Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
File:                     LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json)
Hash identifier:          E5uZm+nxKYtpIVjWF3BCfMlEQuZ+oTKnGdyzy6No4Yc=
Subject key identifier:   7D:B4:A7:B7:D5:02:5D:98:4D:44:14:D8:47:EE:60:EC:23:F9:31:09
Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0
Certificate issuer:       /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
Certificate serial:       0BC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
Manifest number:          0BB8
Signing time:             Mon 02 Mar 2026 01:38:03 +0000
Manifest this update:     Mon 02 Mar 2026 01:38:00 +0000
Manifest next update:     Mon 09 Mar 2026 01:38:00 +0000
Files and hashes:         1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: pTJoTlJ5/uq4V7AZwYi2uy7qsulreEwja6l4EP5xO08=)
                          2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: ZJ2vN4ORbvna0D0Yqlj8XNP78COyDtoGq6tfy7d5TK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl
                          rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010 (0xbc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0
        Validity
            Not Before: Mar  2 01:38:00 2026 GMT
            Not After : Mar  9 01:38:00 2026 GMT
        Subject: CN=69a4e9fa-8496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:be:7c:0a:3b:b2:77:16:5b:6c:b2:0f:c6:
                    d3:ee:54:9c:ee:d7:ac:6f:67:5c:ab:fb:79:00:36:
                    13:82:91:21:1d:d1:51:02:2e:2b:05:6e:ff:c6:0c:
                    ed:f9:96:cc:28:3e:63:0b:2b:f8:63:25:bf:e6:13:
                    d6:0d:ac:de:cd:54:e8:5d:d3:c6:73:81:86:ac:bf:
                    d7:bf:0c:fe:13:1e:a3:ea:e8:3a:67:85:00:cf:56:
                    94:30:33:24:df:64:e2:86:b5:70:e3:99:f2:28:07:
                    f2:b7:9c:be:cf:95:16:ec:58:e4:07:22:ca:69:1d:
                    57:99:96:33:46:dd:14:d2:25:74:d6:52:a7:a3:88:
                    f1:da:7d:f3:a0:b4:4e:5f:0b:da:ae:29:23:75:75:
                    72:22:4e:c3:da:a6:c5:7c:c2:ab:37:44:a3:b4:4a:
                    a2:13:f3:ac:f3:00:a8:aa:47:22:35:4b:07:33:4d:
                    a4:32:69:ba:09:e2:c2:cd:51:86:d8:fa:ab:d2:1f:
                    a5:18:c4:3a:9b:e8:bd:d1:7f:32:37:1c:bb:f9:02:
                    9e:7e:23:2b:d4:f1:2c:6c:6f:ea:5c:2f:e5:b9:7a:
                    65:98:4e:3b:bc:8c:bb:97:b2:19:4f:da:13:ae:01:
                    0e:0e:84:9e:06:75:49:15:18:1e:8f:51:49:a3:e9:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B4:A7:B7:D5:02:5D:98:4D:44:14:D8:47:EE:60:EC:23:F9:31:09
            X509v3 Authority Key Identifier:
                keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:82:d3:fd:5b:11:72:29:94:20:52:c9:31:b2:12:31:71:
         58:b1:b0:57:db:03:aa:78:a5:00:64:87:39:66:d8:03:bf:36:
         54:4b:9c:02:06:90:dc:c3:6a:7e:db:1c:f6:bd:32:be:22:86:
         29:b6:dc:a6:46:32:f4:43:15:29:0c:30:f8:d9:59:eb:04:f8:
         d7:93:0b:43:68:37:a0:0a:7c:94:9b:88:b7:64:dd:03:1b:94:
         ea:05:f1:5e:67:7c:08:5b:92:ea:58:c9:dc:9d:1b:b3:fc:bf:
         e0:c4:c2:29:80:b4:8b:5a:88:f9:07:8c:f8:90:31:6f:04:de:
         3b:b1:66:5c:f9:cc:4d:1a:77:db:95:aa:04:88:1e:02:73:32:
         e5:b7:08:67:fe:e8:78:41:ba:d9:1a:26:ad:30:8b:c5:6c:a4:
         4d:77:cc:29:21:7a:bb:c8:44:ca:ff:e3:be:89:00:ea:5a:02:
         89:c1:fa:70:34:c8:c7:ba:5b:d4:a7:b4:29:ae:8c:91:fd:1c:
         ef:87:a6:9b:b1:23:b8:86:fe:de:fd:01:ae:8a:39:c8:04:86:
         bc:ca:e1:46:ae:68:e5:1c:59:0a:b1:64:8c:54:43:84:15:d5:
         0c:aa:cd:04:0c:9e:1c:47:0d:db:95:d8:ec:33:b6:09:be:98:
         e4:b6:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:13 2026 by rpki-client