Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
File:                     T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json)
Hash identifier:          qlrkj21dRP1EpP8AUp9y73Q+bIYIzda4qr9pytoly0s=
Subject key identifier:   D7:D0:4E:45:01:62:44:FF:13:CB:E9:9D:6C:85:E9:47:51:95:46:80
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Certificate issuer:       /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial:       0D41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
Manifest number:          0D37
Signing time:             Sat 04 Apr 2026 17:54:27 +0000
Manifest this update:     Sat 04 Apr 2026 17:54:26 +0000
Manifest next update:     Sat 11 Apr 2026 17:54:26 +0000
Files and hashes:         1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: W24oDlznGvgIGi7eNJzSaldvey7bXE3Io/m6ir0tpbA=)
                          2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3393 (0xd41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
        Validity
            Not Before: Apr  4 17:54:26 2026 GMT
            Not After : Apr 11 17:54:26 2026 GMT
        Subject: CN=69d15053-dc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:80:92:e6:bc:16:e7:ca:17:ce:7c:84:e9:
                    6c:bd:5b:32:ef:93:03:cd:ce:fe:57:2e:7e:36:a8:
                    38:e1:d9:54:f8:30:15:50:e1:08:85:1c:a4:de:68:
                    07:db:3c:25:5b:37:c3:9c:d3:23:b0:29:2d:7e:4f:
                    d9:6d:67:be:80:b7:f7:05:87:66:52:3d:9e:f5:f7:
                    24:02:e3:5c:f1:46:d4:b5:4e:4b:47:69:85:0f:f0:
                    13:43:91:1f:4a:0d:1c:87:fb:71:81:c3:e2:54:1b:
                    7b:4d:72:a3:a7:16:d0:1e:15:e6:01:61:b2:0e:d4:
                    fe:9c:93:97:b5:9d:f2:a1:29:89:b0:ab:e0:a8:5f:
                    f3:18:6c:d6:1e:8b:a5:77:b0:f8:57:6b:6b:c7:4d:
                    af:e3:43:e0:cb:4b:1e:cf:57:1c:2d:9a:20:86:1e:
                    79:bc:85:54:82:cc:13:ab:e1:61:1a:47:cb:b2:9b:
                    b1:35:7d:68:ac:48:fd:71:5b:fd:04:16:90:1f:8c:
                    1f:93:c5:0e:7f:e1:5a:b7:47:e6:87:45:c3:f8:70:
                    08:c4:bb:ec:8e:98:99:3a:8d:c9:6d:40:09:0e:12:
                    52:24:4f:9a:4f:9b:a4:8b:46:ea:b9:a9:0c:a4:e0:
                    38:03:14:2a:59:f0:d3:ae:53:2f:f0:9f:82:31:84:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D0:4E:45:01:62:44:FF:13:CB:E9:9D:6C:85:E9:47:51:95:46:80
            X509v3 Authority Key Identifier:
                keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:5d:1c:69:cb:23:9a:2f:7a:22:e2:e4:bf:b9:2a:a6:f5:
         24:8e:da:59:d0:4c:dc:cc:e1:08:be:2c:3a:be:f6:ec:77:07:
         38:e5:3a:06:a2:26:b3:07:a6:f4:32:f4:a1:7f:9e:a6:c2:44:
         de:ef:ad:a3:70:e3:f1:7c:cb:91:40:4d:d3:62:54:6a:03:26:
         25:c7:0d:8f:9b:47:09:49:2a:9e:cd:d1:62:ea:14:aa:c7:7a:
         87:e5:84:df:b7:f6:2f:aa:40:ca:56:3c:d8:38:ab:90:f2:4d:
         91:9b:b8:7a:47:a3:02:66:9e:d5:b1:67:a7:cb:21:ff:be:d5:
         fb:12:3e:2c:f1:56:9c:67:ea:fa:25:14:29:9a:5e:4a:cc:54:
         32:5a:9c:bc:5c:a2:ae:83:54:10:d7:dc:4e:e6:12:79:d6:6f:
         33:8d:80:fb:8b:91:1d:9c:bd:a8:ea:9d:91:4b:7d:33:cc:7b:
         c7:9b:76:12:cc:da:be:a1:61:56:da:a1:e1:d5:ee:98:03:c5:
         b3:be:75:11:4c:d9:5b:6c:a0:55:16:a9:22:1c:04:dc:63:5f:
         9d:3e:0b:86:5d:78:b0:22:a8:6f:89:93:bc:c8:7f:bd:d1:98:
         c3:20:34:13:d6:db:3e:89:51:c1:ed:bf:ff:2a:42:7c:0e:0f:
         c9:7c:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:42 2026 by rpki-client