Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
File:                     l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json)
Hash identifier:          5PvtZ7Uc7LR54MmUKvditOc3kkwt7vGOTXAaqoz+ucQ=
Subject key identifier:   24:F9:08:41:45:63:73:09:A8:A6:1B:3D:96:07:61:3C:97:37:E7:6A
Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4
Certificate issuer:       /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
Certificate serial:       142F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
Manifest number:          1423
Signing time:             Sat 04 Apr 2026 16:47:43 +0000
Manifest this update:     Sat 04 Apr 2026 16:47:42 +0000
Manifest next update:     Sat 11 Apr 2026 16:47:42 +0000
Files and hashes:         1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: vwKFY+yPYDiOTSbOXQwXb/1d+pG6XNGiJnXIdux+yj8=)
                          2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: AjTT+lsAXZJ+mpwW3X1wugvMUDDULjBU49kW3fhASOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5167 (0x142f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4
        Validity
            Not Before: Apr  4 16:47:42 2026 GMT
            Not After : Apr 11 16:47:42 2026 GMT
        Subject: CN=69d140ae-f186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:00:6e:86:56:1e:33:88:b3:e3:c9:b5:93:
                    f8:60:64:7d:52:4e:04:a4:e3:0f:ce:18:96:ae:5f:
                    70:83:16:9e:81:2c:37:ae:c8:fa:88:32:2a:d6:58:
                    05:c0:8e:c4:3f:62:45:7f:a0:1f:72:2f:5b:75:ec:
                    7e:d0:58:cf:43:a2:ff:08:91:fe:0a:1e:6c:f1:5d:
                    dc:60:1c:58:67:51:8b:0e:cb:34:56:aa:9e:35:66:
                    c1:84:69:22:12:b3:da:12:8d:f9:01:60:4e:32:96:
                    72:65:8d:25:3b:7c:51:e4:cc:fd:6f:ea:23:79:9d:
                    61:4b:1a:4f:20:2e:98:68:a5:7a:5a:7d:2d:22:40:
                    22:3f:28:14:c6:25:aa:91:ae:e8:3a:29:1c:29:c8:
                    12:65:d9:39:d5:86:26:f7:51:07:b8:b9:a4:ba:c0:
                    ff:4a:33:c3:94:a8:2a:5a:a3:18:85:a1:9b:5b:69:
                    fe:0b:a4:59:51:aa:f3:d3:70:2b:5e:66:c6:8f:88:
                    02:eb:47:b0:03:cd:a8:43:6b:92:53:3f:ab:14:fb:
                    e8:8f:30:ab:3e:e1:56:72:60:f3:c9:b4:71:b3:b1:
                    dc:b9:8d:42:e4:73:b5:51:72:02:b9:d7:1d:17:81:
                    6d:f3:f1:19:61:f0:81:c0:42:20:d7:07:22:0b:29:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:08:41:45:63:73:09:A8:A6:1B:3D:96:07:61:3C:97:37:E7:6A
            X509v3 Authority Key Identifier:
                keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:21:12:0d:10:82:67:4f:d8:aa:14:fd:35:de:c1:11:c1:5c:
         ee:01:a8:40:ed:92:4f:6d:3b:49:cd:03:d3:e7:7c:05:28:ea:
         d0:c6:3f:7a:48:0b:17:2e:66:f9:50:93:86:c4:9e:95:8b:49:
         c1:d1:b3:5f:e0:cf:d2:b6:36:f9:ae:56:15:93:74:33:ca:8e:
         63:83:cf:eb:97:fc:81:02:5d:b3:a7:a4:d1:f1:f7:a3:0e:3d:
         07:e6:a8:aa:18:8d:87:38:48:80:c2:aa:37:38:83:c2:8d:26:
         f6:cb:09:ae:cd:bd:99:79:f8:eb:18:39:cc:5c:21:3b:d3:36:
         16:da:60:e9:c5:e7:ad:37:3d:72:51:9b:18:de:5a:4b:99:09:
         4d:4c:e6:54:67:ee:3c:e8:43:cd:4a:d4:54:05:1f:a0:cb:68:
         8a:be:08:99:b1:f1:0a:fb:5b:2c:68:55:14:17:50:e2:99:d0:
         c1:92:42:fd:c2:ee:6a:38:f0:c9:a1:1c:cc:2a:95:08:21:88:
         06:3b:1d:5e:70:59:cb:a2:9c:ab:e0:f3:cb:d5:b2:6e:c6:48:
         f6:cb:33:21:be:73:f2:52:2e:8c:77:cc:7e:3b:25:24:a6:82:
         29:60:a0:7d:6a:22:64:5f:18:cf:51:21:e9:82:db:05:3e:be:
         bb:eb:20:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:10 2026 by rpki-client