Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File:                     T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier:          kv5agdW6MOdpC+aYrhTqmx3kJ2pU5EDuQBwu5UCVNso=
Subject key identifier:   9F:A5:4E:7C:A9:F6:30:23:94:96:10:9E:D4:5C:FD:B0:6B:9F:D6:FA
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer:       /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial:       0D48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number:          0D3E
Signing time:             Sat 18 Apr 2026 17:56:51 +0000
Manifest this update:     Sat 18 Apr 2026 17:56:50 +0000
Manifest next update:     Sat 25 Apr 2026 17:56:50 +0000
Files and hashes:         1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: z9N/CNVlKiALfqpniyLJO4u7Jqjhl0l0Si32mj2fPPs=)
                          2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3400 (0xd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
        Validity
            Not Before: Apr 18 17:56:50 2026 GMT
            Not After : Apr 25 17:56:50 2026 GMT
        Subject: CN=69e3c5e2-234b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:30:1b:e8:bc:58:29:93:c9:49:b1:94:57:
                    a9:00:92:36:44:c0:9f:28:da:76:c4:c7:95:f2:e1:
                    bb:9b:14:83:09:1a:46:e0:35:6e:e5:5e:0f:2e:93:
                    fc:3a:8f:09:94:02:a4:26:88:c7:54:3b:05:ea:42:
                    7a:98:ea:19:37:f6:aa:5a:d5:7d:db:d4:c4:1d:ce:
                    e4:21:a6:90:80:a7:6e:04:87:7b:c2:c7:f8:63:12:
                    49:26:87:27:25:c1:13:cd:74:cb:95:ea:86:3d:40:
                    b7:8d:60:aa:85:5a:21:ac:51:bd:fa:14:0b:f0:79:
                    88:22:db:30:36:3b:40:1e:12:29:be:93:fa:ba:a3:
                    d0:55:fd:2f:02:d7:c8:3b:33:e5:1b:13:5e:bc:87:
                    de:d7:e5:ee:ec:aa:42:b3:b1:5c:62:3e:3d:a8:3f:
                    d3:65:ff:3b:e4:6c:84:f6:db:de:98:b9:ba:d2:4f:
                    c1:e5:16:e7:74:2c:b1:25:0e:53:fa:5b:1d:ed:1e:
                    ea:9e:33:f1:dd:fd:2d:ec:f7:3f:79:f7:20:f7:63:
                    dd:ad:b9:c5:0f:3d:c1:03:2b:73:c3:ec:19:56:71:
                    e3:23:95:84:f6:3f:c8:a9:61:5a:4c:88:44:d0:85:
                    56:02:bd:42:01:92:80:d9:f5:36:ae:26:e8:d3:68:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A5:4E:7C:A9:F6:30:23:94:96:10:9E:D4:5C:FD:B0:6B:9F:D6:FA
            X509v3 Authority Key Identifier:
                keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:10:0a:12:bf:60:6f:cd:68:c3:7d:5b:be:aa:bb:d3:56:af:
         cf:88:0b:c3:b8:cf:54:7f:9c:4e:aa:0b:db:e1:04:5c:9b:b4:
         23:e4:0a:b9:ee:b9:90:4d:55:17:dd:4b:28:13:22:5a:c9:b1:
         f3:14:30:4d:5d:9b:78:c6:ae:be:24:66:d5:56:f9:7e:e1:b1:
         c9:58:fb:9c:db:02:c0:42:78:f0:2f:df:4c:72:ec:35:7d:d5:
         22:90:e8:70:14:51:23:4f:41:f7:47:4a:fc:ea:e5:92:a3:a6:
         07:3c:34:57:05:78:81:58:f0:1d:54:15:d9:40:a9:ab:92:3e:
         57:19:16:1e:c4:8b:60:d1:29:4e:9e:c9:26:97:94:20:1e:b8:
         b7:b7:b3:a7:d0:c8:23:b4:2b:1e:c4:a0:00:ef:a5:ea:bc:39:
         eb:2c:65:de:e9:68:95:49:b0:80:8f:ca:60:18:46:9e:45:42:
         de:2a:f3:4a:bf:23:3c:69:fd:a7:79:cf:22:8c:bb:a3:76:af:
         af:5a:eb:62:e0:1f:92:3f:17:17:ed:19:08:ac:a6:98:73:59:
         89:25:00:88:71:26:ca:96:a4:8c:94:0c:26:63:70:4e:b6:48:
         77:53:40:fd:69:0a:2f:6f:02:b0:a3:cd:d6:97:6e:ab:b1:b1:
         49:d4:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:39 2026 by rpki-client