Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
File:                     tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json)
Hash identifier:          QIa7+zfqtfoan/IlUjRWFCXGO+LQz/J4ULYvADz5zpc=
Subject key identifier:   49:A0:4E:7F:2C:8E:71:E3:4F:92:C8:21:79:66:0D:81:E0:F1:01:ED
Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA
Certificate issuer:       /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
Manifest number:          012F
Signing time:             Thu 19 Feb 2026 03:58:28 +0000
Manifest this update:     Thu 19 Feb 2026 03:58:28 +0000
Manifest next update:     Thu 26 Feb 2026 03:58:28 +0000
Files and hashes:         1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: Sh5MLaYzbd18HQ+Sk87LPBWQ4+Ogq67xEgSUQutQmyY=)
                          2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: qvhByE3oiLELsQTu9SaN/ARZ+azzx+zT+u1j1qLqciY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA
        Validity
            Not Before: Feb 19 03:58:28 2026 GMT
            Not After : Feb 26 03:58:28 2026 GMT
        Subject: CN=69968a64-961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:46:7c:d4:8d:2d:72:c4:87:11:20:0a:d9:
                    8b:d9:e9:29:43:84:3a:46:52:16:25:cf:19:1d:cf:
                    1b:c3:64:bc:67:52:c1:cf:b1:24:5b:85:81:78:8e:
                    b4:da:d7:d9:2e:56:0d:5c:97:01:9d:37:d8:a8:e7:
                    57:d7:6d:d4:df:a3:f7:05:98:18:24:ab:55:85:35:
                    ad:bd:f2:be:65:81:a8:6b:54:34:60:70:38:49:e0:
                    ed:5f:5a:c3:ef:47:87:76:b4:0c:20:a1:0a:b2:5f:
                    4e:2e:19:d7:47:2f:31:3d:d5:dd:52:8f:c2:e7:e8:
                    36:cf:33:12:2b:a1:b3:53:0e:20:3f:cd:e5:27:c8:
                    e1:84:d1:cc:b1:cf:6f:bc:76:43:63:6f:e5:fe:11:
                    fb:6c:4d:24:56:de:7c:52:46:54:22:86:ad:1c:f9:
                    7e:ea:92:9b:a1:55:d6:c7:16:46:88:36:a0:de:73:
                    e3:56:f6:0a:8e:a4:28:19:31:9c:9a:bc:64:ec:d1:
                    52:ab:55:5f:d6:96:ac:99:c8:da:de:08:95:32:b9:
                    6b:76:98:51:2a:82:d4:4d:a2:a8:d9:43:55:61:b9:
                    bb:8b:72:ee:da:f5:84:0d:c7:83:8b:1b:0c:b9:f5:
                    64:66:8e:bb:7a:57:f1:4a:e6:e4:72:79:84:29:46:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:4E:7F:2C:8E:71:E3:4F:92:C8:21:79:66:0D:81:E0:F1:01:ED
            X509v3 Authority Key Identifier:
                keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:88:cd:01:b0:62:46:ec:89:1c:73:02:ee:b9:c5:4c:59:
         aa:8c:ca:83:c7:e9:8b:52:06:22:4e:7e:96:2e:2b:8c:2f:94:
         15:c2:17:c4:62:1d:f1:1f:1d:90:42:8b:a6:36:35:60:54:b5:
         96:bf:ae:6d:55:57:83:66:3e:e5:3d:2a:d9:07:71:41:70:87:
         4b:9b:05:09:15:74:98:48:6f:70:90:c6:c7:97:3d:88:ff:cf:
         90:0a:82:e2:a9:70:4b:ab:c0:5e:c5:a1:2a:fb:6b:83:70:56:
         ed:34:0b:5d:fe:7b:3a:cf:2d:2f:7a:2f:c5:97:20:ee:82:8f:
         1e:ca:60:ea:ee:e6:05:7f:d2:09:8f:20:ec:5f:73:2d:ea:a6:
         9e:f9:54:9d:f0:41:f3:1b:b6:41:61:3f:1d:87:67:42:08:be:
         7e:6b:97:91:73:92:50:7a:ea:8e:9f:8d:c4:52:92:66:b3:5b:
         17:e5:6f:e7:2a:89:35:b1:da:12:3c:0e:ea:07:33:8e:4a:57:
         a1:a3:cd:3d:33:4a:aa:8f:2c:c7:ac:c3:55:30:d3:5b:c1:96:
         df:de:1b:61:d9:63:cc:7e:12:c1:6e:4f:47:48:12:ae:f5:d5:
         2a:17:50:6e:3b:d8:07:e0:1c:6f:1d:9d:80:4f:83:6b:bd:c5:
         18:5a:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:52 2026 by rpki-client