Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
File:                     LToKI8WbTfbb4BpMXzt8i___cA0.mft (raw, json)
Hash identifier:          OIgHiyuL4dorgbPp/hxSif8u2A4FWEyjV35cUK98XBI=
Subject key identifier:   86:CB:DE:6C:1B:13:FB:D8:57:6C:20:5E:70:D4:46:31:00:97:1B:AE
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Certificate issuer:       /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
Manifest number:          02A3
Signing time:             Sun 01 Mar 2026 02:21:38 +0000
Manifest this update:     Sun 01 Mar 2026 02:21:38 +0000
Manifest next update:     Sun 08 Mar 2026 02:21:38 +0000
Files and hashes:         1: LToKI8WbTfbb4BpMXzt8i___cA0.crl (hash: LGBhRCpTsMlsStEkfqD9fOjO/OuE7FPRGejAD/seL/Y=)
                          2: C202E82834B611ED815AAB32C4F9AE02.roa (hash: g8vcclbbREYqZXoYauTIQjOb/RVyOM/9dHk3sz7i1Lc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
                          rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
        Validity
            Not Before: Mar  1 02:21:38 2026 GMT
            Not After : Mar  8 02:21:38 2026 GMT
        Subject: CN=69a3a2b2-d463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:ce:b4:71:cb:c5:5d:7b:46:ea:d8:24:fd:
                    3e:c7:04:5f:49:6a:8a:35:c2:a7:a4:93:ed:93:f1:
                    86:2f:75:57:dc:e2:5c:09:03:a6:9a:57:c2:94:dc:
                    d3:33:81:50:d6:bd:c9:0c:aa:10:87:72:16:0d:30:
                    34:0b:2c:dc:59:8d:de:e2:61:8a:35:04:cd:5c:4f:
                    77:f1:45:f3:49:3a:df:3b:a7:9e:cb:a3:e1:13:c4:
                    a2:0b:f4:d2:d3:71:b1:76:e1:ef:fa:3e:61:b7:5f:
                    85:25:01:e7:ac:86:3e:d6:ff:73:4e:38:b4:64:ec:
                    97:a6:9d:5b:22:73:30:96:e3:3f:36:54:c6:ac:22:
                    0c:a4:44:83:8f:57:7d:a8:3a:ef:a5:a8:5f:c2:92:
                    d2:06:33:84:fd:a3:7d:cf:df:3b:f5:35:7e:e5:bd:
                    cd:33:07:af:f5:32:e5:22:20:88:76:63:53:0c:62:
                    bb:84:42:4a:73:85:93:5d:d9:4e:8c:78:91:9d:ff:
                    79:4a:72:77:48:fa:31:86:06:97:c5:42:e6:52:83:
                    14:84:ee:a0:2e:be:86:79:98:55:f9:9b:08:83:b9:
                    ab:c0:0f:f0:82:7c:d2:69:0a:a6:76:ab:1d:74:07:
                    84:e8:de:6b:bd:ab:a7:47:0e:93:e9:47:f9:44:31:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CB:DE:6C:1B:13:FB:D8:57:6C:20:5E:70:D4:46:31:00:97:1B:AE
            X509v3 Authority Key Identifier:
                keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:b2:57:6a:8a:12:ea:79:0e:c7:17:33:fa:af:07:a0:02:
         0a:3e:2b:32:2a:38:3b:b7:a2:94:6c:94:09:69:5f:71:f8:de:
         9b:8e:8d:9e:a2:18:f4:b2:34:44:e0:df:3e:ac:0f:33:a6:15:
         ed:15:52:c3:8d:28:16:33:21:f6:73:d5:28:7b:b2:42:a2:b2:
         21:6c:a0:f0:3e:9c:99:41:63:02:b4:19:69:b9:24:97:a9:ae:
         6b:e6:05:06:89:c4:7b:62:61:8f:7d:69:f4:79:a1:4b:0c:34:
         26:da:12:ee:4f:a7:fd:f9:6a:d6:55:3b:e2:6e:e7:41:6f:9c:
         4b:ce:be:00:bd:d8:c1:6d:71:f7:dd:1f:4c:c3:80:35:db:1b:
         f0:7f:7c:98:aa:64:43:f5:ea:97:76:5a:f9:24:d2:ec:98:cc:
         5a:b2:1f:b8:11:8c:b7:1b:88:03:7f:24:00:ed:b5:89:e5:37:
         f7:4e:5c:bd:3d:2e:40:bc:06:79:d0:86:17:24:f0:05:03:0d:
         9c:72:19:51:31:63:e5:dd:d5:f6:42:b8:3a:ad:15:5d:f1:72:
         89:91:33:2e:eb:a0:b4:ff:d9:84:86:05:61:f9:5b:2d:21:78:
         ba:50:8c:12:ac:89:dc:7a:56:74:c4:f6:84:67:65:b6:0e:e5:
         63:0a:69:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQwQkMxMTAvBgNVBAUTKDJEM0EwQTIzQzU5QjRERjZEQkUwMUE0QzVGM0I3QzhC
RkZGRjcwMEQwHhcNMjYwMzAxMDIyMTM4WhcNMjYwMzA4MDIyMTM4WjAYMRYwFAYD
VQQDDA02OWEzYTJiMi1kNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8oDOtHHLxV17RurYJP0+xwRfSWqKNcKnpJPtk/GGL3VX3OJcCQOmmlfClNzT
M4FQ1r3JDKoQh3IWDTA0CyzcWY3e4mGKNQTNXE938UXzSTrfO6eey6PhE8SiC/TS
03GxduHv+j5ht1+FJQHnrIY+1v9zTji0ZOyXpp1bInMwluM/NlTGrCIMpESDj1d9
qDrvpahfwpLSBjOE/aN9z9879TV+5b3NMwev9TLlIiCIdmNTDGK7hEJKc4WTXdlO
jHiRnf95SnJ3SPoxhgaXxULmUoMUhO6gLr6GeZhV+ZsIg7mrwA/wgnzSaQqmdqsd
dAeE6N5rvaunRw6T6Uf5RDHa+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbL3mwb
E/vYV2wgXnDURjEAlxuuMB8GA1UdIwQYMBaAFC06CiPFm0322+AaTF87fIv//3AN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCQy8yMDI0QjQ0ODM0
QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRmYmI0QnBNWHp0OGlfX19j
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUb0tJOFdiVGZiYjRCcE1YenQ4aV9fX2NBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDBCQy8yMDI0QjQ0ODM0QjQxMUVEOUQ3MEVGMzBDNEY5QUUwMi9MVG9LSThXYlRm
YmI0QnBNWHp0OGlfX19jQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKnGyV2qKEup5DscXM/qvB6ACCj4rMio4O7eilGyUCWlfcfjem46NnqIY9LI0
RODfPqwPM6YV7RVSw40oFjMh9nPVKHuyQqKyIWyg8D6cmUFjArQZabkkl6mua+YF
BonEe2Jhj31p9HmhSww0JtoS7k+n/flq1lU74m7nQW+cS86+AL3YwW1x990fTMOA
Ndsb8H98mKpkQ/Xql3Za+STS7JjMWrIfuBGMtxuIA38kAO21ieU3905cvT0uQLwG
edCGFyTwBQMNnHIZUTFj5d3V9kK4Oq0VXfFyiZEzLuugtP/ZhIYFYflbLSF4ulCM
EqyJ3HpWdMT2hGdltg7lYwppzw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:05 2026 by rpki-client