Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File:                     LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier:          SVYYuRNzIX67jWiMDu7YfAyxSsqgE6ucUFfaCpYf3L0=
Subject key identifier:   75:0A:C3:34:55:24:54:80:AF:00:15:93:5A:C3:ED:97:B0:CD:8B:5A
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer:       /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number:          F6
Signing time:             Sun 01 Mar 2026 23:49:11 +0000
Manifest this update:     Sun 01 Mar 2026 23:49:09 +0000
Manifest next update:     Sun 08 Mar 2026 23:49:09 +0000
Files and hashes:         1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: AdKPwVqQLsqP98hnz2fjzjqU31iMhpbMUqNQFGOYwuU=)
                          2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=)
                          3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
                          rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
        Validity
            Not Before: Mar  1 23:49:09 2026 GMT
            Not After : Mar  8 23:49:09 2026 GMT
        Subject: CN=69a4d077-fcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:57:76:25:19:a3:57:c9:65:7d:dd:0d:eb:
                    27:45:4c:a3:68:d9:7d:11:3f:c3:14:ea:12:2d:9a:
                    aa:9a:5e:e3:22:21:d5:2a:84:b4:9d:df:52:e3:f6:
                    bf:d8:6e:8f:de:57:d1:87:c0:2a:7d:ed:47:08:b3:
                    0d:5f:9f:a1:8f:77:9a:cc:79:9d:11:7a:03:2f:e5:
                    c8:7c:80:af:d5:90:ff:04:60:c4:93:2b:2d:6b:cd:
                    fd:de:99:6b:a2:6e:38:3c:c3:1a:1f:71:fc:13:76:
                    91:73:de:72:15:62:a4:66:b2:b4:8b:4b:d4:ec:b0:
                    47:a0:77:9f:fa:ba:ef:2d:f5:f2:b8:4d:3d:10:6f:
                    44:4a:a9:cc:13:b4:fd:89:28:2d:12:58:b0:a4:40:
                    19:a4:68:12:1d:25:c2:1f:0a:49:8a:66:fd:5e:f5:
                    75:c3:f4:21:91:7c:a2:c4:97:95:aa:64:5a:67:2d:
                    71:9e:23:a6:7c:72:35:2d:89:80:14:6d:83:52:0b:
                    2c:4c:10:7e:91:bf:61:81:ad:14:04:2c:45:e3:f6:
                    57:a4:37:18:20:52:39:a0:b8:33:31:20:29:98:f5:
                    fe:4c:93:63:12:35:07:a8:6c:c2:aa:b0:ae:83:d7:
                    bf:8d:fa:64:17:a3:98:11:84:ac:c8:0b:d0:b1:0a:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0A:C3:34:55:24:54:80:AF:00:15:93:5A:C3:ED:97:B0:CD:8B:5A
            X509v3 Authority Key Identifier:
                keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:fd:41:51:4a:18:5c:29:d1:73:b5:bd:28:cc:e5:56:27:
         41:28:ec:86:45:68:81:32:77:06:92:24:7a:54:65:53:b2:38:
         3b:74:06:3e:a1:e9:80:86:07:70:07:8b:96:8e:7d:3c:a0:23:
         64:58:00:8f:4e:be:09:a4:23:5c:dd:32:c2:2f:32:7e:73:28:
         e5:f2:68:d0:ba:87:21:12:52:76:ae:9d:72:52:23:60:ed:7c:
         62:25:4f:e7:b2:1e:3a:9a:ff:c8:d6:f1:58:fe:1a:10:18:eb:
         2b:31:eb:36:c0:29:85:d5:b3:5a:de:3f:90:53:d0:e2:b0:9f:
         2c:d9:ef:ea:6f:a6:f5:40:cf:d7:7e:3e:27:7d:87:87:ce:7a:
         e3:cd:d4:2e:cb:3d:10:c8:d2:80:a0:79:ec:38:a1:1b:bf:67:
         76:b7:3f:05:33:19:96:e6:9e:94:90:09:8b:c3:d4:31:cc:f4:
         f8:58:df:2b:bb:a6:9c:1b:44:09:53:11:80:95:f9:50:d8:bc:
         f0:54:47:df:7a:22:8f:ed:4f:ad:b6:1f:fe:ee:e8:f6:b5:00:
         15:26:0b:17:c6:52:54:16:3a:27:af:75:79:d5:d9:e8:eb:c5:
         02:2f:2f:3d:1b:2f:46:6e:37:d7:9b:41:96:ad:08:8e:ef:74:
         aa:40:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:18 2026 by rpki-client