Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          dQEheqqzBNa7yaBsoujcm/VpxicCjP0B7wgyI8KeXbk=
Subject key identifier:   27:33:32:40:0E:2D:1E:BD:41:35:A9:39:08:28:F8:68:83:42:2E:1D
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       06A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          06A0
Signing time:             Mon 02 Mar 2026 02:31:02 +0000
Manifest this update:     Mon 02 Mar 2026 02:30:59 +0000
Manifest next update:     Mon 09 Mar 2026 02:30:59 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: BhPC6CfDkaND/Hd6d/93SqJSreSrXkE/D9ss9dFy+PQ=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: afHu4buY6ctOfF9zVksvGKKUaf0i70OOaL5AQCNs+JU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Mar  2 02:30:59 2026 GMT
            Not After : Mar  9 02:30:59 2026 GMT
        Subject: CN=69a4f665-e7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:4c:bd:33:f8:f3:68:71:25:62:92:b3:b8:
                    49:19:aa:fd:da:26:e4:cb:11:2b:24:c8:da:68:d5:
                    8b:11:41:76:a6:a7:86:0a:98:c6:19:0c:10:19:41:
                    be:8d:09:19:9d:a2:1c:e5:5b:2b:f6:6e:08:36:f0:
                    a9:35:1f:6f:53:7b:c2:1c:ff:27:4f:ee:bf:da:52:
                    b3:ad:65:a7:a7:54:c9:5f:1f:63:5a:16:33:7e:99:
                    6e:86:26:fb:18:07:ed:3f:1b:6b:23:e5:64:45:71:
                    6d:44:47:cc:d9:c6:90:00:16:ac:4a:e1:8d:f7:c4:
                    76:3f:39:9d:34:b8:94:66:2d:7b:4c:b3:5a:32:79:
                    88:5b:c9:8a:6f:c1:6c:a3:e3:5b:6b:1d:0d:45:a9:
                    bc:82:f1:a5:d1:af:9d:a8:00:7a:8e:4c:ac:ce:39:
                    6c:07:bb:3f:2f:f1:ba:95:5c:31:66:b8:f1:4a:e5:
                    49:da:37:c2:8f:48:37:e3:a9:cd:dc:65:8b:74:bb:
                    6f:0e:b7:0a:68:dd:80:bc:99:14:af:bb:c8:34:97:
                    c9:71:84:b5:fc:92:71:4d:4f:e5:10:6b:d1:a4:00:
                    f4:21:29:54:91:61:91:9b:1c:03:b7:26:57:24:02:
                    2f:50:c2:51:95:b4:bf:2d:83:84:a6:78:d7:93:f8:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:32:40:0E:2D:1E:BD:41:35:A9:39:08:28:F8:68:83:42:2E:1D
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:50:31:af:a2:cb:06:30:68:af:16:29:2d:01:2d:57:b2:54:
         bf:42:29:73:55:4e:da:ef:02:b9:ea:b5:32:56:fa:80:b8:fc:
         5b:9e:c3:d5:1a:52:64:17:ee:1d:e5:c0:47:f1:ac:73:52:bd:
         be:ab:5f:dc:a2:05:58:61:ab:be:7b:4a:b7:36:82:37:3d:37:
         cb:7a:ad:e3:5d:05:6e:2b:10:57:22:79:ab:81:6b:48:2f:93:
         14:a7:42:94:41:c0:d6:f7:8d:a7:88:3c:cf:e6:ba:7b:c9:07:
         18:89:43:9c:b0:c9:37:b7:1c:1e:cd:ea:be:87:1e:37:1f:c3:
         d6:e9:96:e6:3d:f5:2f:f4:64:ee:35:96:44:2c:31:7a:a9:87:
         02:b1:51:d3:b4:ee:8b:22:a8:51:bc:81:d7:1b:40:69:ec:f3:
         e5:f8:d9:21:05:d6:75:7c:3c:ee:e2:be:27:3a:be:d1:a0:0d:
         81:90:c3:78:48:17:6d:04:ce:9b:c9:89:23:bc:06:cb:a1:43:
         ce:1c:86:54:c1:e4:61:c8:92:ab:f6:85:db:b3:1a:04:01:80:
         65:9a:ed:b6:4a:24:8f:ed:b2:e6:3f:19:b4:a6:9e:5b:7c:a6:
         01:9d:07:1f:8c:80:df:58:79:0f:b8:ec:b7:e9:7d:47:67:4c:
         8c:76:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:25 2026 by rpki-client