Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File:                     T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier:          rMqdnofQqxAiDC6zMX2s7SeQeYFL4KJZ67T/b7w5mOU=
Subject key identifier:   59:D1:19:27:EE:3F:43:6B:AD:19:36:66:CB:63:19:C9:3B:6D:C6:86
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer:       /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial:       0D2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number:          0D23
Signing time:             Sat 28 Feb 2026 18:12:43 +0000
Manifest this update:     Sat 28 Feb 2026 18:12:42 +0000
Manifest next update:     Sat 07 Mar 2026 18:12:42 +0000
Files and hashes:         1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: b9De4zkzH03/K0WN6WRq0Bld+TpSnnCE9sANvm/Yj2c=)
                          2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: gFJBvypJ6w7CcfisSuC1dnQrbhBGZ18c0grQeyJx9GM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
        Validity
            Not Before: Feb 28 18:12:42 2026 GMT
            Not After : Mar  7 18:12:42 2026 GMT
        Subject: CN=69a3301b-8bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:4c:3a:bc:da:f6:10:e3:a7:61:e4:00:9c:
                    fc:c9:07:ad:ae:97:57:d5:fb:8a:54:78:04:b5:b9:
                    5e:7f:d7:03:2f:cc:d6:bb:dc:72:ec:ef:35:b6:b4:
                    3b:40:db:f7:c9:5c:0e:63:c3:4d:30:f6:74:25:6b:
                    8b:8f:23:42:c5:96:54:37:69:ef:7f:3c:4c:39:f1:
                    29:14:c7:4d:f8:bb:bf:29:48:c5:b2:38:d4:27:c8:
                    d1:7c:bb:d0:df:9c:65:1c:86:9d:cc:fc:34:9c:1b:
                    09:63:97:39:f3:66:89:e3:62:6c:79:eb:08:70:66:
                    eb:b5:a6:20:9c:44:8f:22:8c:23:dd:16:36:d8:e7:
                    9c:c2:46:6f:79:55:df:c8:bc:e7:85:67:94:db:d9:
                    05:12:36:6d:8a:d4:0d:c0:9f:8f:3e:f0:08:d1:47:
                    72:a3:01:12:23:ac:a1:62:55:1d:dd:97:b3:9a:9c:
                    eb:41:b7:8e:aa:1a:7d:1a:74:23:7b:7a:96:c9:2f:
                    ed:47:c3:4a:59:7b:33:ac:b4:01:c4:59:74:8e:4a:
                    74:d8:d5:eb:24:79:50:6a:d8:d6:5a:41:22:c5:de:
                    7b:09:7f:56:44:78:39:24:de:d5:23:50:35:b6:8a:
                    30:d4:16:59:9c:22:c3:f9:81:70:5e:91:b9:7f:05:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:19:27:EE:3F:43:6B:AD:19:36:66:CB:63:19:C9:3B:6D:C6:86
            X509v3 Authority Key Identifier:
                keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:32:ae:2b:d7:ba:3f:39:1f:74:92:46:db:a2:4f:2f:ae:
         a9:21:14:eb:80:34:f1:30:90:6a:8d:dc:3f:17:38:45:37:ff:
         b1:5f:4f:3a:5c:87:b4:36:ff:bf:3a:d8:86:be:a0:90:a4:9d:
         2e:af:31:67:1a:41:cd:95:e7:95:3b:d1:77:8b:1f:03:88:8e:
         47:f8:31:30:4b:38:5e:54:01:26:e7:11:fe:d7:8b:3c:e3:e2:
         78:89:0f:3e:d3:b8:6b:40:ae:55:ed:0b:1c:12:5f:e9:bc:1d:
         93:77:32:e3:18:f7:1b:98:81:73:e7:9c:28:c0:fe:23:c1:54:
         ce:1a:c8:d9:b8:e2:13:75:2c:8b:81:f0:8d:c7:bd:7d:2e:b6:
         14:06:36:4c:1f:56:b9:2d:a3:63:15:77:9e:fa:8e:50:7f:42:
         34:68:fe:a4:44:7b:65:b1:81:cc:70:4a:1f:a7:69:cc:d2:80:
         b4:b7:6d:cf:23:1f:fa:99:83:54:7a:72:3f:72:f8:c6:12:64:
         b3:0d:b1:77:41:4c:0c:4c:f2:58:cd:c1:78:cf:45:e2:e7:3d:
         68:43:3f:2f:82:28:ae:92:57:8c:15:43:81:57:80:8a:fd:71:
         fb:1d:9e:c8:99:a5:a8:96:a1:7d:79:c0:86:1a:92:56:57:2e:
         31:10:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:17 2026 by rpki-client