Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
File:                     LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json)
Hash identifier:          o7TgOb9nKGmuNaD9nWBeP7RDCQXqaG+9Hcop2HZWHwM=
Subject key identifier:   7E:6E:AF:C9:69:6F:65:CE:66:F7:F3:A4:01:EC:F9:79:00:F7:99:AE
Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1
Certificate issuer:       /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
Manifest number:          01F0
Signing time:             Sun 01 Mar 2026 04:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 04:00:32 +0000
Manifest next update:     Sun 08 Mar 2026 04:00:32 +0000
Files and hashes:         1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: pEOxRlakZ9Soa9TGXsH2/il8U6dCer9m9d4OtIJs1vw=)
                          2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: w2G6mnACs8k8ArQ9Khbqaqk7miaXJQo8wHP+q2xbHko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl
                          rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129209, serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1
        Validity
            Not Before: Mar  1 04:00:32 2026 GMT
            Not After : Mar  8 04:00:32 2026 GMT
        Subject: CN=69a3b9e0-6686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f4:e0:e7:e6:79:0c:55:80:05:c8:4f:03:5d:
                    68:d6:e3:a7:24:a4:57:11:82:bc:c4:26:5c:eb:87:
                    1e:9b:5b:d7:b8:8e:98:22:13:e1:75:83:9d:cd:54:
                    34:42:46:6a:fd:18:c2:b0:5b:a8:85:d6:d7:99:d0:
                    50:27:bf:8f:21:2b:e1:b6:68:03:e4:f3:a9:3f:3b:
                    e1:f2:f2:7a:c3:f9:72:49:5c:6a:4d:8a:ae:8b:c4:
                    42:9f:46:26:f4:90:49:00:84:64:55:20:0a:72:20:
                    c3:79:cd:6b:4a:f0:e9:dd:a8:57:b7:d6:12:32:b4:
                    8a:c6:b2:dc:7d:14:cb:4a:e3:5c:92:1f:7e:1e:12:
                    47:39:2a:7d:62:d0:19:20:37:2a:38:94:ae:53:d9:
                    b4:e9:14:99:b1:ce:4c:fb:30:5f:79:36:7f:e8:ec:
                    90:f1:38:77:3a:af:62:7b:b2:00:84:c4:db:79:08:
                    1f:63:93:9e:92:68:1d:7d:b3:b6:01:65:f6:47:5b:
                    17:09:69:29:e6:47:2d:d2:6a:1f:a6:7c:57:7f:2f:
                    ac:fa:de:3f:74:3d:5d:38:51:5b:59:58:8e:93:d8:
                    ab:30:c6:bc:a4:98:9e:28:ab:de:3d:1e:b0:6a:fa:
                    b5:f6:89:c2:62:08:ac:9d:a4:d9:eb:04:b4:13:b9:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:AF:C9:69:6F:65:CE:66:F7:F3:A4:01:EC:F9:79:00:F7:99:AE
            X509v3 Authority Key Identifier:
                keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:ba:5b:b3:50:8c:4d:cb:51:ce:51:05:c8:96:8f:b5:1a:
         26:04:ff:e3:b9:4b:91:12:95:1b:c2:90:e1:d7:54:8e:6f:cd:
         23:82:ee:fe:cd:41:69:2f:13:c8:58:cc:2d:f7:b8:be:6d:48:
         3c:43:b5:62:36:1a:cd:8f:c1:c3:b7:f5:5b:75:ac:fd:f0:42:
         5e:98:e0:1d:03:c4:2d:c1:a6:c4:b0:36:79:46:58:09:c3:9a:
         ad:61:90:74:08:af:95:3d:02:55:12:50:a5:c1:82:27:85:04:
         cc:2f:0a:db:9b:3e:d7:82:f3:e1:fe:91:53:04:a8:72:82:fa:
         22:db:22:d4:9c:39:34:50:06:18:bb:eb:90:c3:e9:6f:8d:13:
         dc:84:14:95:6e:d5:bc:f9:6f:de:e7:d1:02:48:35:08:95:60:
         9d:32:72:04:ee:dd:df:91:51:17:c3:1a:48:da:19:4a:33:2f:
         32:65:26:fc:a7:74:d4:10:16:b6:bc:c7:27:a1:7a:94:cf:cd:
         a5:f8:81:09:bd:69:7c:a3:9a:5e:2c:97:f2:3f:72:ad:6d:e7:
         9b:54:1b:49:5a:df:58:5c:97:17:78:3d:ca:03:a5:9c:bc:9d:
         3e:ae:25:46:fe:13:41:a2:c4:34:24:6e:47:1c:a7:a3:56:58:
         35:8e:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:42 2026 by rpki-client