUxMUUyQkRFQkI5RjkwOEIwMkNEMi85bkxUdGlSTXBN
alRfaUFJSnFpa242c3NkaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkPdxPMKvflAC9jwEhtevDhMveGtMEb9vXLeYPkGIIZBGDp3ndsbdcy4GEvFm
Uof1q0G57bIFTEUzGfKCbB03cZf2WXis8JSICH6RP+eUBJOFCXITI873Coh59DBG
W+DqKq65QU4xaROSiH0Zms5A9XsZufpuj2Exeiq4twS6WE2K7/NlkARoZ0P5fkUx
KkZ8r+IhYwvAWMhCoqxlpXVmDdkYUMVWOVLKlYCDmV041LNslkkn4nGYPj1khLzq
CEiA7ftrvuKUO4BYPrbH/AsNGI9jRkq+s9hSVUZYyPeQOqghEfwj/ng+rcKwFbBZ
PB6aWJ31gQg2wYHibdg6rxYdkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:02 2026 by rpki-client